Matchbox privacy, plainly.
Matchbox uses AI to match your skills and experience to jobs from multiple sources. To do that well, it needs to understand your career — which means handling sensitive professional documents. This page explains exactly what happens to them.
Who we are
Matchbox is operated by Studio Popix ("we", "us"). Questions? Write to hello@studiopopix.com.
What we collect
1. Account — Clerk
You sign in via Clerk, which collects your email address and manages authentication. Clerk stores your identity on their infrastructure under their privacy policy at clerk.com/legal/privacy. We receive your email address from Clerk to associate your data with your account.
2. Career documents
You can upload CVs, cover letters, LinkedIn data exports, personal website snapshots, and ZIP archives. These are stored as private files in Vercel Blob (Vercel's file storage), accessible only to your account. Extracted text from these documents is also stored in our database (see below).
3. Your career profile — built by Claude AI
Your uploaded documents are sent to Claude (Anthropic's AI) for analysis. Claude reads your documents to extract skills, experience, strengths, and career narrative, and returns a structured profile. This profile is stored in our database. Document text is sent to Anthropic's API and processed under their usage policies at anthropic.com/legal/privacy.
We do not use your documents to train Anthropic's models — Anthropic's API terms prohibit this by default.
4. Job matches and preferences
We store your job search preferences (salary range, location, working style, contract type, sector, visa requirements) and your interactions with job listings — which you've saved, applied to, shortlisted, or discarded. Cover letters generated by Claude for specific roles are also stored.
5. Job listings — sourced via Apify
We use Apify to fetch job listings from LinkedIn and other sources. Your search preferences (not your personal profile) are used to query for relevant listings. Apify processes this under their privacy policy at apify.com/privacy-policy.
6. Crash and error data
Technical errors are logged server-side for debugging. These logs may include error messages and stack traces but not your documents or profile content.
Where data is stored
Your profile, preferences, job interactions, and document text are stored in a private PostgreSQL database hosted on Neon (neon.tech). Uploaded files are stored in Vercel Blob. Both are access-controlled and not publicly reachable.
What we don't do with your data
- We don't sell your profile, documents, or preferences to anyone
- We don't share your profile with employers or recruiters without your explicit action (e.g. choosing to apply)
- We don't use your documents to train AI models
- We don't show you advertising
Your rights
Under UK GDPR you have the right to access, correct, or delete personal data we hold about you — including your profile, documents, and job history. To request deletion, email hello@studiopopix.com and we'll remove your data within 30 days. You can also delete individual documents and jobs from within the app.
Children
Matchbox isn't directed at children under 13 and we don't knowingly collect data from them.
Changes to this policy
If we change how Matchbox handles data, we'll update this page and bump the version number at the top. For significant changes we'll notify you by email.