Your Data, Protected

Privacy Policy

Last updated: March 27, 2026

1Introduction

Welcome to Evresio Inc. Job Portal. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our job portal platform, in compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and the Cyprus Data Protection Law (Law 125(I)/2018).

If you do not agree with our policies and practices, please do not use our platform. For questions about this policy, contact our Data Protection Officer at [email protected].

2Information We Collect

2.1 Personal Information

We collect personal information that you voluntarily provide to us when you register on the platform, including:

  • Name and email address
  • Phone number and physical address (Cyprus residents only)
  • Profile picture or avatar
  • Professional information (resume, work history, skills, education)
  • Business information (for employers: company name, logo, business details)

2.2 Authentication Information

When you sign in using Google OAuth or Microsoft OAuth, we receive your email address and basic profile information from the respective identity provider. We do not have access to your Google or Microsoft password. Authentication is handled via Google's OAuth 2.0 protocol or Microsoft's Azure Active Directory (Azure AD) OAuth 2.0 protocol.

2.3 Usage Information

We automatically collect certain information when you visit, use, or navigate the platform, including:

  • Log and usage data (IP address, browser type, device information)
  • Job views and application activity
  • Business profile views
  • Session information

2.4 Consent Records

We record your cookie consent decisions, including the categories of cookies you accepted or rejected, the date and time of your decision, and the version of the policy you consented to. This record is maintained in compliance with our accountability obligations under GDPR Article 5(2).

3How We Use Your Information

We use the information we collect or receive for the following purposes:

  • To create and manage your account
  • To facilitate job searching and recruitment activities
  • To process and manage job applications
  • To verify Cyprus residency and employment eligibility
  • To communicate with you about your account, jobs, or applications
  • To provide customer support and respond to your inquiries
  • To improve our platform and develop new features
  • To ensure platform security and prevent fraud
  • To comply with legal obligations and enforce our Terms and Conditions
  • To send you relevant job recommendations (for candidates, where you have consented)
  • To provide aggregated, anonymised analytics to employers about their job postings

4How We Share Your Information

4.1 With Employers

When you apply for a job, your application information (including your name, contact details, resume, and cover letter) is shared with the employer who posted the job. By applying, you acknowledge that the employer becomes a data controller for that information and must process it in compliance with GDPR.

4.2 With Other Users

Certain information, such as your public profile (if enabled), may be visible to other users of the platform. Business profiles and job postings are publicly visible on the platform.

4.3 Service Providers

We may share your information with third-party service providers who perform services on our behalf, such as hosting, analytics, and customer support. These providers are contractually obligated to protect your information and process it only as instructed by us (Data Processing Agreements are in place where required by GDPR Article 28).

4.4 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency), including the Office of the Commissioner for Personal Data Protection in Cyprus.

4.5 Business Transfers

If we are involved in a merger, acquisition, or asset sale, your personal information may be transferred. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.

5Data Security

We implement appropriate technical and organisational security measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction, in accordance with GDPR Article 32. These measures include encrypted data transmission (TLS/HTTPS), access controls, and regular security reviews. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security. If a data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and you directly where required by law.

6Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by law. Our specific retention periods are:

  • Active account data: retained for the lifetime of your account plus 2 years after deletion
  • CVs and resumes: retained for 3 years after your last activity on the platform, then permanently deleted
  • Job application data: retained for 2 years after the application decision date
  • Audit logs (admin actions, user deletions): retained for 5 years for legal compliance
  • Consent records: retained for 3 years after the consent decision
  • Analytics data (job views, business profile views): anonymised after 12 months
  • Support ticket data: retained for 2 years after ticket closure
  • Upon account deletion, personal data is deleted or anonymised within 30 days, except where legal obligations require longer retention

7Your Privacy Rights

Under Cyprus and European Union data protection laws, you have the following rights:

  • Right to Access (Art. 15): You can request access to your personal information and obtain a copy
  • Right to Rectification (Art. 16): You can request correction of inaccurate or incomplete information
  • Right to Erasure (Art. 17):You can request deletion of your personal information ("right to be forgotten")
  • Right to Restriction (Art. 18): You can request restriction of processing your information
  • Right to Data Portability (Art. 20): You can request a copy of your information in a structured, machine-readable format
  • Right to Object (Art. 21): You can object to processing of your personal information based on legitimate interests
  • Right to Withdraw Consent (Art. 7(3)): You can withdraw your consent at any time — this does not affect the lawfulness of processing before withdrawal

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. If you are unsatisfied with our response, you may lodge a complaint with the Office of the Commissioner for Personal Data Protection in Cyprus (see Section 15).

8GDPR Compliance and Legal Bases

As we operate in Cyprus, a member state of the European Union, we comply with the General Data Protection Regulation (GDPR). We process your personal data lawfully, fairly, and transparently. Our legal bases for processing include:

  • Consent (Art. 6(1)(a)): For optional analytics cookies, marketing communications, and job recommendations
  • Contract performance (Art. 6(1)(b)): Processing necessary to deliver the services you have requested under our Terms and Conditions
  • Legal obligation (Art. 6(1)(c)): Compliance with Cyprus employment and data protection laws
  • Legitimate interests (Art. 6(1)(f)): Fraud prevention and platform security; aggregated analytics to improve platform performance; providing employers with anonymised analytics about their job post reach. We have conducted a balancing test confirming these interests do not override your fundamental rights.

8.1 Automated Decision-Making and Profiling (GDPR Article 22)

We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects. Job ranking, recommendation algorithms, and analytics features are informational tools only and do not constitute automated decision-making under GDPR Article 22. All significant decisions affecting your account (such as verification approval or suspension) are made by human administrators.

9Cookies and Tracking Technologies

We use cookies and similar tracking technologies as described in our Cookie Policy. Non-essential cookies (analytics and functionality) require your explicit opt-in consent. You can manage your cookie preferences at any time via our Cookie Preferences page or by using the consent banner shown on your first visit.

10Third-Party Services

Our platform integrates with Google OAuth and Microsoft OAuth (Azure AD)for authentication. When you choose to sign in with Google, Google's privacy policy governs their handling of your data. When you choose to sign in with Microsoft, Microsoft's privacy policy governs their handling of your data. We also use Google Analytics (with IP anonymisation enabled) to collect aggregated, anonymous usage data — only when you have given explicit analytics consent. Our platform may contain links to third-party websites or services. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party websites or services.

11Children's Privacy

Our platform is not intended for users under the age of 16. We do not knowingly collect personally identifiable information from anyone under the age of 16. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us at [email protected] so that we can take the necessary action, including deletion of that information.

12International Data Transfers

Our platform operates primarily within Cyprus and the European Economic Area (EEA). Where your information is transferred outside the EEA (for example, to cloud infrastructure providers), we ensure appropriate safeguards are in place, such as the European Commission's Standard Contractual Clauses (SCCs) or adequacy decisions, in compliance with GDPR Chapter V.

13Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, we will provide notice via email or a prominent notice on the platform at least 30 days before the changes take effect.

14Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

Evresio Inc.

Data Protection Officer

Email: [email protected]

15Data Protection Authority

If you are a resident of Cyprus or the European Economic Area and you believe we have not addressed your concerns adequately, you have the right to lodge a complaint with the supervisory authority in your country of residence. In Cyprus, this is:

Office of the Commissioner for Personal Data Protection

1 Iasonos Street, 1082 Nicosia, Cyprus

Tel: +357 22818456

Email: [email protected]

Website: www.dataprotection.gov.cy