Privacy Policy — eurojobs.ge
Version 2.0 · Effective 28 August 2026 · Replaces version 1.0 of 27 August 2026
Your CV is one of the most personal documents you own. This page says exactly what we do with it, who else ever sees it, and how you get it back or get rid of it.
1. Who is responsible for your data
The data controller is VK Labs LLC (შპს „ვი ქეი ლაბს"), identification code 400474615, registered at Gldani Massif, III Micro-district, Building 4, Apt. 148, Tbilisi, Georgia.
Contact for any privacy question or request: eurojobs.ge@gmail.com.
We process personal data under the Law of Georgia on Personal Data Protection and, where it applies to you, the EU General Data Protection Regulation (Regulation (EU) 2016/679).
2. What we collect
You give us:
- Account details — when you sign in with Google, Google gives us only your name, email address and profile picture. We never receive your Google password.
- Your CV file and everything in it, plus the data we extract from it: occupation, work history, education, languages, skills.
- Profile fields you fill in — target countries, work permit status, salary expectations, languages, occupations, and similar.
- Notification settings — delivery channel, frequency, minimum match score, target countries, and the email address or Telegram chat ID you want messages sent to.
We generate:
- Match scores and explanations — the numeric fit between your profile and each vacancy.
- A vector representation ("embedding") of your CV text, used to find similar vacancies.
- Activity records — vacancies you save, apply-clicks, and feedback you give on match quality.
We receive from our payment provider:
- Transaction records — amount, currency, date, status, an order reference, and the card type and last four digits. We never receive or store your full card number, expiry date or CVV.
Collected automatically:
- Technical data — IP address, browser and device type, and server logs, kept for security and to keep the service running.
3. Why we use it, and our legal basis
| What we do | Why | Legal basis |
|---|---|---|
| Create your account and keep you signed in | To give you the service you asked for | Performance of a contract |
| Read your CV, extract data, build your profile | Core function of the Platform | Performance of a contract |
| Generate and export your CV document | Core function of the Platform | Performance of a contract |
| Score vacancies against your profile | Core function of the Platform | Performance of a contract |
| Send you match notifications | You asked to be notified | Consent — withdrawable at any time |
| Take payment and issue receipts | To sell you a paid service | Performance of a contract |
| Keep accounting and tax records | Required by Georgian law | Legal obligation |
| Detect fraud, abuse and scraping; keep logs | To keep the Platform safe and available | Legitimate interests |
| Answer your emails and complaints | To support you | Performance of a contract / legitimate interests |
Where we rely on consent, you can withdraw it at any time — that does not affect processing already carried out.
4. Automated processing
Matching is done entirely by software. Your CV text is converted into an embedding and compared against vacancy embeddings, then scored on occupation, skills, salary and location.
No automated decision is made about you that produces legal effects. A score only changes the order in which vacancies appear to you. Nobody is accepted or rejected for a job by our software — hiring decisions are made by employers, after you apply to them yourself.
If you think a score is wrong or unfair, email us and a person will review it.
5. Sensitive information — please leave it out
A CV can easily contain special categories of data: health or disability details, religion, political or trade union membership, ethnicity, or a photograph. We do not need any of it and we do not ask for it.
Please remove such details before you upload. If you choose to leave them in, you are explicitly consenting to us processing them as part of your CV, and you can remove them at any time by editing your profile or deleting your account.
6. Who else sees your data
We never sell your data. We never send your CV to an employer. Only you do that.
We use a small number of service providers who process data on our instructions:
| Provider | What it does | Where |
|---|---|---|
| Supabase | Database, authentication, file storage, and the edge function that generates embeddings | European Union |
| Sign-in only (OAuth). Google's own policy applies to your Google account | Global | |
| Resend | Sends notification emails, when email notifications are enabled | United States |
| Vercel | Hosts and serves the website | United States (global edge network) |
| the payment system provider shown at checkout | Processes card payments; handles all card data | Georgia |
Your CV text and extracted profile do not leave Supabase. CV files are parsed on our own server using open-source libraries — they are not sent to any third-party AI service. Embeddings are generated by a model running inside Supabase's own infrastructure.
We may also disclose data where the law requires it — for example to a court or a competent authority acting under a valid legal request.
7. Transfers outside Georgia and the EU
Your data is stored in the European Union. Some providers listed above operate from the United States. Where data is transferred outside Georgia or the European Economic Area, we rely on the recipient's adequacy status or on Standard Contractual Clauses, together with the safeguards each provider commits to in its data processing agreement.
You can ask us for details of the safeguards that apply to any specific transfer.
8. How long we keep things
| Data | Kept for |
|---|---|
| Account, profile and CV | While your account is active |
| Everything above, after you ask for deletion | Erased within 30 days |
| Notification settings | Until you cancel, or your account is deleted |
| Payment and accounting records | As long as Georgian tax and accounting law requires, even after account deletion |
| Security and server logs | [N] months |
| Support emails | [N] months after the matter is closed |
After an account is deleted, anything we must keep by law is kept for that purpose only and is not used to profile you or contact you.
9. How we protect it
- All traffic is encrypted in transit (HTTPS); data is encrypted at rest by our database provider.
- Access to production data is restricted to the people who need it, and database access is enforced at row level so one account cannot read another's data.
- Card data never reaches our servers.
- Signing in is handled by Google — we never see or store a password.
No system is perfectly secure. If a breach happens that is likely to put your rights at risk, we will notify the Personal Data Protection Service of Georgia and tell you directly, without undue delay.
10. Your rights
You can ask us to:
- See the data we hold about you, and get a copy;
- Correct anything inaccurate or incomplete;
- Delete your account and everything in it;
- Restrict or object to processing, including profiling;
- Port your data — receive it in a structured, machine-readable format, or have it sent elsewhere;
- Withdraw consent at any time, including by unsubscribing from notifications;
- Stop any direct marketing, immediately and permanently.
Some of this you can do yourself, right now, in your account: view and edit your profile, export your CV, change notification settings, or delete your account entirely.
For anything else, email eurojobs.ge@gmail.com. We reply within 10 working days. If the request is complex we may extend by a further 10 working days and will tell you why within the original period. Exercising these rights is free.
11. If you want to complain
Please come to us first — eurojobs.ge@gmail.com. Most things are fixed quickly.
You also have the right to complain to a supervisory authority:
- Personal Data Protection Service of Georgia — the authority supervising us; or
- the data protection authority of your own country, if you are in the European Economic Area.
12. Children
The Platform is not for people under 16. We do not knowingly collect their data. If you believe a child has created an account, tell us and we will delete it.
13. Cookies
We use only strictly necessary technical cookies. See the Cookies Policy for the full list.
14. Payments
Paid features are available on the Platform. Prices are always shown before you buy, and payment is processed by a licensed payment service provider — we never receive your card details. What we do receive is listed in clause 2. Refund and withdrawal rights are set out in clause 10 of the Terms of Service.
15. Changes to this policy
We may update this policy. The current version, with its version number and effective date, is always published on this page. If a change materially affects your rights, we will announce it on the Platform and, for account holders, by email at least 14 days before it takes effect.
16. Contact
VK Labs LLC (შპს „ვი ქეი ლაბს")
Identification code: 400474615
Registered address: Gldani Massif, III Micro-district, Building 4, Apt. 148, Tbilisi, Georgia
Privacy contact: eurojobs.ge@gmail.com
Phone: +995 555 63 15 13
Version 2.0 — effective 28 August 2026.