Privacy Policy

TryShotgun ("we", "us", "our") is operated by TryShotgun ApS, a company registered in Denmark. We provide an AI-powered job application service that sends personalised outreach emails on behalf of job seekers.

Data controller: TryShotgun ApS
Contact: privacy@tryshotgun.com

We collect the following categories of personal data:

• Account data: Name, email address, and password (hashed) when you create an account.
• CV data: Your uploaded CV and the structured data we extract from it (skills, experience, education, target roles, industries, and location).
• Personal bio: A free-text description you provide about yourself, used to personalise cover letters.
• Campaign data: Companies contacted, cover letters generated, email subjects, delivery status, and replies received.
• Payment data: Processed by Stripe. We store your Stripe customer ID and subscription status but never your card details.
• Usage data: Pages visited, features used, and technical data (browser, IP address, device type) collected via server logs.

• Sending job applications: We use your CV data and personal bio to generate personalised cover letters via AI (Anthropic Claude) and send them to companies via our email infrastructure (Instantly.ai).
• Managing your account: Authentication, subscription management, and transactional notifications (via Resend).
• Improving our service: Anonymised and aggregated data is used to improve cover letter quality, company targeting, and response rates. Individual data is never shared publicly.
• Legal obligations: We may process data to comply with applicable laws, including Danish and EU regulations.

• Contract performance (Art. 6(1)(b)): Processing your CV and sending applications is necessary to provide the service you subscribed to.
• Legitimate interest (Art. 6(1)(f)): Service improvement and fraud prevention.
• Consent (Art. 6(1)(a)): Marketing communications, if you opt in.
• Legal obligation (Art. 6(1)(c)): Tax and accounting records.

We share data only with the following third-party processors, all of which have appropriate data processing agreements in place:

• Supabase (EU) — Database and authentication
• Anthropic (US) — AI-powered cover letter generation
• Instantly.ai (US) — Campaign email delivery
• Stripe (US) — Payment processing
• Resend (US) — Transactional email notifications
• Vercel (US) — Website hosting

For US-based processors, transfers are covered by EU Standard Contractual Clauses or equivalent safeguards.

• Account data: Retained while your account is active. Deleted within 30 days of account deletion.
• CV data: Retained while your account is active. You can delete your CV at any time.
• Campaign data: Retained for 12 months after a campaign completes, then anonymised.
• Payment records: Retained for 5 years as required by Danish tax law.
• Anonymised analytics: Retained indefinitely (no personal data).

Under GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data ("right to be forgotten")
• Restrict processing
• Data portability (receive your data in a machine-readable format)
• Object to processing based on legitimate interest
• Withdraw consent at any time

To exercise any of these rights, email privacy@tryshotgun.com or visit our GDPR rights page.

You also have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet).

We use strictly necessary cookies for authentication and session management. We do not use advertising or tracking cookies. No cookie consent banner is required for strictly necessary cookies under GDPR.

We implement appropriate technical and organisational measures to protect your data, including encryption in transit (TLS), encryption at rest, access controls, and regular security reviews.

We may update this policy from time to time. Material changes will be communicated via email. The "last updated" date at the top reflects the most recent revision.