MONEY ENGINEPrivacy Policy
Money Engine ("we", "us") is an online service that helps people find remote and contract work, tailor their applications with AI, and prepare for interviews. This policy explains what personal data we collect, why, and your rights under the EU General Data Protection Regulation (GDPR).
1. Who we are (Data Controller)
Money Engine, operated by mstein.ai (Mark Gold), based in Kraków, Poland. Contact for privacy matters: privacy@money-engine.ai.
2. What we collect
| Category | Examples |
|---|---|
| Account | Email address, display name, password (stored hashed by our auth provider) |
| Profile & CV | CV text you paste/upload, skills, headline, job preferences — used to match and coach you |
| Activity | Saved jobs, pipeline status, coaching sessions, feature usage and AI cost metering |
| Payment | Subscription status and billing history. Card details are handled directly by Stripe — we never see or store your card number. |
| Email connection (optional) | If you connect Gmail, an access token to send/read mail on your behalf. Stored locked to your account; revocable any time. |
| Technical | IP address, browser type, and an essential session cookie to keep you logged in |
3. Why we use it & legal basis
- To provide the service (matching, AI drafting, coaching, email) — performance of our contract with you.
- To process payments — performance of contract and legal obligation.
- To connect your Gmail — your explicit consent (you can disconnect at any time).
- To secure and improve the service — our legitimate interests, balanced against your rights.
4. Who we share with (Processors)
We use trusted providers who process data on our behalf, under contract:
- Supabase — database & authentication (EU region)
- Vercel — application hosting
- Stripe — payment processing
- Anthropic — AI text generation (drafting, coaching)
- Google — Gmail access, only if you connect it
- Adzuna — job listing data
- Tavus — live video coaching, only if used
We do not sell your personal data. Some providers are based outside the EU; such transfers are covered by Standard Contractual Clauses or equivalent safeguards.
5. Your rights
Under GDPR you can: access your data, correct it, delete your account and data, export your data, restrict or object to processing, and withdraw consent. You can do the main actions yourself in Settings → Your data, or email us. You also have the right to complain to your supervisory authority (in Poland, the UODO).
6. Retention
We keep your data while your account is active. If you delete your account, we remove your personal data promptly, except limited records we must keep for legal/accounting reasons (e.g. invoices).
7. Cookies
We use a single essential cookie to keep you signed in. We do not use advertising or third-party tracking cookies.
8. Changes
We may update this policy; we'll post the new date here and, for material changes, notify you.