Privacy Policy

1. Information we collect

We collect only what the platform needs to function:

• Account data — name, email, CEFA membership number or invitation code, country, and preferred language.
• Profile & resume content — the professional information you choose to add, including employment history, education, certifications, languages, and any optional fields such as security clearances or board service.
• Application data — the roles you apply to, the resume and cover letter you submit, and screening-question answers.
• Communications — messages exchanged within an application thread, and support or report requests you send us.
• Technical data — authentication logs, session and security events, and coarse device/IP information used to secure the platform.

2. How we use your information

We process your information to operate the service: to match you with roles, to share your application materials with the specific employers you apply to, to verify accounts, to schedule interviews, to send transactional and security notifications, and to detect and prevent misuse. We do not sell personal information, and we do not use it for third-party advertising.

3. Who can see your information

• Your profile and resumes are private by default. Employers see only the materials you submit with an application, or a profile you explicitly make searchable.
• Employers see application data only for their own postings — never another employer's applicants.
• Authorized CEFA staff may review account and organization information for verification, moderation, and oversight. Sensitive access (such as resume downloads and administrative actions) is logged.
• We share data with vetted infrastructure providers (hosting, database, email delivery) strictly to run the platform, under contractual confidentiality — never for their own purposes.

4. Legal bases for processing

Where required by law (for example, under the GDPR), we process your data on the basis of the contract to provide you the service, your consent (for optional analytics and non-essential communications), our legitimate interest in operating a secure, high-trust platform, and compliance with legal obligations.

5. Your rights

Subject to your jurisdiction, you may have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — correct inaccurate or incomplete data.
• Erasure — request deletion of your account and associated personal data.
• Portability — export your personal data in a portable format.
• Restriction & objection — limit or object to certain processing.
• Withdraw consent — for any processing based on consent, at any time.

6. Fair, non-discriminatory matching

Match scores are assistive recommendations, not automated decisions. They rate skills, experience, seniority, location, and stated requirements. They never use race, ethnicity, religion, disability, pregnancy, sexual orientation, gender identity, marital status, or other protected characteristics, and they never use your name or photograph as a scoring factor.

7. Data retention

We keep personal data while your account is active and for as long as needed to provide the service and meet legal, audit, and dispute-resolution obligations. When you delete your account, we remove or anonymize personal data that we are not legally required to retain. Audit and security logs are retained on a defined schedule for integrity and abuse prevention.

8. Security

Documents are stored in private, access-controlled storage; employer access to a resume is time-limited, server-signed, and audited. Access to your account and data is governed by role-based and row-level controls. See our Security page for more detail.

9. International transfers

CEFA operates internationally. Where personal data is transferred across borders, we use appropriate safeguards consistent with applicable law.

10. Children

The platform is intended for professionals and is not directed to anyone under 18. We do not knowingly collect data from children.

11. Changes & contact

We may update this policy; material changes will be notified in-platform. To exercise any right, or for privacy questions, use the Contact page or your CEFA member representative.