What we collect
When you post a job, we collect your account and contact details, company information, job details, payment records, and your authorization declaration. Job applications are sent directly to employers, so Ergazo does not collect application messages or CVs through a listing. If you voluntarily create a private applicant account, we store the profile, saved-job, alert, and resume information you choose to add; employers cannot browse it.
How we use it
We use information to authenticate users, review and publish authorized advertisements, take payment, operate private saved jobs and alerts, prevent fraud, provide support, and comply with legal duties. We do not use applicant profiles to match, rank, or recommend people to employers, and we do not sell personal data.
Payment processing
Payments are processed securely by Stripe. We do not store your credit card details.
Data storage
We use cloud providers, including Cloudflare, whose infrastructure and support operations may process data in more than one country. Where personal data is transferred outside the EEA, we rely on the provider's applicable transfer safeguards and contractual protections.
How long we keep your data
Employer accounts, authorization records, invoices, and published listings are kept for the periods needed to operate the service and meet legal, accounting, fraud-prevention, and dispute requirements. Private applicant profile data is kept until the user deletes it or the account, subject to necessary legal holds. Saved jobs and alerts can be deleted from the account. Historical application-forwarding delivery metadata, if any, is automatically removed after 7 days.
Third-party services we use
We share the minimum data necessary with the following processors to operate Ergazo:
- Cloudflare — hosting, security, CDN, database (D1), and file storage (R2). Processing locations and international-transfer safeguards are governed by our Cloudflare service configuration and agreement.
- Stripe — payment processing for job postings. Stripe receives your email and billing details directly; we never see your card number.
- Resend — transactional email delivery (receipts, magic edit links, application notifications).
- Meta Platforms (Facebook, Instagram) — we use the Meta Graph API to publish job listings and educational content to our own Facebook Page and Instagram Business account. We do not read your personal Meta data, and we do not use Facebook Login to sign users into Ergazo.
- Google — we fetch public company logos via Google's favicon service using the company's public website domain. No user data is sent.
Facebook and Instagram integration
Ergazo operates a Facebook Page and linked Instagram Business account that re-publish job listings and educational content. We hold a long-lived Page access token for our own Page, stored encrypted as an environment secret on Cloudflare — it is not associated with any visitor to Ergazo. We do not request Facebook Login permissions from site visitors, do not read user timelines, friend lists, messages, or any other personal Meta data, and do not advertise on Meta platforms. Visitors who interact with our Page or Instagram posts on Meta are subject to Meta's own Privacy Policy.
Who we share data with
Personal data is shared with the processors listed above only as needed to operate Ergazo. Job applications are not routed through Ergazo; you provide application data directly to the employer. We do not sell, rent, or trade personal data. We may disclose information when legally required.
Applications go directly to employers
Ergazo publishes job advertisements but does not receive, store, screen, rank, or forward applications submitted through them. An Apply button opens the employer's own website or email address, or displays the employer's phone number. The employer is independently responsible for the personal data you send through its channel, and its privacy policy applies.
Application forwarding aliases previously operated by Ergazo are disabled. Limited historical delivery metadata may remain for up to 7 days after an earlier forwarding event for bounce handling and security, after which it is deleted automatically; message bodies and attachments were not retained.
Children
Ergazo is not directed at children under 16 and we do not knowingly collect data from minors. If you believe a minor has submitted personal data, contact privacy@ergazo.com and we will delete it.
Your rights
You can request deletion of your data at any time by emailing privacy@ergazo.com.
Cookies
We use essential cookies to keep the site working. With your consent, we also use analytics cookies (Google Analytics, Plausible) to understand how visitors use the site, and marketing cookies (Meta Pixel) for advertising. You can manage your preferences at any time via the cookie settings in the footer.
Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be announced on the Ergazo homepage.
Contact
Data controller: Ergazo, Cyprus. For privacy inquiries, data access, or deletion requests: privacy@ergazo.com