Privacy Policy

Last updated: July 19, 2026

This Privacy Policy explains how Meshwar Jobs ("we", "us") collects, uses, and protects your personal data when you use this website, in accordance with the EU General Data Protection Regulation (GDPR) and applicable data-protection laws.

1. Data controller

The data controller is the operator of Meshwar Jobs. You can contact us at any time via a support ticket (Support page) or by email to the address shown on this website.

2. What data we collect

Account data: your name, email address, password (stored only as a secure cryptographic hash — we can never read it), account type, preferred language, and registration date.
Profile & CV data (job seekers, provided voluntarily): phone number, city, professional headline, summary, skills, work and other experience, education, and links.
Company data: company name and job postings.
Freelance data: service listings and the contact details you choose to publish.
Usage data: job applications you send, match scores, tickets, reports, and anonymous view counters.
Security data: the IP address of failed login attempts, kept for a maximum of 24 hours to prevent break-in attempts.

3. Why we process it (legal bases)

We process your data to provide the service you signed up for — creating your CV, transmitting applications to companies, publishing postings, and operating dashboards (Art. 6(1)(b) GDPR, performance of a contract); to secure the platform against abuse and attacks (Art. 6(1)(f), legitimate interest); and to send you service emails about your account, applications, and tickets (Art. 6(1)(b)). We do not send marketing emails and we do not use your data for advertising or profiling beyond the skills match score you can see yourself.

4. Who can see your data

When you apply to a job, your profile and CV are shared with that company only. Freelance listings and the contact details you enter in them are visible to logged-in users. We never sell your personal data. We share data only with service providers that help us operate, secure, and improve the website — currently our hosting provider, and in the future this may include additional providers for website functionality, performance, content delivery, security, or analytics, acting on our behalf under appropriate data-protection agreements — and with authorities where required by law. If a future service materially changes how your data is processed, we will update this policy.

5. Cookies

We use only strictly necessary cookies: a session cookie to keep you logged in and a cookie remembering your language choice. No analytics, advertising, or third-party cookies are used, so no cookie consent banner is required.

6. Retention

Your data is kept for as long as your account exists. When you delete your account, your profile, CV, applications, postings, services, and tickets are permanently erased. Failed login records are deleted after 24 hours.

7. Your rights

Under the GDPR you have the right to access, rectify, erase, and receive a portable copy of your data, to restrict or object to processing, and to withdraw consent. You can exercise the two most important rights yourself at any time on the Account & privacy page: download all your data as a machine-readable JSON file, or permanently delete your account. For anything else, open a support ticket. You also have the right to lodge a complaint with your data-protection supervisory authority.

8. Security

Passwords are hashed with a modern algorithm (bcrypt), all forms are protected against cross-site request forgery, login attempts are rate-limited, and the database is stored outside the publicly reachable web directory.