Privacy Policy
Effective date: 2026-10-01
1. Who we are
MatchPRO is operated by 1FUN PROVIDER LTD, a company registered in the Republic of Cyprus under number HE 442148. 1FUN PROVIDER LTD is the controller of the personal data described in this Policy. Data-protection contact: privacy@matchpro.io.
2. What data we collect
We collect: (a) account data — email address, hashed password, display name, language and the role you chose; if you sign in with Google or Telegram, the name, email address or username they send us; (b) your CV as a file (encrypted) and as extracted text, the answers you give on the profile form, and the embeddings and match scores we derive from them; (c) vacancy and company data from employer accounts; (d) messages — contact details are removed from messages in an anonymous conversation before they are stored; (e) the questions employers ask our AI about your anonymous profile; (f) reveal, contest and moderation records — a moderation refusal quotes the passage that caused it; (g) your Telegram chat ID, if you connect it; (h) a Stripe customer ID and invoices — never card numbers; (i) technical logs (IP address, browser, errors); (j) consent records — the version of these documents you accepted and when. We do not ask for health, religious, trade-union, sexual-orientation, ethnic-origin or political data; please do not put them in free text. If you do, they are processed only as part of the document you chose to publish, and you can remove them at any time.
3. Anonymity-until-consent model
Your profile is anonymous by default: employers see your occupation, skills, experience, a salary band and your country — never your name, contact details, CV file, exact city or current employer. Your name, contact details and full profile reach an employer only when you approve their reveal request, apply to their vacancy (applying is a reveal to that employer), or agree to a mutual reveal in chat («show names»). In the first two cases they also receive your original CV file if you uploaded one, which they can download; a reveal in chat never shares the file. You can revoke any reveal from Dashboard → Reveals; access ends immediately, but we cannot take back what was already seen, and a CV file the employer already downloaded stays with them. You can also block specific companies so that they never see your profile.
4. AI processing
We use AI models to read resumes and job adverts, to score compatibility, and to suggest reply hints in chat. Being accurate about this: the parser receives your CV text as written, because working out a job title or a skill requires reading it. What we do NOT do is hand it back to anyone — the profile other users see stays anonymous until you approve a reveal. Three narrower protections do apply, and each is a real mechanism rather than a promise: messages you send while a conversation is anonymous are stripped of contact details before they are stored; the text used to build matching vectors has protected attributes (gender, age, family and parental status, nationality) removed first; and the AI provider receives no identifier of you beyond what is inside the document itself. Our provider is OpenRouter, which routes to a model vendor.
4a. Automated decisions and AI
Matching is decision support: our AI scores how well a profile and a vacancy fit and shows both sides the factors behind the score (skills, experience, salary, location). It never rejects a candidate or fills a role — an employer or a candidate always decides. Content you publish is checked automatically before it goes public; doubtful items go to a person, and a refusal tells you why and can be corrected or appealed. You can contest any match from its page (Dashboard → Matches → Contest); a person reviews it and records the outcome. Under the EU AI Act, matching for recruitment is a high-risk use, and we provide these explanations and human review on that basis. We do not use your data to train AI models.
5. How we use your data
We use your data to run the marketplace: to parse and publish profiles and vacancies, compute and explain matches, moderate content, translate it into the languages we support, run chat and reveals, bill employers, send transactional notifications (reveal requests, messages, decisions — on by default, switchable in Settings), send digests and alerts only if you opt in, notify you via Telegram only if you connect it, detect fraud, spam and undeclared agencies, keep the service secure, and produce anonymous statistics.
5a. Legal bases
We rely on: (a) performance of our contract with you (GDPR Art. 6(1)(b)) — creating and publishing your anonymous profile or vacancy, AI parsing, matching and explanations, moderation, translation, chat, reveal requests, transactional notifications and billing; (b) our legitimate interests (Art. 6(1)(f)) — security, fraud and abuse prevention, service statistics that do not identify you, defending legal claims, and crediting the referral or campaign link you arrived through to an account you create in that same browser session; (c) legal obligations (Art. 6(1)(c)) — tax and accounting records, responding to authorities; (d) your consent (Art. 6(1)(a)) — marketing emails and digests, and connecting Telegram. You can withdraw consent at any time in Settings without affecting earlier processing.
6. Data sharing
We do not sell personal data. We share it only with processors acting on our instructions under data-processing agreements: Hetzner (hosting in the EU); Cloudflare (traffic protection and encrypted storage of uploaded CV files); OpenRouter, Inc. (United States) and the AI model vendor it routes to, which receive the text of resumes, vacancies and anonymous chat excerpts for parsing, matching, moderation and suggestions and may not train on it; Resend (email delivery); Stripe (payments — we never see card numbers); Telegram, only if you connect it; Google, only if you sign in with Google. Where a processor is outside the EEA (OpenRouter, Resend, Stripe), transfers rely on the Standard Contractual Clauses of the European Commission or on the EU–US Data Privacy Framework where the recipient is certified; copies are available on request. We disclose data to authorities only where the law requires. Other users see your identity only after a reveal you granted.
7. Retention
We keep your data while your account exists. When you delete your account, everything is erased immediately in one operation; copies may remain in encrypted backups for up to seven months before they cycle out. Specific periods: a reveal you revoked, or that expired, is kept for 90 days so you can see who had access; the questions employers asked our AI about your anonymous profile are kept for 12 months; vacancies nobody confirms are archived (not deleted) after 90 days. Invoices and payment records are kept for as long as Cyprus tax law requires. If an email address bounces or reports us as spam, we keep a one-way hash of it permanently so that we never write to it again — the address itself is not retained. Anonymous statistics (AI cost, match feedback) are kept with the link to you removed.
8. Your rights (GDPR)
You can: access and export your data (Settings → Privacy → Download my data, or email us); correct it (edit your profile); delete it (Settings → Privacy → Delete my data, or email us); restrict or object to processing based on our legitimate interests; withdraw any consent; and ask for a human review of an automated decision (see section 4a). Write to privacy@matchpro.io — we answer within one month. You may also lodge a complaint with the Office of the Commissioner for Personal Data Protection of Cyprus (1 Iasonos Street, 1082 Nicosia, www.dataprotection.gov.cy) or with the supervisory authority of your own EU country.
9. Cookies
We set: a sign-in cookie (Better Auth; it lasts about seven days and is strictly necessary); i18n_locale, which remembers your language; and, only if you arrive through a tagged marketing or referral link, mp_attribution as a session cookie: it lasts for your browser session (a browser that restores sessions may keep it longer), is used only for an account you create during that visit, and is deleted as soon as it has been credited — you may delete it at any time. Small preferences (dismissed banners, the dashboard side) are kept in the local storage of your browser. Cloudflare, which protects the site from attacks, may set a short-lived security cookie. We load no third-party analytics or advertising cookies and host our own fonts. Blocking cookies prevents signing in.
10. Security
TLS everywhere; uploaded CV files encrypted with AES-256-GCM before storage; passwords hashed with bcrypt — we never store plaintext credentials; sessions stored server-side; role-based access controls; daily verified backups. We have not yet undergone third-party security certification.
11. Changes
We will email you at least 14 days before material changes to this Policy take effect and, where a change affects your rights, ask you to accept it. The version you accepted at sign-up is recorded on your account.
12. Contact
Data-protection contact: privacy@matchpro.io.
Last updated: 2026-10-01