[TEMPLATE — pending legal review. This document will be finalized by legal counsel before public launch.]
Privacy Policy
Effective date: 2026-06-08
1. Who we are
MatchPRO ("we", "our", "us") is a career matching platform operated by MatchPRO Ltd, registered in the Republic of Cyprus. Contact: privacy@matchpro.io
2. What data we collect
We collect: (a) account data — email address, hashed password, display name; (b) professional data — resume content, career history, skills, preferences you provide; (c) vacancy data — job descriptions posted by employer accounts; (d) usage data — page views, feature interactions, error logs; (e) consent records — the version of these policies you accepted and the timestamp.
3. Anonymity-until-consent model
Your profile is anonymous by default. Other platform users see only derived, redacted signals (e.g. "Senior backend engineer, 8 years, Limassol area") until you explicitly approve a reveal request. When you approve a reveal, only the requesting party receives your contact details — you may revoke this grant at any time.
4. AI processing
We use AI models to extract structured data from resumes and job descriptions, generate compatibility scores, and suggest reply hints in chat. AI processing operates on redacted data (personal identifiers are stripped before analysis). Raw personal information is never sent to external AI providers without your explicit consent.
5. How we use your data
We use your data to: provide and improve the matching service; send transactional notifications (match alerts, reveal requests) if you have enabled them; comply with legal obligations; detect and prevent fraud or abuse.
6. Data sharing
We do not sell your personal data. We share data with: (a) infrastructure providers (cloud hosting, database) under strict data-processing agreements; (b) payment processor (Stripe) for billing; (c) legal authorities when required by law. We never share raw personal data with other platform users without a completed reveal consent.
7. Retention
We retain your data for as long as your account is active. Upon account deletion, all personal data is permanently erased within 30 days, except data we are required to retain by law (e.g. billing records for tax purposes, retained for 7 years under Cyprus law).
8. Your rights (GDPR)
Under GDPR you have the right to: access your data; correct inaccurate data; request erasure ("right to be forgotten") — use Settings → Delete my data; restrict or object to processing; data portability; lodge a complaint with the Cyprus Commissioner for Personal Data Protection.
9. Cookies
We use session cookies required for authentication (Better Auth). We do not use third-party tracking cookies. You can disable cookies in your browser, but this will prevent you from signing in.
10. Security
We implement industry-standard security: TLS in transit, encrypted storage, access controls, and regular audits. Passwords are hashed using bcrypt; we never store plaintext credentials.
11. Changes
We will notify you by email at least 14 days before material changes to this Policy take effect. Continued use of the platform after that date constitutes acceptance of the updated Policy. The consent version recorded at sign-up is stored in your account.
12. Contact
Data protection officer: privacy@matchpro.io. Postal: MatchPRO Ltd, Limassol, Cyprus.
Last updated: 2026-06-08