Privacy policy

Last updated 15 November 2026

LetsFindWork API is run by Adam (sole trader, Spain), the data controller. Contact: privacy@letsfind.work. This policy covers API accounts: this site, the REST API and the MCP server.

What we collect and why

• Account: your email address, to sign you in with an email link and to write to you about your account and plan. If you sign in with LetsFindWork, it confirms your email and shares your name.
• Sessions: the IP address and browser of each signed-in session, to keep you signed in and protect your account.
• API keys: a hash of each key, its first characters, its name and when you made it. We never store the key itself.
• Usage: each month, how many credits you used and which jobs you got, so a job you already got is free and extra jobs are billed right.
• Apps you connect over MCP: the app's name and address, your consent, and the access tokens we issue to it.
• Webhooks: the URL and filters you set, and the last delivery errors.
• Plan status from Stripe, to turn on your plan's jobs.
• Server logs of requests and errors, kept for a short time, to fix problems and stop abuse.

Legal basis: performing our contract with you (GDPR Art 6(1)(b)). Server logs and abuse limits: legitimate interest (Art 6(1)(f)). Only the cookies sign-in needs, no tracking.

Who processes your data

• Euronodes Ltd (Cyprus; database server in Prague, Czech Republic, EU): Hosts the database server that stores your account, keys, usage, webhooks and connected apps.
• Cloudflare, Inc. (server code run near Frankfurt): Runs the API, the MCP server and these pages, limits request rates, and runs the tunnel and connection pool between that code and the database.
• Resend Inc. (USA): Sends your sign-in emails. Receives your email address. Its account data and email logs are stored in the USA.
• Stripe, Inc. and Link (seller of record): Payments are handled by Stripe. Link, Stripe's checkout, is the seller of record: it handles checkout, receipts, invoices and VAT for paid plans and receives your name, email and billing details. We never see your card.

Resend sends sign-in emails from the USA. Your account, keys, usage and webhooks are stored in the EU.

The jobs

The API returns jobs that employers publish, not data about you. Snippets have contact details removed. Employers can ask us to remove their jobs.

How long we keep it

Until you delete your account. Write to privacy@letsfind.work and we delete your account, keys, usage, webhooks and connected apps. Database backups roll off within 7 days. Link (Stripe) keeps invoices as tax law requires.

Your rights

You can see your account, keys, usage and webhooks on your account page, and ask for a copy, correction, deletion, restriction or objection by email. You can complain to the Spanish data protection authority (AEPD, aepd.es) or your local authority.