Privacy Notice

1. Information and sources

Data comes from you, the sign-in provider, users you interact with and service infrastructure. We do not buy candidate databases or scrape external profiles. The portal does not ask for date of birth, graduation dates, race, religion, disability, genetics, citizenship or criminal history. Confirming 18+ eligibility does not collect your actual age.

• Account identifier, email, name, role, account status, registration time and trial end: account operation and access.
• Skills, headline, summary, city/state, work and pay preferences, availability, optional resume, company details, jobs, applications and messages: recruiting features you request.
• Terms/notice versions, acceptance times, discovery choices, sharing actions, reports, support requests and replies: honoring choices, support and compliance.
• Hosting and authentication services process IP, request, browser/device and security information to deliver and protect the service. The application does not deploy advertising pixels or independent visitor analytics.

2. Purposes and legal bases

Account operation, applications and requested communication rely on GDPR Article 6(1)(b), performance of the service agreement. Proportionate security, abuse review and administration rely on legitimate interests under Article 6(1)(f), subject to your right to object. Binding legal duties rely on Article 6(1)(c). Optional directory discovery relies on consent under Article 6(1)(a), withdrawable without affecting prior lawful use. Terms acceptance and notice acknowledgment are not universal processing consent.

Required fields are needed for the requested function. A resume and discovery are optional. We do not use applicant data for creditworthiness, background reports, targeted advertising or unrelated marketing. Search uses selected filters and chronological or alphabetical ordering, not automated suitability scoring or rejection.

3. Recipients and visibility

Company profiles and approved jobs are public. Candidate discovery is limited to registered employers with active access and to candidates who enabled it and confirmed availability within 30 days. Discovery includes name, professional details, city/state, pay preference and availability, not account email or resume.

Employers you apply to or whose invitations you accept can access your current profile and resume. A resume can contain contact details you include. Applying creates both an application and an accepted conversation. Withdrawing one application does not terminate other applications or the conversation. Messages are available to participants; authorized administrators can review reported conversations for abuse and support.

The portal, account database and private resume storage use the operator’s dhosting account. WorkAtlas handles email/password authentication. dhosting provides hosting and operator email. Disclosure to advisers, authorities or a successor operator requires a lawful reason and applicable safeguards and notice.

4. Retention

Account, profile, recruitment history, saved jobs, support and choice records remain in the live database while the account exists for continued access and retrieval. You can remove a resume, hide a profile, revoke access or delete the account earlier. A job’s expiration removes it from live search, not application history. Discovery lapses after 30 days without confirmation, while the profile remains in your account.

Self-service deletion removes the account, associated live records and resume. Provider recovery copies and security logs are separate and follow applicable provider retention arrangements. Live deletion does not promise immediate erasure from every backup. Ask us about those arrangements or erasure beyond the account controls. Recovery copies are not used for recruitment; deletion requests must be reapplied after a recovery.

Administrative audit records older than 365 days are removed during administration access. A specific legal duty or active dispute may justify restricted preservation beyond normal deletion; we explain the basis and duration where legally permitted. Employers control their downloaded copies and may have their own retention duties.

5. International processing and protection

The operator is in Poland; employers are primarily in the US. Providers may process information in the US and other countries. Applying to a US employer makes information available outside the EEA. We do not promise EU-only or US-only storage. Where required by transfer law, an appropriate mechanism must cover a transfer, such as an applicable adequacy decision or contractual safeguards. Contact the operator for recipient and safeguard information. Acceptance is not an explicit-consent waiver of international-transfer protections.

The application uses HTTPS, account-based permissions and restricted resume downloads. No service can guarantee absolute security. Avoid unnecessary sensitive information. Report suspected compromise through the contact below without passwords or identity documents. We assess incidents and provide legally required notices.

6. Rights and requests

Correct profile data, export information or delete the account in My profile. Use Messages to stop employer sharing. Other access, correction, deletion, portability, restriction or objection requests can be made through Your Privacy Choices, Help, email or post. These routes do not require accepting new terms. Withdraw discovery consent by switching it off and saving or by using Hide my profile.

We may verify identity proportionately before disclosure or deletion. Do not attach ID documents unless a necessary secure method has been arranged. Authorized representatives may supply evidence of authority. Ordinary requests are free, without retaliation. We aim to respond within 30 days, subject to applicable statutory periods, exceptions and lawful extensions. A refusal includes reasons and review options.

GDPR complaints may be made to UODO in Poland or another competent authority. US state channels are described in Your Privacy Choices. An employer is an independent recipient; we can help identify its contact but cannot remotely erase its downloads.

7. US state privacy

Where a state privacy law applies to the operator and data, rights may include access, correction, deletion, portability, opt-out of sale, targeted-advertising sharing or certain profiling, limits on specified sensitive-data uses, and appeal. Some state laws exempt employment data; California differs. Scope and exemptions determine statutory entitlement. We provide the account controls and consider requests from every user.

We do not sell personal information for money or other valuable consideration, share it for cross-context behavioral advertising, use it for targeted advertising or make automated decisions with legal or similarly significant effects. No financial incentives for data are offered. Free access does not require marketing consent. Categories, sources, purposes, recipients and retention are set out above, describing our practices since launch. We do not knowingly sell or share minors’ data.

8. Children, tracking and changes

This service is for adults 18+, not children. Contact us if you believe a child supplied information so we can investigate and remove it as appropriate. No birth date is requested to screen applicants.

Cookies & Tracking describes essential technology, Global Privacy Control and Do Not Track. We update the effective date when practices change. Material new purposes are disclosed before use and require consent where legally necessary. Contact is available without an account.