GDPR Compliance

Your data privacy and security is our top priority

Our GDPR Commitment

Data Protection by Design

Privacy and data protection are built into our systems from the ground up, not added as an afterthought.

Transparency

We're clear about what data we collect, why we collect it, and how we use it to provide our services.

Data Portability

Export your data at any time in standard formats. Your data belongs to you.

Right to Erasure

Request complete deletion of your data and we'll remove it from all our systems within 30 days.

Your Rights Under GDPR

Article 15

Right of Access

Request a copy of all personal data we hold about you. We will provide it in a structured, machine-readable format within 30 days.

Article 16

Right to Rectification

Update your profile data at any time through your account settings, or contact us to correct inaccurate information.

Article 17

Right to Erasure

Delete your account and all associated data from your account settings. Data is permanently removed within 30 days.

Article 18

Right to Restriction

Request that we restrict processing of your data while a complaint or rectification request is being resolved.

Article 20

Right to Data Portability

Export your profile, resume, and application history in JSON format from your account settings at any time.

Article 21

Right to Object

Object to processing based on legitimate interest. Contact us and we will cease the processing unless we demonstrate compelling grounds.

Legal Basis for Processing

Processing Activity Legal Basis
Account creation & authentication Contract performance (Art. 6(1)(b))
Resume tailoring & application submission Contract performance (Art. 6(1)(b))
Sending transactional emails Contract performance (Art. 6(1)(b))
Anonymized analytics Legitimate interest (Art. 6(1)(f))
Error tracking Legitimate interest (Art. 6(1)(f))

Sub-Processors

We use the following third-party services to operate JobGuru. Each maintains their own GDPR compliance programs.

Provider Purpose Location
Neon Database hosting US (AWS)
Fly.io Application hosting US (iad)
Resend Transactional email US
Google (Gemini) AI processing US
Stripe Payment processing US

International Data Transfers

Your data is processed in the United States. We rely on Standard Contractual Clauses (SCCs) as our transfer mechanism for EU/EEA data.

Data Retention

We retain your data for as long as your account is active. Deleted account data is purged within 30 days. Anonymized analytics data may be retained indefinitely as it cannot be linked back to you.

Data Controller

Chronobyte, Inc.
131 Continental Dr Suite 305
Newark, DE 19713, United States

To exercise any of your GDPR rights, email privacy@jobguru.to with the subject line "GDPR Request". We will respond within 30 days.

If you believe your data rights have been violated, you have the right to lodge a complaint with your local Data Protection Authority.