Privacy Policy

We collect information that you provide directly:

• Account information: Name, email address, and password when you register.
• Profile data: Professional information you add to your profile, including qualifications and experience.
• Job postings and applications: Content you create on the Platform, including job listings, applications, and messages.
• Usage data: Basic server logs (IP address, browser type, pages visited) to keep the Platform running and secure. We do not use analytics trackers.

We use your information to:

• Provide and operate the Platform — matching candidates with transparent job postings.
• Send you relevant notifications (application updates, interview schedules, account security).
• Improve the Platform based on how it is used.
• Protect against fraud, abuse, and security threats.

We do not use your data for advertising. We do not build advertising profiles. We do not sell or rent your personal information to anyone.

We share your information only in these limited circumstances:

• Employers you apply to: When you submit an application, the employer receives the information you included in your application.
• Service providers: We use essential service providers (hosting, email delivery) who process data on our behalf under strict agreements.
• Legal requirements: If required by law, subpoena, or court order.

We do not sell your data. Period. Not to advertisers, data brokers, or anyone else.

We take security seriously. Your data is protected with:

• Encrypted connections (HTTPS/TLS) for all data in transit.
• Hashed passwords — we never store your password in plain text.
• Secure infrastructure with regular updates and monitoring.
• Content Security Policy headers to prevent cross-site attacks.

No system is 100% secure, but we work to protect your information and promptly address any vulnerabilities.

Under GDPR, CCPA, and applicable privacy laws, you have the following rights. Most of these are self-service — no need to contact us.

• Access your personal data. Go to Profile → Account → Download My Data.
• Update your information at any time through your profile settings.
• Delete your account and all associated data permanently. Go to Profile → Account → Delete My Account.
• Export your data as a JSON file, or have it emailed to you. Go to Profile → Account.
• Object to processing of your data for any reason.

For any request you cannot complete self-service, contact us at support@send.kovafin.com.

We use only essential cookies required for the Platform to function:

• Session cookies: To keep you signed in and maintain your session.
• CSRF tokens: To protect against cross-site request forgery.

We do not use tracking cookies, advertising cookies, or third-party analytics cookies. No cookie banners needed because we respect your privacy by default.

We use a minimal set of third-party services:

• NextAuth: For secure authentication (including optional Google sign-in).
• Email provider: For transactional emails (application notifications, password resets).

We do not use Google Analytics, Facebook Pixel, or any other tracking or analytics tools.

We keep your data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where we are required to retain it by law.

Job postings and application data may be retained in anonymized form for platform improvement purposes.

Kovafin is not intended for anyone under the age of 16. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 16, we will delete it promptly.

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you via email or a prominent notice on the Platform. The "Last updated" date at the top reflects when the policy was last revised.

For privacy-related questions or requests, contact us at privacy@kovafin.com.