Privacy notice

These tools are run by MokaStudio (KvK 94754195, Utrecht, the Netherlands), operating as Moka AI Solutions ("MAS"). MokaStudio is the data controller for any personal data you choose to share here. Contact email: hello@maslabs.nl.

MAS needs no account. Below is every kind of data the site handles, what happens to it, and what we keep.

The sponsor check and the zoekjaar clock. They run your query and show you the answer. We do not store, log, or transmit anything you type into them.

The IND letter reader and the CV helper. The text you paste or write is sent to our AI provider (Anthropic) so it can be explained or turned into CV text and shown back to you. You tick a consent box before anything is sent. MAS does not store the letter, the CV text, or the result, and Anthropic does not use the text to train its models. The photo you can add to a CV never leaves your device. Please do not include more personal detail than is needed, and leave out your BSN, V-number and address.

Sara, the chat. The messages in your current conversation (the most recent ten) are sent to Anthropic to write Sara's reply, together with results Sara looks up in MAS data such as jobs, sponsors and answers. MAS does not store your messages or her replies. Sara asks you not to share a BSN, passport number or V-number, so please do not.

A random device ID. The first time you open the app, your browser creates a random ID and keeps it on your device. It is not linked to your name, email address or phone number. It is what ties together the things below, and nothing else. Clearing your browser data loses it.

Saved items. When you press Save on a result, that result (for example a letter explanation, a job or a CV you generated, never the text of your letter) is stored against your device ID. You can delete saved items in the app.

Employers and searches you follow. If you follow an employer or ask to be told about jobs like a search, MAS stores the company name, or the search (role, city, Dutch level, whether you need a sponsor, internships only), against your device ID, so it can tell you when something new appears. You can remove each one in the app.

Telegram alerts. To receive alerts you send a short one-time code to the MAS bot on Telegram. MAS then stores your Telegram chat ID and nothing else from Telegram: no name, no handle, no phone number. The code is valid for 15 minutes. You can pause alerts, or send /stop to the bot or unlink in the app, and the chat ID is deleted.

Searches that found nothing. When a search cannot find what was asked for, MAS records the role and city that were searched, the filters in use, how many results came back and the time, so we can see which roles and places MAS does not cover well. This record holds no device ID, no IP address and nothing else that ties it to you.

Messages to the team. If you leave an email address or Telegram handle in a contact form (for example after a sponsor check), MAS stores that contact, which tool it came from and what you had checked (such as an employer name, the days left on your zoekjaar or the type of letter), and a record that you consented (the time and the version of the form). The same details are sent to the MAS team as a Telegram message.

Technical data. To limit abuse, your IP address is used as a counter key. Most of these counters are deleted within about two minutes. For the AI tools (the IND letter reader, the CV helper and Sara), MAS also keeps a daily count per IP address for each tool, which is deleted after two days. The count of AI use for the whole site each day holds no personal data. Our hosting provider keeps standard server logs. Page-view and speed measurements come from Vercel Analytics, which uses no cookies and stores no personal data.

For a contact you leave in a contact form, we use it to reach you about sponsor jobs and related help, which is exactly what the form says. The legal basis is your explicit consent under Article 6(1)(a) of the GDPR. If you do not tick the box, nothing is sent.

For the IND letter reader, a letter can contain special-category data (for example details that reveal health, religion, or origin). We process it only to explain it back to you, and only after you tick the box at the tool. The legal basis is your explicit consent under Article 9(2)(a) of the GDPR. If you do not tick the box, the letter is not sent. The CV helper likewise sends nothing until you tick its box.

Everything else above is used only to provide the feature you are using: saved items, follows and alerts, Sara's answers and the abuse limits.

Contact-form messages are delivered privately to the MAS team so a person can follow up. We never sell your data, and we never share it with third parties for their own marketing. The processors involved are:

• Anthropic (in the United States), our AI provider. It processes the text of the letter reader, the CV helper and Sara to produce the answer, retains it only for the limited period its data-processing terms allow for abuse monitoring, and does not train on it. That transfer outside the EU is covered by Anthropic's data processing terms and the standard contractual clauses they include.
• Our hosting provider, Vercel, which runs the site and its server logs and provides the cookieless analytics.
• Upstash, which holds saved items against your device ID, and the counters described under technical data above.
• Our database provider, which holds follows, job-alert searches, Telegram links, search records without identity, and contact-form messages.
• Telegram, which carries the alerts it sends you, and the message the MAS team receives from a contact form.

• Letters, CV text and Sara conversations: not kept by MAS. They go to Anthropic as described above.
• Saved items: they expire 180 days after you last saved or deleted something, or earlier when you delete them.
• Follows and job-alert searches: kept until you remove them in the app.
• Telegram chat ID: kept until you send /stop or unlink in the app. One-time codes are valid for 15 minutes.
• Searches that found nothing: they identify nobody, so there is nothing to look up or delete for one person. We do not currently delete them on a schedule.
• Contact-form messages: kept only as long as needed to help you, or until you ask us to delete them, whichever comes first. When you opt out, we remove them.
• Counters keyed by your IP address: most are deleted within about two minutes. The daily count per IP address for each AI tool is deleted after two days.

Under the GDPR you can ask us to access, correct, or delete your data, withdraw your consent at any time, or object to its use. Saved items, follows and the Telegram link you can remove yourself in the app. For anything else, or for a contact you left in a form, contact us through the contact page. You also have the right to complain to the Dutch data-protection authority, the Autoriteit Persoonsgegevens.