Privacy Policy

Last updated: 2026-10-07

ReVacancy (“RVC”, “we”, “us”, “our”), of 3 Maja 14a/6, 42-217 Częstochowa, Poland, is the data controller for the platform at app.rvc.global. This Privacy Policy explains what personal data we collect, why we collect it, and your rights under GDPR.

1. Data we collect

• Account information: email address and password hash when you register.
• CV and profile data: any information you upload in your CV (name, work history, skills, education, salary expectations). We extract and store structured fields from this document to power job matching.
• Usage analytics: when analytics cookies are pending or rejected, PostHog receives limited cookieless browser events for approved pages and actions. It sets no analytics cookies or browser storage and uses a daily-rotating server hash instead of a persistent browser identity. There is no session replay, browser session, or GeoIP. If you accept analytics cookies, PostHog may use analytics cookies and browser sessions for approved product flows and may identify a stable account after login. Allow analytics also permits diagnostic session replay on public vacancy pages. Page text and inputs are masked, console and network contents are excluded, and recording stops before Apply. No replay occurs before Allow analytics, and we do not use autocapture or form contents.
• Payment metadata: if you subscribe to a paid plan we redirect you to Stripe's hosted checkout. We receive only a subscription status token. We never store card numbers, CVCs, or full payment details.
• Employer data: company name, contact details, and vacancy text provided during employer registration.

2. How we use your data

• To match your CV profile with relevant job vacancies.
• To send job-match notifications via email digest or Telegram if you opt in, and occasional emails about new matches if you keep that option on. You can change this in your profile or unsubscribe from any email.
• To process subscription payments through Stripe and manage your account status.
• To improve platform reliability and user experience via aggregated analytics.

3. Data sharing

We do not sell your personal data. We share data only with the third-party processors listed below, each bound by data-processing agreements:

• Stripe for payment processing (privacy policy).
• PostHog for product analytics (privacy policy).

4. Data retention

We retain your account and CV data for as long as your account is active. If you delete your account, we purge personal data within 30 days, except where retention is required by law (e.g. financial records for up to 7 years).

5. Your rights

Under GDPR and equivalent legislation you have the right to access, correct, export, or delete your personal data. To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

6. Cookies

We use functional cookies for session authentication. Analytics cookies are optional. Before a choice and after continuing without analytics cookies, limited cookieless measurement remains active without persistent browser identity. Accepting analytics cookies enables browser sessions and approved product flows. Account and server-known registration, login, application, Telegram Show Details, and employer vacancy or payment outcomes may be measured server-side without analytics cookies. Pending or rejected visits report only bounded source, campaign, path, vacancy, surface, and intent fields and do not persist browser attribution. URLs are cleaned of UTM parameters only after analytics cookies are accepted. We do not use advertising cookies.

7. AI assistant connectors

Our public job-search connectors for AI assistants (such as Claude and ChatGPT, described at rvc.global/for-ai) need no account and only read public vacancy data. When your assistant calls them, we receive the search parameters it sends (role, countries, work arrangement, languages, salary and seniority filters) and the requesting IP address. We use these only to answer the request, to rate-limit abuse and to keep short operational logs; the logs record the client type, IP address and tool name, not the search text, and are kept for no more than 30 days. We do not receive your conversation, and we do not sell or share connector data. Vacancy links carry UTM parameters so we can count visits that came from an AI assistant.

8. Contact

Data controller: ReVacancy, 3 Maja 14a/6, 42-217 Częstochowa, Poland. [email protected].