Last updated: 11 October 2026 · Version 1.11
1.1. The controller of the personal data processed through the website https://jobbr.ai (the "Site") and the Jobbr service (the "Service") is JOBBR TECH LTD (ДЖОБЪР ТЕХ ООД), UIC 208948518, with its registered seat and address of management at Bulgaria, Sofia 1233, Serdika District, Banishora Residential Complex, Block 17A ("Jobbr", "we").
1.2. For any question about your personal data or about this Privacy Policy (the "Policy"), write to [email protected].
1.3. We process personal data in accordance with Regulation (EU) 2016/679 ("GDPR") and Bulgarian law.
2.1. You upload a curriculum vitae ("CV"), choose a country and a city, and order one search. We give you a list of current job advertisements that fit your CV: in your dashboard if you have an account, or by email if you order as a guest. We do not apply for jobs on your behalf and we do not contact employers.
2.2. The Service is offered only to people aged 18 or over who live in one of the countries available in the country list on the Site, all of which are Member States of the European Union.
2.3. You are not obliged to give us any data, but without a CV and a valid email address we cannot carry out a search, and without an email address and a password we cannot create an account.
3.1. We collect the data below from you directly, or it is created automatically when you use the Site.
3.2. Feedback survey. After a search we may send you one invitation to the survey by email, on the basis of our legitimate interest in improving the Service (Art. 6(1)(f) GDPR). Taking part is voluntary. If you do not wish to receive such invitations, tell us at [email protected] and we will not send another.
3.3. When you delete your account. Your account, sessions, job list, feedback, support requests, sign-in attempts and any guest credit held for your email address are deleted immediately. The records of your searches are kept for the period in clause 3.1, but the link to your account is removed and your email address in them is replaced with a placeholder. Accounting documents are kept for the period the law requires.
4.1. Your CV is read inside our own application. From it we build a new, minimised professional profile containing only: work experience, education, skills, certifications and the languages you say you speak. Your name, contact details, date of birth, photograph and anything else outside those five categories are left out. Languages are used to avoid showing you advertisements that require a language you did not list.
4.2. That profile, together with the country you chose, is sent to artificial intelligence models run for us by a provider in France (clause 5.1). The models derive search terms describing your occupation, such as job titles, field of work and skills. The CV file and its full text are never sent to them. We do not store the text of your CV or the profile.
4.3. The search terms, your chosen location and your preferences are sent to an external job-listings provider established in the European Union, which returns matching advertisements. It receives nothing that identifies you. The advertisements are then ordered by relevance by automated means, including artificial intelligence models.
4.4. The profile is minimised, not fully anonymous: details such as employers' names and dates remain in it, and could in some cases point to you.
4.5. Special categories of data. Please do not include in your CV data about your health, racial or ethnic origin, religious or philosophical beliefs, political opinions, trade union membership, sex life or sexual orientation, or genetic or biometric data. We do not need it and we try to leave it out of the profile, but we cannot recognise every such detail, so some of it may remain in the profile and reach the artificial intelligence models. Because a CV may contain such data, we ask for your explicit consent before each order, as a separate declaration. You can avoid this processing altogether by removing such data from your CV before uploading it. You may withdraw your consent at any time at [email protected]; this does not affect processing already carried out.
4.6. No automated decisions. The result is a list of suggestions. We take no decision about you by automated means that has legal or similarly significant effects (Art. 22 GDPR). You alone decide what to do with the list.
5.1. We use the following providers. Each of them processes your data on our behalf and on our instructions, under a contract that meets Art. 28 GDPR. Where a provider is described and not named, you can ask us for its name at [email protected].
5.2. Stripe also processes payment data as a controller in its own right, for example to prevent fraud and to meet its legal obligations. Its own privacy policy applies to that processing.
5.3. The external job-listings provider (clause 4.3) receives no personal data.
5.4. Transfers outside the European Economic Area ("EEA"). Cloudflare, Stripe and Resend process data in the United States, and our contract for the database is with a company established in Singapore, although the data itself is stored in France. These transfers are covered by the standard contractual clauses adopted by the European Commission (Art. 46(2)(c) GDPR) and, where the recipient is certified, by the Commission's adequacy decision on the EU–US Data Privacy Framework (Art. 45 GDPR). You can ask us for a copy of the clauses at [email protected].
5.5. We may also disclose data to public authorities where the law obliges us to.
6.1. The Site uses only what is strictly necessary to provide the Service you ask for and to keep it secure. Under Art. 4a of the Electronic Commerce Act this does not require your consent.
6.2. The Site uses no analytics, advertising or tracking cookies. If that ever changes, we will ask for your consent first.
7.1. Under the GDPR you have the right to:
7.2. Right to object. You may object at any time to processing that we base on our legitimate interest (clause 3.1). We will then stop, unless we have compelling legitimate grounds that override your interests or we need the data for legal claims.
7.3. How to exercise your rights. Write to [email protected] from the email address you used with the Service and tell us what you want. If you ordered as a guest, we will confirm that the address is yours by sending a link to it. We reply within one month; in complex cases the law allows us up to two more months, and we will tell you if we need them. Exercising your rights is free of charge.
7.4. In your account. If you have an account, you can download a copy of your data and delete your account yourself, at any time, from your profile page.
7.5. Complaints. You may lodge a complaint with the Commission for Personal Data Protection, Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd., [email protected], https://www.cpdp.bg, or with the data protection authority of the EEA country in which you live or work.
8.1. We may change this Policy. Each version is published on the Site with its version number and date. If a change materially affects how we process your data, we will tell registered users by email before it takes effect.
8.2. This Policy is published in Bulgarian and in English. If the two differ, the version in the language in which it was shown to you applies, and any doubt is resolved in your favour.