Privacy policy
Effective 20 August 2026 · applies to aipaylist.com
Short version: AIPayList sets no cookies, runs no ad-tech and builds no profiles. We count clicks anonymously, and we only ever hold personal data you explicitly give us — an email address, if you subscribe to job alerts.
What we process, and why
1. Server logs (hosting)
The site is served by Vercel Inc. Like any web host, Vercel processes technical request data (IP address, user-agent, requested URL) transiently to deliver pages and prevent abuse. We do not export or analyze these logs at the individual level. Legal basis: legitimate interest in operating a website (GDPR Art. 6(1)(f)).
2. Anonymous click counts
When you click “Apply” or “Join”, we record that a click happened: a timestamp, which job or platform was clicked, and which section of the site it came from. That's the entire record — no IP address, no cookie, no user identifier of any kind is stored with it. We use these counts to understand which listings people find useful. Legal basis: legitimate interest (Art. 6(1)(f)).
3. Aggregate page analytics
We use Vercel Web Analytics, a cookieless measurement tool: it reports aggregate page views and visit counts without setting cookies, without cross-site tracking and without storing IP addresses in a form linked to you. This is why the site shows no cookie banner — there is nothing to consent to. Legal basis: legitimate interest (Art. 6(1)(f)).
4. Email alerts (only if you subscribe)
If you sign up for job alerts we store your email address and your chosen filters (minimum rate, categories), and use them solely to send you the digests you asked for. Every email contains an unsubscribe link; unsubscribing deletes the subscription. We never sell, rent or share subscriber lists. Legal basis: consent (Art. 6(1)(a)), withdrawable at any time.
5. Telegram alerts (only if you start the bot)
If you use our Telegram alert bot, we store your Telegram chat ID and your chosen filters so the bot can message you. Sending /stop deactivates the subscription. Telegram's own privacy policy applies to the Telegram service itself. Legal basis: consent (Art. 6(1)(a)).
Email job alerts (optional)
If you sign up for alerts at /alerts, we store your email address, the preferences you set (minimum rate, kinds of work, countries, keywords, expert field), the exact consent text you agreed to and when, and the timestamps of your confirmation and the last digest we sent. Legal basis: consent (Art. 6(1)(a)), which you withdraw at any time by unsubscribing.
If you choose to add a CV, we read it once to extract a skills profile: skills, fields, seniority, languages, countries you can work from, and a one-sentence summary with no personal identifiers. The file itself is never stored. That single extraction is performed by Google's Gemini API, which processes the text for that request only; nothing else about you is sent to it. You get the same matching without a CV by filling in the form fields instead.
Nothing is sent until you confirm your address (double opt-in). Every email carries an unsubscribe link, and unsubscribing deletes your record outright rather than marking it inactive. Unconfirmed signups are deleted after 7 days; subscribers we have not emailed for 12 months are deleted. Emails are delivered by Resend on our behalf and contain no tracking pixels.
Where data lives
Our database (job listings, anonymous click counts, alert subscriptions) is hosted with Supabase in Frankfurt, Germany (EU). The website is delivered by Vercel's edge network with primary serving from the EU (Frankfurt region). Both providers act as processors under data-processing agreements.
What happens when you click through to a platform
Every listing links to the hiring platform's own site. From the moment you land there, that platform's privacy policy governs. Some outbound links are referral links (always labeled — disclosure): the platform may credit our account for the referral, but no personal data about you flows back to us from any platform.
What we don't do
No cookies. No advertising or tracking pixels. No fingerprinting. No sale or sharing of personal data. No automated decision-making or profiling. No processing of special-category data. The service is not directed at children under 16.
Your rights
Under the GDPR you can request access to, correction of, or deletion of your personal data; restriction of or objection to processing; and data portability. Since the only personal data we hold is alert subscriptions, the practical route is: unsubscribe (instant deletion) or email us for anything else. You also have the right to lodge a complaint with your local supervisory authority.
Contact
AIPayList is an independently operated project. Data controller contact: contact@aipaylist.com.
We'll update this policy if our practices change, with the effective date above revised accordingly.