Privacy Policy – Job Application Tracker: See Which CV Gets Interviews
Effective date: TBC, set when approved
This policy explains how we collect, use and protect personal data when you visit this website, buy Job Application Tracker: See Which CV Gets Interviews, or join our email list. We've tried to keep it short and plain.
1. Who we are
Job Application Tracker: See Which CV Gets Interviews is made by Alan Graf, trading as AlanNotion, based in Stockholm, Sweden. Alan Graf is the data controller for the personal data described here.
Privacy questions or requests: [email protected]
2. What we sell and where
- Job Application Tracker: See Which CV Gets Interviews – a Notion template.
The website checkout is on ThriveCart. The template is also sold on Gumroad and the Notion Marketplace.
3. Data we collect
When you visit the website
This site has no analytics, advertising or tracking tags, and it sets no cookies. It is hosted on Cloudflare Pages, which processes your IP address to deliver and protect the site.
When you buy
The checkout provider (ThriveCart TBC, Gumroad or the Notion Marketplace) collects your name, email address, billing details and payment details under its own policy. Payments are handled by the checkout provider and its payment processors (such as Stripe). Your card details stay with them and never reach us.
What we keep from your order: a sales record in Alan's private Notion workspace with your email, the product, price, coupon, store, source, country and the time. No name, address or IP. TBC: confirm once the ThriveCart and n8n setup for this product is decided
When you join our email list
We send email through Kit. You get emails from us after you opt in or buy one of our products, and you can unsubscribe at any time. Kit stores your email address and tags showing what you downloaded or bought. The site itself has no email signup form.
When you email us
Your email address and whatever you include in your message.
4. How we use your data and our legal bases (GDPR)
- Processing your order, delivering the product, support – contract.
- Sending our newsletter and product emails – consent (you can withdraw at any time).
- Keeping sales records, preventing fraud, improving our products – legitimate interest.
- Keeping accounting records such as orders and invoices for 7 years, as Swedish bookkeeping law (bokföringslagen) requires, even after a deletion request – legal obligation.
We do not sell your personal data, and we do not use it for third-party advertising.
5. Who we share data with
- ThriveCart TBC, Gumroad and the Notion Marketplace – checkout and order processing.
- Payment processors (such as Stripe) – payments.
- n8n – our automation tool, self-hosted on a server rented from Hostinger, which moves order data into Notion and Kit. TBC
- Notion – our private workspace where sales records are stored.
- Kit – email list and email delivery.
- Cloudflare – hosts the site on Cloudflare Pages: https://www.cloudflare.com/privacypolicy/.
We may also disclose data if the law requires it.
6. Cookies
This site sets no cookies and uses no analytics, so there are no cookie settings to change. If we add analytics later, we'll ask for your consent first and update this policy.
7. How long we keep data and how to delete it
Order and sales records are kept for as long as we need them for the purposes above, or until you ask us to delete them. Accounting records are kept for 7 years under Swedish bookkeeping law. Email list data is kept until you unsubscribe or ask us to delete it. To request deletion, email [email protected]; we delete personal data within 30 days of a verified request, except records we must keep by law.
8. Your rights under GDPR
You have the right to access, rectify, erase, restrict, object to and port your personal data, and to withdraw consent at any time. To use any of these rights, email [email protected]. You can complain to the Swedish Authority for Privacy Protection (IMY) at https://www.imy.se, or to the data protection authority where you live.
9. International transfers
Some providers process data outside the EU/EEA, mainly in the US. Where they do, they rely on legal safeguards such as the EU–US Data Privacy Framework or the EU Standard Contractual Clauses.
10. Children
Our products and site are meant for adults and are not directed at children under 16.
11. Changes and contact
We may update this policy when our tools or practices change, and we'll post the new version here with a new effective date. Contact: Alan Graf / AlanNotion, Stockholm, Sweden – [email protected]