MatchPilot — logo for konsulentplatformenMatchPilot

Privatlivspolitik / Privacy Policy

Opdateret / Updated 12-10-2026

Dansk

Dataansvarlig: Nordic Tender ApS, Kernevænget 10, 3450 Allerød, Danmark, CVR 39915014. Kontakt: privacy@matchpilot.dk.

Hvilke data vi indsamler

Kontodata (navn, e-mail, rolle, organisation, loginhistorik); konsulentprofiler og CV'er (navn, titel, kompetencer, erfaring, uddannelse, certificeringer, timepris, tilgængelighed, e-mail, telefon); opgaver og ansøgninger; kontrakter og betalingsoplysninger for kontrakter; noter og kontaktpersoner; betalingsdata for abonnementer (håndteres af Stripe — vi ser aldrig kortnumre); samt teknisk driftsdata (IP-adresse, browser, tidspunkt, fejllogs).

Formål

At levere platformen: matche konsulenter og opgaver, lave salgs-CV'er, håndtere ansøgninger, kontrakter og fakturering, sende servicemails, forhindre misbrug og fejlsøge. Behandlingen sker på grundlag af kontrakt, legitim interesse og retlige forpligtelser (bogføring). Vi videresælger ikke data og bruger dem ikke til annoncering.

Modtagere (databehandlere)

  • Lovable (Lovable Labs Incorporated) — hosting af appen og administration af backend.
  • Supabase — database, login og fillager (EU, Frankfurt).
  • Cloudflare — afvikling af appens server og levering af siden.
  • Lovable e-mailtjeneste — afsendelse af servicemails og notifikationer.
  • Stripe — betaling og abonnementer.
  • Google (Gemini) og OpenAI via Lovable AI — læsning af CV'er og opgaver, match-forklaringer og assistenten.
  • Firecrawl — indhentning af offentlige opgaveopslag fra jobsider.
  • Google (Gmail) og Microsoft (OneDrive) — kun når en organisation selv forbinder sin postkasse eller mappe for at importere CV'er og opgaver.
  • Dinero (Visma) — kun læsning af fakturaer og regninger for Nordic Tenders egne kontrakter.
  • AI-assistenter (fx Anthropic Claude, OpenAI ChatGPT) — kun når du selv forbinder via MCP, se nedenfor.

Opbevaring

  • Kontodata: indtil kontoen slettes.
  • CV'er og konsulentprofiler: indtil profilen eller organisationens konto slettes, eller konsulenten beder om sletning.
  • Opgaver: så længe organisationen har konto; offentlige opslag lukkes automatisk efter frist eller 45 dages inaktivitet.
  • Ansøgninger og noter: indtil de slettes eller kontoen slettes.
  • Kontrakter og fakturadata: indtil kontoen slettes, dog mindst 5 år hvor bogføringsloven kræver det.
  • Teknisk log over login og MCP-kald: op til 90 dage; kørselslogs for jobindsamling: 30 dage.
  • Sikkerhedskopier: op til 7 dage efter sletning.

AI-assistenter (Claude, ChatGPT m.fl.)

Du kan selv forbinde MatchPilot til en AI-assistent via MCP (se vejledningen). Intet sendes, før du har forbundet og godkendt det. Kun svarene på de værktøjskald, assistenten foretager på dine vegne, sendes — data din bruger har adgang til i din egen organisation, plus offentlige opgaver, højst 20 rækker pr. kald. Udbyderen opbevarer data efter egne vilkår; MatchPilot gemmer ikke samtalerne. Adgangsnøgler gemmes ikke i klartekst og udløber automatisk. Fjern connectoren for at stoppe adgangen.

Dine rettigheder

Du har ret til indsigt, rettelse, sletning, begrænsning, indsigelse og dataportabilitet (udlevering i et maskinlæsbart format). Skriv til privacy@matchpilot.dk; vi svarer inden for 30 dage. Du kan klage til Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby, datatilsynet.dk.

English

Controller: Nordic Tender ApS, Kernevænget 10, 3450 Allerød, Denmark, CVR (Danish company no.) 39915014. Contact: privacy@matchpilot.dk.

Data we collect

Account data (name, email, role, organisation, sign-in history); consultant profiles and CVs (name, title, skills, experience, education, certifications, rate, availability, email, phone); assignments and applications; contracts and related payment data; notes and contact persons; subscription payment data (handled by Stripe — we never see card numbers); and technical data (IP address, browser, timestamps, error logs).

Purpose

To provide the platform: matching consultants and assignments, producing sales CVs, handling applications, contracts and invoicing, sending service emails, preventing abuse and debugging. Legal bases: contract, legitimate interest and legal obligations (bookkeeping). We do not sell data or use it for advertising.

Recipients (processors)

  • Lovable (Lovable Labs Incorporated) — app hosting and backend management.
  • Supabase — database, authentication and file storage (EU, Frankfurt).
  • Cloudflare — running the app server and delivering the site.
  • Lovable email service — sending service emails and notifications.
  • Stripe — payments and subscriptions.
  • Google (Gemini) and OpenAI via Lovable AI — reading CVs and assignments, match explanations and the assistant.
  • Firecrawl — collecting public assignment postings from job sites.
  • Google (Gmail) and Microsoft (OneDrive) — only when an organisation connects its own mailbox or folder to import CVs and assignments.
  • Dinero (Visma) — read-only access to invoices and bills for Nordic Tender's own contracts.
  • AI assistants (e.g. Anthropic Claude, OpenAI ChatGPT) — only when you connect them via MCP, see below.

Retention

  • Account data: until the account is deleted.
  • CVs and consultant profiles: until the profile or the organisation's account is deleted, or the consultant requests deletion.
  • Assignments: while the organisation has an account; public postings close automatically after their deadline or 45 days of inactivity.
  • Applications and notes: until deleted or the account is deleted.
  • Contracts and invoice data: until the account is deleted, but at least 5 years where Danish bookkeeping law requires it.
  • Technical sign-in and MCP call logs: up to 90 days; job collection run logs: 30 days.
  • Backups: up to 7 days after deletion.

AI assistants (Claude, ChatGPT, etc.)

You may connect MatchPilot to an AI assistant via MCP (see the guide). Nothing is sent until you connect and approve it. Only the results of tool calls the assistant makes on your behalf are sent — data your user can access within your own organisation, plus public assignments, at most 20 rows per call. The provider stores data under its own terms; MatchPilot does not store the conversations. Access tokens are not stored in plain text and expire automatically. Remove the connector to stop access.

Your rights

You have the right of access, rectification, erasure, restriction, objection and data portability (export in a machine-readable format). Email privacy@matchpilot.dk; we respond within 30 days. You may lodge a complaint with the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, Denmark, datatilsynet.dk.