Privacy Notice

The controller is Lempelä Oy, business ID 2174515-9, Ulappakatu 1 A 1, 02320 Espoo, Finland. General contact point: info@workmatchapp.com. Privacy contact point: info@workmatchapp.com.

In Finland, the supervisory authority is the Office of the Data Protection Ombudsman. Data subjects may lodge a complaint with the competent supervisory authority.

The party that determines the purposes and means of personal data processing acts as the controller. WorkMatchApp acts as a controller for its own service and safety purposes.

If WorkMatchApp processes personal data on the employer's documented instructions on behalf of the employer, the parties need a separate data processing agreement.

If WorkMatchApp and the employer jointly determine the purposes and essential means of processing, the parties may be joint controllers and must agree their responsibilities separately.

Service delivery, account administration, matching, communications, and hire confirmation. Legal basis: Performance of a contract or steps taken at the user's request before entering a contract. Data categories: Authentication and account data, profile data, role and application data, messages, matching and confirmation data, and the strictly necessary parts of verification documents. Recipients: Employers or workers as required by the service purpose, WorkMatchApp technical service providers, and authorities when required by law. Retention: We retain account, profile, message, matching, and verification data needed to deliver the service for the duration of the service and user account. After account deletion, data is deleted or anonymised within a reasonable period unless law, contract, an ongoing dispute, accounting, or service security requires longer retention.

Producing an answer in the optional AI assistant when separately initiated by the user. Legal basis: Performance of the service or steps taken at the user's request; the AI assistant is not required for core service use. Data categories: The message entered for the AI assistant, short history of the same AI exchange, the relevant field name, purpose and current value, and structured job, profile, location, salary, matching and market context needed for the answer. Recipients: WorkMatchApp and the AI subprocessor identified at the time of use, currently OpenAI; the data is not used to make an employer's final hiring decision. Retention: WorkMatchApp does not store the raw message or answer from a normal AI request in a separate server-side conversation history. If the user reports an answer, the submitted prompt, answer, bounded context, user identifier and contact detail are retained for security and audit purposes for up to 24 months unless investigation or law requires longer. The OpenAI API store setting is disabled, but under default settings the provider may retain abuse-monitoring logs for up to 30 days or longer where legally required.

Service security, audit trail, abuse prevention, billing accuracy, and legal claims handling. Legal basis: Legitimate interests of the controller and compliance with legal obligations where applicable. Data categories: Usage logs, acceptance and consent history, IP address, user agent, audit logs, and the necessary data for fee verification. Recipients: WorkMatchApp, technical subprocessors, payment and billing processors, authorities, and advisers as applicable. Retention: Security, audit, acceptance, billing, and abuse-investigation logs and verification records are retained for up to 24 months unless suspected abuse, a dispute, a legal obligation, accounting, or an authority request requires longer retention.

Optional electronic direct marketing and product updates. Legal basis: Consent. Data categories: Email address, language, marketing consent state, and delivery log. Recipients: WorkMatchApp and the communication providers used to deliver marketing messages. Retention: Consent state is retained until the consent is withdrawn and thereafter as long as needed to evidence the withdrawal.

For hire verification, we primarily rely on in-product confirmations and other less sensitive evidence. A payslip is not requested from the worker by default, and no document is processed more broadly than required for the purpose.

Document details may be redacted where they are not needed for hire or fee verification. Retention is limited per purpose to what is necessary for service delivery, audit trail, billing, abuse prevention, and legal obligations.

WorkMatchApp does not use cookies, local storage, IDFA, or an App Tracking Transparency prompt to track users across other apps or websites. The service does not use third-party advertising tracking, advertising pixels, or Google Analytics / gtag tracking.

We use only necessary first-party cookies and browser or app local storage for sign-in, session continuity, security, language and theme settings, remembering this notice, and core service features. This data is not sold or shared for third-party advertising.

Data may be disclosed to the worker's or employer's counterparty as required by the service purpose, to technical service providers, billing and communications services, and to authorities or advisers where required by law or legitimate interests.

Personal data is processed primarily within the EU/EEA. If data is transferred outside the EU/EEA, we use the safeguards required by applicable law and describe them in the privacy notice.

Data subjects may have rights of access, rectification, deletion, restriction, objection, and data portability under applicable law. Marketing consent can be withdrawn at any time.

Marketing consent can be withdrawn at any time in settings or through an unsubscribe link. Mandatory privacy information and the audit trail do not rely on that consent.

When an employer enables role-specific public publication, WorkMatchApp displays the approved job and company information without requiring sign-in. Public information may include the company name and website, job title and description, location and country, work model, employment type, salary range, skill and language requirements, application period, and publication and update dates.

The purpose of public publication is to market the job and make it discoverable worldwide. The information may be provided to website visitors, search engines, job search services, and other public discovery services. These external services may process and retain indexed information under their own terms and privacy practices.

The public listing is removed from WorkMatchApp when the employer disables publication, closes the role, or the listing expires. Search engine and other third-party caches or copies may update with delay. Worker profiles, matches, messages, attachments, and direct contact details are not published through this setting.

The AI assistant is optional. Opening its view alone does not send a request: before the first request, the user is shown a prominent disclosure and confirms that they want to use the feature. Core service features remain available without the AI assistant.

When the user starts the AI assistant, WorkMatchApp may send OpenAI or another AI subprocessor identified at the time of use the user's message, short history of the same AI exchange, the relevant field name, purpose and current value, and structured role, industry, user-entered location, salary, matching, draft, selection, and market context needed for the answer. WorkMatchApp does not intentionally add the display name to the model request. Free text may still contain personal data entered by the user, so unnecessary sensitive information should not be submitted to the AI assistant.

Separate response storage is disabled for OpenAI API requests with store:false, and API content is not used to train OpenAI models by default. However, under default settings OpenAI may retain abuse-monitoring logs relating to the request for up to 30 days or longer where legally required. International transfers are subject to the contractual and data-protection safeguards in force at the time.