Privacy Policy
Who we are
Jazieel ("we", "us", "our") operates the recruitment platform M4tchy.com (the "Platform"). This Privacy Policy explains how we collect, use, store, share, and secure personal data, and how individuals can exercise their rights under applicable data protection laws, including GDPR and PDPL.
Roles
Organizations and Independent Recruiters act as independent controllers for hiring-related processing they determine (e.g., job creation, candidate evaluation, hiring decisions).
Jazieel acts as:
- Processor for hiring data processed on behalf of Organizations/Independent Recruiters within the Platform.
- Controller for Platform operations (accounts, billing, security), support, service communications, product analytics (with consent), and compliance.
Categories of data we process
- Applicants (job seekers): profile data, CV/resume content, application history, communications with recruiters, activity on the Platform.
- Recruiters & Organization users: account details (name, email, role), job postings, hiring workflow data, communications with applicants.
- Device/usage data: logs, device/browser info, and interaction events. Analytics are collected only with consent where required by law.
Purposes and legal bases (mapping)
We map each activity to at least one legal basis recognized under applicable law.
| Processing activity | Purpose | Legal basis |
|---|---|---|
| Account registration & authentication | Provide and secure the Platform | Contract necessity; Legitimate interests (security) |
| Applicant CV upload & profile management | Deliver core recruitment features | Contract necessity |
| Recruiter–applicant messaging (via Google integration) | Enable communications related to hiring | Contract necessity; Legitimate interests (service operation) |
| Candidate ranking/matching assistance (AI) | Help recruiters find relevant candidates | Legitimate interests (service improvement); Consent where required |
| Sharing an applicant's CV with recruiters outside the original application | Expand opportunities for candidates | Explicit consent (opt-in) |
| Customer support | Diagnose and resolve issues | Contract necessity; Legitimate interests (service quality) |
| Security/fraud prevention, auditing, logging | Protect users and systems | Legitimate interests; Legal obligation where applicable |
| Service communications (e.g., important notices) | Keep users informed of service issues | Contract necessity; Legitimate interests |
| Product analytics (PostHog) | Improve UX and performance | Consent (where required) |
| Marketing communications (if any) | Inform about new features | Consent (opt-in) |
Automated decision-making & AI transparency
Recruiters make all hiring decisions. Our automated systems only surface analysis, scores, and summaries to assist recruiters. We do not make decisions that produce legal or similarly significant effects based solely on automated processing. The outputs are recommendations for human review, and human decision‑makers retain full control and can disregard or override them at any time. Individuals may request: (a) an explanation of the factors considered, (b) human review, (c) to express their viewpoint, and (d) to contest a result.
Data sharing
We share personal data only as described below:
- With Organizations/Independent Recruiters for jobs to which an applicant applies.
- With other recruiters only when the applicant has given explicit consent to share their CV outside the original application flow. Consent is recorded and can be withdrawn at any time.
- Service providers (subprocessors) that help us operate the Platform (see Subprocessor List).
- Google integration for recruiter–applicant communications (see Google Integration Disclosure).
- Legal and compliance: to comply with legal obligations, enforce terms, or protect rights, safety, and security.
We do not sell personal data.
Retention schedule
Retention follows the principle of storage limitation.
| Data category | Retention |
|---|---|
| CV raw files | Archived after 3 months from upload; deleted per backup cycles when beyond purpose. |
| Structured CV/profile data | Accessible for 5 years from the latest CV upload date, then deleted or anonymized. |
| Job records | Deleted 5 years after creation. |
| Recruiter–applicant messages | Retained up to the longer of the job lifecycle or related audit/ dispute windows, then deleted in line with the above rules. |
| Account & billing records | Kept for the duration of the account and longer if required for compliance, disputes, or auditing; then deleted or anonymized. |
| Backups & logs | Rotated and deleted per standard cycles; access is restricted and monitored. |
Justification for 5 years: to support repeat applications, quality assurance, audit trails, and the resolution of complaints or disputes. We periodically review retention.
International processing & transfers
Data may be processed in multiple jurisdictions. Where transfers require safeguards, we implement appropriate contractual and technical protections consistent with applicable law.
Data subject rights & requests (DSARs)
Individuals can request: access, rectification, erasure, restriction, portability (where applicable), and objection; and may withdraw consent at any time (without affecting past lawful processing).
How to submit: via in‑product Privacy Request or email support@m4tchy.com.
Response time: we aim to respond within 30 days. We may verify identity and, where appropriate, consult the relevant Organization controller.
Children
The Platform is not designed for minors. We will delete such data upon notice.
Security overview (summary)
We employ encryption in transit and at rest, strict access controls, multi‑factor authentication for privileged access, audit logging, vulnerability management, employee training, and incident response procedures. See Security Overview below.
Changes
We may update this Policy. Material changes will be communicated through the Platform. Continued use signifies acceptance of updates.
Contact
For privacy requests or questions: support@m4tchy.com