Privacy Policy

Last updated: 7/9/2026

This Privacy Policy explains how FJIK — Find a Job in Kurdistan ("FJIK", "we") collects, uses, shares, and safeguards personal data when you use our website and services (the "Service"). We aim to align with GDPR principles regardless of your location.

1. Data we collect

• Account data: name, email, phone, password hash, sign-in provider, language.
• Profile data: headline, bio, location, handle, avatar, skills, education, experience, certificates, verification documents.
• CV data: uploaded CVs and any parsed content (skills, employment history, education).
• Application data: jobs saved, jobs applied to, cover letters, application status.
• Employer data: company name, logo, website, industry, job posts, applicant interactions.
• Usage data: pages visited, features used, device and browser information, IP address.
• Communications: in-app notifications, emails we send you, and messages exchanged through the Service.

2. How we use your data

• To operate the Service (create your account, publish your profile, match you to jobs).
• To provide AI features (CV parsing, matching, cover letters, interview prep, skill-gap plans).
• To communicate with you about your account, applications, and platform updates.
• To detect fraud, abuse, and violations of our Terms.
• To comply with legal obligations.

3. Legal bases (GDPR)

• Contract: to provide the Service you signed up for.
• Legitimate interests: to secure the platform, prevent abuse, and improve our services.
• Consent: for optional features such as marketing communications and non-essential cookies.
• Legal obligation: where the law requires processing.

4. Sharing

• With employers: when you apply to a job, your profile and application are shared with that employer.
• Service providers: hosting, database, authentication, email, and AI providers, under contract to process data only on our behalf.
• Legal: where required by law or to protect rights, users, or the public.

We do not sell your personal data.

5. AI processing

When you use AI features, the relevant content (e.g. CV text, job description, prompts) is sent to our AI provider for processing. We do not knowingly submit special-category personal data to AI providers; do not include sensitive personal information beyond what is necessary for the feature.

6. Retention

• Account and profile data: kept while your account is active.
• Applications: kept for at least the duration of the recruitment process.
• CV files and verification documents: kept until you delete them or your account.
• Audit and security logs: kept for a reasonable period to detect and investigate abuse.
• Backups: purged on our standard backup rotation cycle after deletion.

7. Your rights

Depending on your jurisdiction, you may have the right to:

• Access your personal data.
• Correct inaccurate data (edit in your profile).
• Export your data in a portable format.
• Delete your account and personal data.
• Object to or restrict certain processing.
• Withdraw consent for optional processing at any time.

You can export your data or delete your account at any time from your profile settings. Deletion removes your profile, CVs, applications, and other personal data, subject to limited retention for legal and security reasons.

8. Security

We use industry-standard measures including encryption in transit, row-level security on our database, access controls, and audit logging. No system is 100% secure; report suspected vulnerabilities via the support channels in your account.

9. International transfers

Your data may be processed in countries other than your own. We rely on standard contractual clauses or equivalent safeguards where required.

10. Children

The Service is not directed to children under 16, and we do not knowingly collect their data.

11. Contact

Questions or requests about your data? Contact us via the support channels in your account. See also our Terms of Service and Cookie Notice.