Autosøk
Sign In

Privacy Policy

Last updated: April 2026

1. Introduction

Autosøk ("we", "our", or "us"), operated by Kowsari Consulting, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our job search and application platform at autosok.no. This policy is in accordance with the General Data Protection Regulation (GDPR) and the Norwegian Personal Data Act (Personopplysningsloven).

2. Data Controller

Kowsari Consulting is the data controller for the personal data processed through the Autosøk platform. For questions about our data processing, contact us at support@autosok.no.

3. Information We Collect

We collect the following categories of personal data:

  • Account information: Name, email address, and password (or Google OAuth credentials).
  • Profile information: Resume data, work history, education, skills, phone number, and address.
  • CV and documents: CVs, cover letters, and other documents you upload or create using our CV Builder. We extract personal details from uploaded CV files — including name, contact information, work experience, education history, skills, and certifications — to populate your profile and fill out job applications on your behalf.
  • Job application data: Records of jobs you have applied to, saved, or interacted with, including application history used to improve matching accuracy.
  • Payment information: Transaction records and billing history. Payment processing is handled by Vipps; we do not store your payment card details.
  • Email account: Upon registration, an @autosok.no email address is automatically provisioned for your account. The credentials for this email are stored in encrypted form (AES-256-GCM). This email is used for communication with employers and for account registration on third-party employer portals when required by the Auto-Apply feature.
  • Usage data: Search queries, preferences, feature usage, and interaction patterns.
  • Technical data: IP address, browser type, device information, and cookies.

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Contract performance: To provide you with our services, process applications, manage your account, and provision your @autosok.no email address (GDPR Art. 6(1)(b)).
  • Legitimate interest: To improve our services, prevent fraud, and ensure security (GDPR Art. 6(1)(f)).
  • Consent: For optional features like email notifications and job recommendations (GDPR Art. 6(1)(a)).
  • Legal obligation: To comply with applicable laws and regulations (GDPR Art. 6(1)(c)).

5. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our services.
  • Process job applications on your behalf, including via the Auto-Apply feature.
  • Extract information from your uploaded CV files and profile data to fill out application forms on employer portals and applicant tracking systems.
  • Generate tailored cover letters and application materials matched to specific job postings.
  • Register accounts on third-party employer portals on your behalf when required to complete an application, using your assigned @autosok.no email address.
  • Generate AI-powered job recommendations matched to your profile.
  • Process payments and manage your account balance via Vipps.
  • Send you relevant notifications about application updates and matching jobs.
  • Build and export CVs through our CV Builder.
  • Ensure security, prevent fraud, and enforce our Terms of Service.
  • Analyze usage patterns to improve the platform (in anonymized/aggregated form).

6. Information Sharing

We may share your personal data with:

  • Employers: When you apply for jobs (manually or via Auto-Apply), your profile information, CV, and application materials are shared with the relevant employer or their applicant tracking system.
  • Third-party employer portals: When the Auto-Apply feature registers an account on an employer portal on your behalf, your name, @autosok.no email address, and relevant profile details are provided to that platform as required for registration and application submission.
  • Payment provider (Vipps): To process your payments securely.
  • AI service providers: We use AI services for job analysis, matching, and generating application materials. Data sent to AI providers is limited to what is necessary for the service and is not used to train their models.
  • Infrastructure providers: Cloud hosting (DigitalOcean) and database services necessary to operate the platform.

We do not sell your personal information to third parties for marketing purposes. We only share data as described above or when required by law. You retain full ownership of your personal data at all times.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with our services. If you delete your account, we will delete or anonymize your personal data within 30 days, including your provisioned @autosok.no email account and any encrypted credentials, except where we are required to retain data for legal or regulatory purposes (e.g., transaction records for accounting purposes, which are retained for 5 years as required by Norwegian bookkeeping law).

8. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes encrypted data transmission (HTTPS/TLS), secure password hashing, AES-256-GCM encryption for sensitive credentials, access controls, and regular security reviews. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Your Rights

Under the GDPR and Norwegian data protection law, you have the right to:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Request correction of inaccurate or incomplete data.
  • Erasure: Request deletion of your personal data ("right to be forgotten").
  • Restriction: Request that we limit the processing of your data in certain circumstances.
  • Data portability: Receive your data in a structured, machine-readable format.
  • Objection: Object to processing based on legitimate interests.
  • Withdraw consent: Withdraw consent at any time for consent-based processing.

To exercise any of these rights, contact us at support@autosok.no. We will respond within 30 days. You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) at datatilsynet.no.

10. Cookies

We use essential cookies for authentication and session management. These are necessary for the Service to function and cannot be disabled. We do not use third-party tracking or advertising cookies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or through a notice on the Service at least 30 days before they take effect. Your continued use of the Service after changes take effect constitutes acceptance of the updated Privacy Policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: