Privacy Policy

01Who we are

CyprusTech.Careers operates this site and is the data controller for personal data described in this policy. You can reach us about anything in this policy at help@cyprustech.careers.

This policy covers cyprustech.careers, a job board for technology roles in Cyprus. It explains what we collect, why, who we share it with, and what you can ask us to do about it. It applies to job seekers, employers, and anyone who simply browses the site.

02What we collect

If you create a job seeker account

We store the profile you build during onboarding and can edit at any time afterwards:

• Your email address, and first and last name if you give them.
• Profile details: headline, bio, profile photo, city, remote working preference, experience level, skills, and the job categories you are interested in.
• Minimum salary expectation, if you set one.
• Links you choose to add: LinkedIn, GitHub, portfolio, Dribbble, Behance and X/Twitter.
• Your CV, uploaded as a PDF, plus any work history extracted from it.
• Cover letters you write or upload when applying.
• Jobs you save, jobs you apply to, and the applications you submit through the site.
• Your job alert preferences and how often you want to hear from us.

If you create an employer account

• Your email address and name.
• Your company profile: name, description, logo, website and related details shown on your listings.
• The job listings you publish and the applications they receive.
• Your purchase history and listing slot balance. Card details are handled entirely by Stripe and never reach our servers.

If you only subscribe to job alerts

We store your email address, optionally your first name, and the filters you chose, so we can send the digest you asked for. No account is required.

If you just browse

We record aggregate usage of the site and a count of how many times each listing is clicked through to. This is not tied to your identity and is used to tell employers how their listings are performing and to work out which pages need attention.

03Why we use it, and our legal basis

Under the GDPR we need a lawful basis for each use of your data. Ours are as follows.

04CV parsing and CV review

The site offers two optional features that read your CV: automatic extraction of your work history when you upload it, and an on-demand CV review that gives you written feedback.

Both work by sending your CV as a PDF to Anthropic, which operates the Claude AI models, and returning the result to you. Your CV is sent only when you upload it or ask for a review. If you would rather it were never sent, do not upload a CV and do not request a review — the rest of the site works without either.

05Who we share it with

We do not sell personal data. We share it with employers when you choose to apply, and with the service providers below who process data on our instructions.

When you apply for a job, the employer that posted it receives your profile, your CV and your cover letter. From that point the employer is an independent controller of that copy and handles it under its own privacy policy. We cannot delete data an employer has already downloaded, though we will pass on a request if you ask.

Some providers are based outside the European Economic Area. Where that is the case, transfers rely on the European Commission's Standard Contractual Clauses or an equivalent safeguard.

06How long we keep it

• Account data: for as long as your account exists. Delete your account and we remove your profile, CV and cover letters.
• Applications: retained while your account exists so you can see your history. The employer keeps its own copy independently.
• Job alerts: until you unsubscribe, which every alert email links to.
• Job listings: published for 30 days, then expired. Expired listings are kept as part of the employer's account history.
• Payment and invoice records: kept for as long as accounting and tax law requires, normally six years.
• Aggregate usage statistics: kept indefinitely, because they contain nothing that identifies you.

07Your rights

Under the GDPR you can ask us to do any of the following, free of charge, and we will respond within one month.

• Access — get a copy of the personal data we hold about you.
• Rectification — correct anything inaccurate. Most of it you can edit yourself from your dashboard.
• Erasure — delete your account and the data attached to it.
• Portability — receive your data in a machine-readable format, or have it sent to another service.
• Restriction — ask us to pause processing while a dispute is resolved.
• Objection — object to processing we base on legitimate interests.
• Withdraw consent — for job alerts and CV analysis, at any time, without affecting what was lawful beforehand.

To exercise any of these, email help@cyprustech.careers from the address on your account.

If you think we have handled your data badly, please tell us first so we can fix it. You also have the right to complain to the Office of the Commissioner for Personal Data Protection in Cyprus at https://www.dataprotection.gov.cy, or to the supervisory authority where you live.

08Security

Traffic to the site is encrypted in transit. Sign-in uses a single-use code sent to your email rather than a stored password, so there is no password of yours for us to lose. Access to production data is limited to people who need it to run the service.

No service can promise perfect security. If a breach affects your personal data and is likely to put your rights at risk, we will notify you and the supervisory authority as the GDPR requires.

09Children

The site is intended for people old enough to work and is not directed at children. We do not knowingly collect data from anyone under 16. If you believe a child has given us personal data, contact us and we will delete it.

10Changes to this policy

We may update this policy as the service changes. The date at the top always reflects the current version. If a change materially affects how we use your data, we will tell you by email or by a notice on the site before it takes effect.