Privacy Policy

Last updated: May 23, 2026

This Privacy Policy explains how DevHunt (operated by [DevHunt — registered company name and address]; "Company", "we", "us", "our") collects, uses, stores, and protects your personal data when you access or use our website, applications, and related services ("Service").
By using the Service, you consent to the processing of your personal data in accordance with this Privacy Policy and applicable data protection law, in particular the EU General Data Protection Regulation (GDPR).

We are committed to safeguarding your privacy and will not share your personal information with third parties unless described in this policy or required by law.

1. Definitions

Unless otherwise stated, the terms used in this Privacy Policy have the same meanings as in our Terms and Conditions.

2. Data We Collect

2.1 Personal Data

We may ask you to provide certain personally identifiable information that can be used to identify or contact you, including:

First and last name
Email address
Candidate profile data: work experience, skills, location and salary preferences, CV uploads
Company and representative data: company name, description, logo, vacancies, private candidate notes
Billing details required to process subscription payments
Date of birth
Other information voluntarily provided via forms or communication channels

2.2 Usage Data

Collected automatically during your interaction with the Service:

IP address
Browser type and version
Device identifiers
Mobile device information
Pages visited, time spent, access timestamps
Diagnostic and analytical data

2.3 Data from Third-Party Services

When registering or authenticating via:

Google
LinkedIn
GitHub

We may receive your name, email address, profile information, and other data associated with those accounts.

We process your data on the following legal grounds:

Contract performance: to provide and maintain the Service.
Legitimate interest: improving functionality, preventing fraud, analytics, customer support.
Legal obligation: accounting, compliance, resolving disputes.
Consent: marketing emails, cookies, social login permissions.

4. How We Use Your Personal Data

We may use your data for the following purposes:

Providing and maintaining the Service
Managing user accounts and authentication
Matching candidates with relevant vacancies (AI Match Score)
Processing subscription payments and verifying identity
Communicating updates, notifications, and support messages
Sending marketing and promotional content (if you have not opted out)
Analyzing performance and improving user experience
Compliance with legal obligations

We may also process your data for additional purposes compatible with the ones above, such as analytics and fraud prevention.

We share data only with service providers (sub-processors) who process it on our behalf under data-processing agreements, and only to the extent necessary to operate the Service:

Supabase — database, authentication, and file storage (CVs, avatars, logos, attachments).
Stripe — subscription payments and billing.
TalkJS — in-app chat between candidates and hiring teams.
Anthropic — AI parsing of short, free-text job-search queries (no CVs, profiles, or contact data are sent).
Cloudflare — edge delivery and bot/abuse protection.
Google Analytics 4 — aggregated, consent-gated usage statistics.
Google, GitHub, LinkedIn — OAuth authentication, only when you choose that login method.

When a candidate applies to a vacancy or shares their profile, the relevant company becomes an independent controller of the personal data it receives. We may also disclose data to authorities where required by law, or to parties involved in a business transfer. We do not sell your data.

A plain-language overview of our partners is available on the How we process personal data page.

6. Retention of Personal Data

We retain your personal data only as long as necessary for:

Service operation
Contractual obligations
Legal requirements
Dispute resolution
Security purposes

Account deletion and chat data

When a candidate deletes their account, deletion is immediate and permanent. We erase your profile and personal data, your job applications, your saved and hidden vacancies, your contact-sharing permissions, and your uploaded files (CV, avatar), and we delete your authentication credentials. You are removed from every chat conversation you took part in. Messages you have already sent may remain in the other participant's chat history.

When a company representative deletes their account, we remove the representative profile and, where the representative is the sole owner, the associated company and its vacancies. Financial and billing records may be retained for longer where required by law (for example, tax and accounting obligations).

Chat conversations are hosted by our chat provider, TalkJS, and message history is retained for as long as the conversation exists.

Usage Data is stored for shorter periods unless required for security or analytics.

7. International Data Transfers

Your data may be processed in countries where we or our service providers operate. If data is transferred outside your jurisdiction, we ensure adequate protections such as:

Standard Contractual Clauses (SCC)
Local legal compliance
Verified processor security measures

Your continued use of the Service implies consent to such transfers.

You have the right to:

Access your personal data
Correct inaccurate or incomplete data
Delete your personal data (Right to be Forgotten)
Restrict processing
Object to processing or direct marketing
Request data portability
Withdraw consent at any time
File a complaint with a data protection authority

To exercise any of these rights, contact us at privacy@devhunt.io, or manage and delete your data directly from your account settings.

9. Cookies and Tracking Technologies

We use cookies to:

Enable essential website functions
Analyze traffic and usage
Personalize user experience

Cookie consent is managed through our consent banner, where you can grant or withdraw consent for each category at any time. Disabling some cookies may affect certain features.

Types of cookies we use:

Necessary cookies
Analytics cookies (e.g., Google Analytics)
Functional cookies
Marketing cookies (only with consent)

10. Payment Processing

We use Stripe as our third-party payment processor for company subscriptions, billed in euro (EUR). Your payment card data is not stored on our servers and is handled according to PCI-DSS standards.

11. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect data from minors. If you believe we have collected such data, contact us immediately so we can remove it.

12. Security

We apply industry-standard security practices to protect your data, including:

Encryption in transit (HTTPS)
Hashed passwords
Access controls limiting staff access to personal data
Secure data storage
Monitoring for suspicious activity

However, no method of digital transmission is 100% secure.