Privacy Policy

Last updated: February 2026

1. Data Controller

InovateAi OÜ
Narva mnt 5, Tallinn 10117, Estonia
Email: maria@inovateai.com

2. What We Collect

We collect the following personal data:

  • --Candidates: Name, email, phone (optional), CV/resume, skills, work experience, LinkedIn profile, portfolio links, salary expectations, and any information you provide in your application.
  • --Companies: Company name, contact email, and billing information when unlocking candidate profiles.
  • --Contact form: Name, email, and message content.
  • --Technical data: We do not use cookies for tracking. We may collect basic server logs (IP address, browser type, pages visited) for security and performance purposes.

3. How We Use Your Data

  • --Recruitment matching: To evaluate candidates against open roles and present anonymized profiles to hiring companies.
  • --Communication: To contact you about your application, unlock requests, or inquiries.
  • --Payment processing: Billing data is processed by Stripe. We do not store credit card numbers.
  • --Service improvement: Aggregated, non-identifiable data to understand market trends and improve our platform.

4. Legal Basis (GDPR)

  • --Consent: When you submit an application or contact form, you consent to us processing your data for recruitment purposes.
  • --Contract: Processing necessary to provide our recruitment services to companies.
  • --Legitimate interest: Server logs for security and fraud prevention.

5. Anonymization

Candidate profiles shown to companies are fully anonymized. Names, photos, and employer names are removed. Your full identity is only revealed to a company after they unlock your profile and you consent to the introduction.

6. Data Sharing

We share personal data only with:

  • --Hiring companies: Only after an unlock, and only the data necessary for the recruitment process.
  • --Service providers: Stripe (payments), Google Workspace (email). These providers have their own privacy policies and are GDPR compliant.

We do not sell personal data. We do not share data with advertisers.

7. Data Retention

Candidate data is retained for 12 months after your last application or profile update. Company data is retained for the duration of the business relationship plus any legally required period. You can request deletion at any time.

8. Your Rights

Under the GDPR, you have the right to:

  • --Access your personal data
  • --Rectify inaccurate data
  • --Request erasure ("right to be forgotten")
  • --Restrict processing
  • --Data portability
  • --Object to processing
  • --Withdraw consent at any time

To exercise any of these rights, email maria@inovateai.com. We will respond within 30 days.

9. Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) at www.aki.ee.

10. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated date. If the changes are significant, we will notify affected users by email.