Privacy policy
What we collect, why we need it, who can see it, and how to get rid of it.
Last updated 8 October 2026
This is a reference template for a demonstration deployment. A production hiring platform handles sensitive personal data and needs this reviewed against the law where it operates.
The short version
- We collect what a job platform needs to work, and not more.
- Your profile is only visible to whom you say it is visible to, enforced on the server.
- We never sell your data.
- You can update your profile and privacy settings, and contact support about data access or deletion.
What we collect
You give us
- Account details: name, email, password (stored only as an Argon2id hash).
- Profile: headline, summary, experience, education, skills, location, salary expectation.
- Documents: resumes and any files you attach to an application.
- Applications: cover letters and answers to an employer's screening questions.
We record as you use Growtriz
- Jobs viewed, saved, and applied to — this is what powers your recommendations and your tracker.
- Searches you run, used to improve results.
- Sign-in events with device and approximate location, so you can spot a session you do not recognise on the security page.
Who can see what
| Data | Who can see it |
|---|---|
| Name, headline, skills | Recruiters, if your profile visibility allows it |
| Email and phone | Only recruiters at a company you applied to, and only if you have not hidden them |
| Resume file | Recruiters at companies you applied to; talent-search recruiters only if you allow it |
| Current employer | Hidden from everyone if you switch on “hide my current company” |
| Salary expectation | Only the companies you applied to |
| Recruiter notes about you | Only that hiring team — never shown to you, and never shown to other companies |
These rules are applied when the response is built on the server. A field you have hidden is not sent to the browser and then styled away — it never leaves the database layer.
Why we are allowed to hold it
- Contract: we cannot run your account or send your applications without it.
- Legitimate interests: keeping the platform secure and free of fraud.
- Consent: marketing email, and making your profile discoverable to recruiters.
How long we keep it
- Account and profile data: while your account exists.
- Applications: for the life of the account, so your history stays intact.
This deployment does not provide automatic account erasure. Production retention and erasure timelines need to be confirmed in the approved privacy policy before launch.
Your rights
You can view and update your account and profile in settings. Self-service account deletion and a full data export are not currently available; use contact support for a data access, export, or deletion request. Manage recruiter discovery in privacy settings and email preferences in notification settings.
Security
- Passwords hashed with Argon2id; no employee can read them.
- Sessions use HTTP-only cookies with rotating refresh tokens and reuse detection.
- Uploads are stored under randomised names, with the type validated on the server.
- Every API request re-checks authorisation server-side.
Automated decisions
We compute a match score between you and a role. It uses skills, title, experience, location, salary, and employment type — never age, gender, name, photograph, or institution. It ranks and explains; it never auto-rejects anyone. A person makes every hiring decision.
Contact
Privacy questions or a rights request: contact us.