This notice describes how SourceGeek VoF, Mozartlaan 33, 3603 BD Maarssen, the Netherlands ("SourceGeek", "we") processes personal data through the sourcegeek.com website and the SourceGeek platform at chat.sourcegeek.com (the "Platform"). You can reach us at support@sourcegeek.com.
Two roles. This notice covers the processing for which we are the controller: your account, billing, support, and our website and marketing. For the content our customers process through the Platform — chats, documents, and data from the systems they connect, such as an applicant tracking system — we act as a processor on the customer's behalf. That processing is governed by our Data Processing Agreement; the third parties involved are listed on our sub-processors page. If you are a candidate whose data is processed by one of our customers, that customer is the controller — please direct requests to them; we forward any request we receive to the customer concerned.
Account. When you register we process your name, e-mail address, and either a password or the identifier from the sign-in provider you choose (Google or LinkedIn). We use this to create and secure your account and to communicate about the service (performance of contract, GDPR Art. 6.1.b).
Workspace and billing. For paid subscriptions we process company details, billing address, VAT number and payment confirmations (performance of contract, Art. 6.1.b; legal obligations, Art. 6.1.c). Payments are handled by our payment processor, which processes your card or bank details as an independent controller; we do not receive full payment details.
Platform usage. We process log and device data (IP address, browser information, timestamps) to keep the Platform secure and working (legitimate interest, Art. 6.1.f), and product analytics — events about how the Platform is used, and session replays of the application interface — to improve the product (legitimate interest, Art. 6.1.f). Analytics data is processed by Amplitude with EU data residency. Session replays can incidentally show content displayed on your screen; they are used only for product improvement and are access-restricted.
Support. When you contact us via e-mail or the website chat widget, we process your contact details and the content of the conversation to help you (performance of contract, Art. 6.1.b; legitimate interest, Art. 6.1.f).
Website and marketing. On the marketing website we process visitor data via cookies and similar technologies — see the Cookie Policy — and, with your consent, we send newsletters you can unsubscribe from at any time (consent, Art. 6.1.a).
The Platform uses large language models to answer questions and draft content. Model requests are routed through an AI gateway exclusively to providers operating under zero-data-retention terms: prompts and outputs are processed to produce the response, are not stored by the model provider, and are never used to train models. The Platform does not make automated decisions about individuals that produce legal or similarly significant effects; actions in connected systems require human approval.
We share personal data only with: the service providers listed on our sub-processors page (hosting, database, AI gateway, analytics, support and monitoring tools), acting on our instructions; our payment processor; and authorities where the law requires it. We never sell personal data. Where providers process data outside the EEA, transfers are safeguarded with Standard Contractual Clauses and/or the EU–U.S. Data Privacy Framework.
We keep account data for as long as your account exists. You can delete your account at any time in the Platform's settings; deletion removes your sessions and identifying details. Workspace content is deleted when a workspace is deleted, permanently. Billing records are retained as long as tax and accounting law requires. Support and marketing data is kept no longer than necessary for the purpose it was collected for.
Under the GDPR you have the right to access, rectify, erase, restrict and port your personal data, and to object to processing based on legitimate interest, including direct marketing. Where processing is based on consent, you can withdraw it at any time without affecting prior processing. To exercise your rights, contact support@sourcegeek.com. You also have the right to lodge a complaint with a supervisory authority; in the Netherlands this is the Autoriteit Persoonsgegevens.
We protect personal data with technical and organisational measures appropriate to the risk, including encryption in transit, encryption of stored credentials, strict workspace isolation and access on a need-to-know basis. A summary of our measures is included in the Data Processing Agreement.
We may update this notice from time to time by posting a new version on this page. We will announce significant changes to account holders.
Easy plug & play, no technical knowledge needed. Have your assistant ready in a matter of minutes.