Privacy Policy
At Jobyhood, your privacy is fundamental to everything we build. This Privacy Policy explains how we collect, use, and protect your personal data in compliance with the General Data Protection Regulation (GDPR).
1. Data Controller
Jobyhood Ltd., registered in Sofia, Bulgaria, is the data controller responsible for your personal data. You can reach our Data Protection Officer at dpo@jobyhood.com.
2. Data We Collect
We collect information you provide directly: name, email, phone number, and company details for company accounts. Through platform usage, we collect AI conversation data used for profile building, skill assessments, your Points history, job preferences and matching data, and usage analytics. We do not collect sensitive personal data such as race, religion, or health information.
3. How We Use Your Data
We use your data to provide AI-powered job matching, build and maintain your professional profile, keep your Points balance and history, communicate with you about your account and matches, and improve our platform and matching algorithms. Legal basis: contract performance (Art. 6(1)(b) GDPR) and legitimate interest (Art. 6(1)(f) GDPR).
4. Anonymous Profiles
By default, your profile is matched with companies' jobs anonymously. Before you give permission, a company sees your professional details (such as skills, experience and education) and how well you match its job, but not your name or contact details. Your identity is shared only with your permission, for a specific company and job, and you decide each time.
5. Data Sharing
We share your data only with companies you choose to reveal your identity to, service providers who help us operate the platform (under data processing agreements), and legal authorities when required by law. We never sell your personal data to third parties.
6. Data Retention
We retain your data for as long as your account is active. After account deletion, we remove your personal data within 30 days, except where retention is required by law. Anonymized and aggregated data may be retained for analytics purposes.
7. Your Rights
Under GDPR, you have the right to access your personal data, rectify inaccurate data, erase your data (right to be forgotten), restrict processing, data portability, object to processing, and withdraw consent at any time. To exercise these rights, contact us at privacy@jobyhood.com or use the settings in your account.
8. Data Security
We implement appropriate technical and organizational measures to protect your data, including encryption in transit and at rest, regular security audits, access controls and authentication, and EU-based data hosting.
9. Cookies
We use essential cookies and similar browser storage that the platform needs to work: to keep you signed in, remember your language and protect forms. They are always on. Analytics is optional and used only if you allow it in "Privacy choices" at the bottom of every page; you can withdraw that consent there at any time, as easily as you gave it, and withdrawing deletes the analytics cookie. Our analytics provider is PostHog, on its EU cloud. With your consent it counts the pages you visit and clicks on links and buttons. It also measures how fast each page loads and responds (web vitals) and notes when you leave a page. It sets a cookie and browser storage named ph_…_posthog that holds a random identifier, kept for up to 12 months; if you are signed in, that identifier is linked to your internal account number, never to your name or email. It records nothing you type, makes no session recordings, and on the sign-in, CV, account, candidate and interview pages it notes only which page was visited. With the same consent, Grafana Faro (Grafana Cloud, by Grafana Labs) records errors that happen in the page, how fast pages load and respond, and the timing of the site's requests to our servers, so we can find and fix faults. It keeps a random session identifier in this tab's browser storage (com.grafana.faro.…), which is deleted when you close the tab or withdraw consent; if you are signed in, it is linked to your internal account number, never to your name or email. Web addresses are sent without the part after "?", and it records nothing you type.
10. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of material changes via email and update the "last updated" date.
11. Contact
For privacy-related questions or to exercise your data rights, contact us at privacy@jobyhood.com.