1. Who is responsible

Last updated: November 2026. This policy explains how TrueExpert ("we") handles personal data on true.expert. TrueExpert is the controller of the data described here. Contact for all privacy questions: support@true.expert (Kyiv, Ukraine).

2. What data we collect

Only what you give us or what the service needs to work:

Account: first and last name, e-mail address, password (stored only as a hash), account type (candidate or employer), onboarding choices, e-mail verification status.
Profile (optional, entered by you): photo, phone, city and country, Telegram, LinkedIn and portfolio links, age range, education level, languages, experience level, work preferences, and whether your profile is shown in listings.
Resumes: title, description, skills, expected salary, work experience, education, awards, links, location and anything else you type or import into a resume.
Employers and companies: company name, description, address and location, logo, team members and their roles, vacancies with their text, salary and location.
Applications and offers: the resume and cover letter you send, the status of an application and the conversation attached to it.
Messages: the text and files you send in chats, including chats with support.
Quick application without an account: name, e-mail, optionally phone, a cover letter and an attached resume file. Unconfirmed quick applications are deleted after 7 days.
Saved items and settings: favourites, job alerts (search filters and e-mail), notifications, templates and cover letters.
Reports you send about vacancies and the reason you give.
Technical data: IP address and browser data in server logs and security checks, also used to limit abuse (rate limits). When an employer opens the one-time link from an application e-mail, the time, IP address and browser of that visit are recorded for security.

3. Why we use it

To run the service: create your account, show vacancies and resumes, deliver applications and messages.
To send e-mails you need: address confirmation, password reset, notices about your content (renewal reminders, hiding, moderation decisions), company invitations and e-mails about applications.
To send job alerts that you create, until you delete or unsubscribe from them.
To keep the platform safe and useful: moderation, spam and abuse prevention, handling reports, limiting items per account.
To match vacancies and candidates in search and recommendations.
To improve the service and fix errors.

We do not sell your personal data and we do not show advertising on the Platform.

4. Who sees your data

Everyone: published vacancies, company profiles and, if you allow it, parts of your resume and profile in listings. Check what you write in public fields.
Employers: an employer sees your resume without your name and contacts until it opens your contacts for an application or offer conversation. Opening contacts is currently free for employers and does not require you to accept or pay. After that the employer sees your name, e-mail and the contacts in your profile.
When you apply, the employer receives your application, the resume you chose and your cover letter.
Imported vacancies: when you apply to a vacancy collected from a company's website, we may send a notice of your application to the HR e-mail address that the company published on its own site, with a link to sign in and see applications.
Other participants of a conversation see what you write there.
TrueExpert administrators see the content, reports and account data needed for support and moderation.
Service providers: an e-mail delivery provider and hosting providers process data on our behalf. We can name them on request.
Authorities, if the law requires it or to protect rights and safety.

5. Automated moderation, translation and PDF import

Content is checked with simple rules (for example stop-words, duplicates, links and phone numbers in the text) and by administrators. Administrators can also switch on a check by an external AI provider. It is off by default.

When it is on, the text of the vacancy or resume being checked is sent to the provider the administrators configured. Links, e-mail addresses, phone numbers and names are replaced with placeholders before sending. The provider returns a recommendation (approve, reject or review), and a person can always overrule it. If translation is enabled, the same kind of provider may translate vacancy and resume texts.

PDF resume import is optional and works only if enabled by administrators. If you use it, the text extracted from your file is sent to the AI provider selected by the administrators to fill in your resume form, and you review the result before saving.

6. Optional: your own Google Gemini key

Some features may let you work with your own Google API key ("bring your own Gemini"). It is optional and used only if you choose it.

Your key is stored only in your browser, on your device. It is not sent to us and not stored on our servers.
The text or document you submit goes from your browser directly to Google. It does not pass through TrueExpert servers, and we do not see it or keep a copy.
Google processes it under its own terms for your key. Under Google's free-tier terms, Google may use submitted content to improve its products, and people may review it. Do not submit anything you do not want Google to process. Paid-tier terms differ; check Google's current terms for your key.
You can remove the key at any time in the same place where you entered it, or by clearing site data in your browser.

7. Cookies and browser storage

We do not use advertising or analytics cookies and do not run third-party trackers. We use only what the site needs to work:

Sign-in cookie: a secure, httpOnly cookie that keeps you signed in (up to 7 days). Your browser also keeps small markers that you are signed in.
Company cookie: remembers which of your companies is selected (up to 1 year).
Language: your language choice may be remembered in a cookie.
Local storage in your browser: drafts of forms you are filling in (resume, vacancy; kept up to 30 days), your recent city searches, your approximate location if you allow it (it stays in your browser and is not sent to us), whether you dismissed a location prompt, small interface preferences, and a return page after e-mail verification.
You can clear all of this in your browser settings; you will then be signed out and drafts will be lost.

Maps use OpenStreetMap tiles. When a map is shown, your browser requests tiles from OpenStreetMap servers, which can see your IP address and the area you view. If you allow location access, your browser uses it to centre the map or search nearby; the coordinates are used in your browser and in search requests, and are not saved on our servers unless you enter an address in your profile or a resume.

8. E-mail and unsubscribing

Job alert e-mails contain a one-click unsubscribe link, and you can also delete an alert in your account.
E-mails to employers about applications to imported vacancies contain a "stop sending" link. Once it is used, we add that address to a suppression list and do not write to it again.
Service e-mails (verification, password reset, notices about your content and applications) cannot be switched off while you have an account; they are not marketing.

9. How long we keep data

Vacancies and resumes are shown for 60 days by default and are then hidden from search. We do not delete them automatically; the owner can renew or restore them, and administrators can see them.
Account data, messages and applications are kept while your account exists and as long as needed for the purposes above or for legal reasons.
Server logs and security records are kept only as long as needed for security.
Unconfirmed quick applications are deleted after 7 days.
Backups may keep data for a while longer after deletion.

10. Your rights and choices

In your account you can edit your profile, resumes, vacancies and companies, hide your profile from listings, and delete your own resumes, vacancies, company profiles, alerts, templates and notifications.

There is no button yet for deleting the whole account or downloading all your data. To close your account, delete your data, get a copy, correct it, object to processing or withdraw consent, write to support@true.expert from your account address. We will answer within a reasonable time and may ask you to confirm your identity. If we cannot meet a request because of a legal duty, we will explain why.

You can also complain to the data protection authority in your country; in Ukraine, that is the Ukrainian Parliament Commissioner for Human Rights.

11. Where data is stored

The website runs on a virtual server, and the application and its database run on separate shared hosting. Where the AI, e-mail or map providers described above are used, your data may be processed in other countries. We try to send them only what is necessary.

12. Security

We use the measures listed on the Security page. No system is completely secure, so please use a strong, unique password.

13. Children

The Platform is not intended for children and we do not knowingly collect their data. If you think a child has given us data, write to us and we will delete it.

14. Changes to this policy

We may update this policy. The date at the top shows the latest version. For significant changes we will notify you on the site or by e-mail.

Privacy Policy

1. Who is responsible

2. What data we collect

Only what you give us or what the service needs to work:

Account: first and last name, e-mail address, password (stored only as a hash), account type (candidate or employer), onboarding choices, e-mail verification status.
Profile (optional, entered by you): photo, phone, city and country, Telegram, LinkedIn and portfolio links, age range, education level, languages, experience level, work preferences, and whether your profile is shown in listings.
Resumes: title, description, skills, expected salary, work experience, education, awards, links, location and anything else you type or import into a resume.
Employers and companies: company name, description, address and location, logo, team members and their roles, vacancies with their text, salary and location.
Applications and offers: the resume and cover letter you send, the status of an application and the conversation attached to it.
Messages: the text and files you send in chats, including chats with support.
Quick application without an account: name, e-mail, optionally phone, a cover letter and an attached resume file. Unconfirmed quick applications are deleted after 7 days.
Saved items and settings: favourites, job alerts (search filters and e-mail), notifications, templates and cover letters.
Reports you send about vacancies and the reason you give.
Technical data: IP address and browser data in server logs and security checks, also used to limit abuse (rate limits). When an employer opens the one-time link from an application e-mail, the time, IP address and browser of that visit are recorded for security.

3. Why we use it

To run the service: create your account, show vacancies and resumes, deliver applications and messages.
To send e-mails you need: address confirmation, password reset, notices about your content (renewal reminders, hiding, moderation decisions), company invitations and e-mails about applications.
To send job alerts that you create, until you delete or unsubscribe from them.
To keep the platform safe and useful: moderation, spam and abuse prevention, handling reports, limiting items per account.
To match vacancies and candidates in search and recommendations.
To improve the service and fix errors.

We do not sell your personal data and we do not show advertising on the Platform.

4. Who sees your data

Everyone: published vacancies, company profiles and, if you allow it, parts of your resume and profile in listings. Check what you write in public fields.
Employers: an employer sees your resume without your name and contacts until it opens your contacts for an application or offer conversation. Opening contacts is currently free for employers and does not require you to accept or pay. After that the employer sees your name, e-mail and the contacts in your profile.
When you apply, the employer receives your application, the resume you chose and your cover letter.
Imported vacancies: when you apply to a vacancy collected from a company's website, we may send a notice of your application to the HR e-mail address that the company published on its own site, with a link to sign in and see applications.
Other participants of a conversation see what you write there.
TrueExpert administrators see the content, reports and account data needed for support and moderation.
Service providers: an e-mail delivery provider and hosting providers process data on our behalf. We can name them on request.
Authorities, if the law requires it or to protect rights and safety.

5. Automated moderation, translation and PDF import

6. Optional: your own Google Gemini key

Some features may let you work with your own Google API key ("bring your own Gemini"). It is optional and used only if you choose it.

Your key is stored only in your browser, on your device. It is not sent to us and not stored on our servers.
The text or document you submit goes from your browser directly to Google. It does not pass through TrueExpert servers, and we do not see it or keep a copy.
Google processes it under its own terms for your key. Under Google's free-tier terms, Google may use submitted content to improve its products, and people may review it. Do not submit anything you do not want Google to process. Paid-tier terms differ; check Google's current terms for your key.
You can remove the key at any time in the same place where you entered it, or by clearing site data in your browser.

7. Cookies and browser storage

We do not use advertising or analytics cookies and do not run third-party trackers. We use only what the site needs to work:

Sign-in cookie: a secure, httpOnly cookie that keeps you signed in (up to 7 days). Your browser also keeps small markers that you are signed in.
Company cookie: remembers which of your companies is selected (up to 1 year).
Language: your language choice may be remembered in a cookie.
Local storage in your browser: drafts of forms you are filling in (resume, vacancy; kept up to 30 days), your recent city searches, your approximate location if you allow it (it stays in your browser and is not sent to us), whether you dismissed a location prompt, small interface preferences, and a return page after e-mail verification.
You can clear all of this in your browser settings; you will then be signed out and drafts will be lost.

8. E-mail and unsubscribing

Job alert e-mails contain a one-click unsubscribe link, and you can also delete an alert in your account.
E-mails to employers about applications to imported vacancies contain a "stop sending" link. Once it is used, we add that address to a suppression list and do not write to it again.
Service e-mails (verification, password reset, notices about your content and applications) cannot be switched off while you have an account; they are not marketing.

9. How long we keep data

Vacancies and resumes are shown for 60 days by default and are then hidden from search. We do not delete them automatically; the owner can renew or restore them, and administrators can see them.
Account data, messages and applications are kept while your account exists and as long as needed for the purposes above or for legal reasons.
Server logs and security records are kept only as long as needed for security.
Unconfirmed quick applications are deleted after 7 days.
Backups may keep data for a while longer after deletion.

10. Your rights and choices

You can also complain to the data protection authority in your country; in Ukraine, that is the Ukrainian Parliament Commissioner for Human Rights.

11. Where data is stored

12. Security

We use the measures listed on the Security page. No system is completely secure, so please use a strong, unique password.

13. Children

The Platform is not intended for children and we do not knowingly collect their data. If you think a child has given us data, write to us and we will delete it.

14. Changes to this policy

We may update this policy. The date at the top shows the latest version. For significant changes we will notify you on the site or by e-mail.

Privacy Policy

1. Who is responsible

2. What data we collect

3. Why we use it

4. Who sees your data

5. Automated moderation, translation and PDF import

6. Optional: your own Google Gemini key

7. Cookies and browser storage

8. E-mail and unsubscribing

9. How long we keep data

10. Your rights and choices

11. Where data is stored

12. Security

13. Children

14. Changes to this policy

For Candidates

For Employers

About Us

Helpful Resources

Privacy Policy

1. Who is responsible

2. What data we collect

3. Why we use it

4. Who sees your data

5. Automated moderation, translation and PDF import

6. Optional: your own Google Gemini key

7. Cookies and browser storage

8. E-mail and unsubscribing

9. How long we keep data

10. Your rights and choices

11. Where data is stored

12. Security

13. Children

14. Changes to this policy

For Candidates

For Employers

About Us

Helpful Resources