1. Data controller
TheAdvertisingRing SIA
Registration No. 40203645496
Rāznas iela 47, Kaunata, Kaunatas pag., Rēzeknes nov., LV-4622, Latvia
Email: [email protected]
Phone: +48 732 098 064
2. Data we collect
We collect and store the following personal data:
- Email address — required for account creation, email verification, and delivery of the weekly shortlist.
- Password (hashed) — stored as a bcrypt hash with 12 rounds. We never store your plaintext password and cannot recover it.
- Job preferences — your chosen country, city, and job categories. Used solely to personalise your weekly digest.
- Stripe identifiers — Stripe customer ID and subscription ID. Reference identifiers only. We do not store card numbers, expiry dates, or CVV codes — these remain with Stripe.
- Account creation timestamp — for record-keeping.
- Language preference — stored in a session cookie to remember your selected language.
- Email verification token — a temporary token used to confirm your email address. Deleted after use.
We do not collect: names, phone numbers, addresses, IP addresses beyond server logs, device identifiers, or browsing behaviour.
3. Legal basis for processing
We process your data under the following legal bases (EU GDPR / Latvian data protection law):
- Contract performance (Art. 6(1)(b)) — to create your account, verify your email, process your subscription, and deliver the weekly digest.
- Legitimate interest (Art. 6(1)(f)) — to send billing notifications, renewal reminders, and service-related emails. We have assessed that these interests do not override your rights.
- Legal obligation (Art. 6(1)(c)) — to retain billing records as required by Latvian accounting and tax law.
4. How we use your data
- To verify your email and authenticate your account.
- To generate and deliver your weekly job shortlist by email.
- To send transactional emails: email confirmation, welcome message, billing receipts, renewal reminders.
- To manage your Stripe subscription status via webhooks.
We do not sell, rent, share, or otherwise transfer your personal data to third parties for marketing or advertising purposes.
5. Third-party processors
| Processor | Purpose | Data shared |
|---|---|---|
| Stripe | Payment processing and subscription management | Email address, Stripe IDs |
| Brevo (Sendinblue) | Transactional email delivery (SMTP relay) | Email address, email content |
| Adzuna | Job listings API | No personal data shared |
| PostgreSQL host | Database storage | All account data |
All processors are contractually bound to process data only as instructed and in compliance with GDPR.
6. Data retention
Your personal data is retained for as long as your account is active. Upon account deletion, all personal data is permanently removed from our database. Stripe may retain billing records for their own legal compliance purposes for up to 7 years. Server access logs are retained for 30 days.
7. Your rights
Under EU GDPR and Latvian data protection law, you have the right to:
- Access — request a copy of all personal data we hold about you.
- Rectification — correct inaccurate or incomplete data.
- Erasure — delete your account and all associated data from your dashboard at any time, or by emailing [email protected]. Deletion is processed within 24 hours.
- Portability — receive your data in a structured, machine-readable format (JSON).
- Objection — object to processing based on legitimate interest.
- Restriction — request that we restrict processing of your data in certain circumstances.
To exercise any of these rights, contact [email protected]. We will respond within 30 days.
You also have the right to lodge a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija, www.dvi.gov.lv) or the supervisory authority of your country of residence.
8. Cookies
We use a single session cookie (jobbify.sid) to keep you logged in, and a language preference cookie (jobbify_lang). These cookies contain no personal data beyond a session identifier and language code. The session cookie expires after 7 days of inactivity. We do not use tracking, advertising, or analytics cookies. For full details, see our Cookie Policy.
9. Security
Passwords are hashed with bcrypt (12 rounds). All data is transmitted over HTTPS (TLS 1.2+). Database access is restricted to application servers. Session cookies are marked HttpOnly and Secure in production.
10. International transfers
Your data is processed within the EU/EEA. Email delivery via Brevo may involve servers within the EU. Stripe processes data in the US and EU under standard contractual clauses.
11. Children
The service is not directed at persons under 18. We do not knowingly collect data from minors. If you believe a minor has registered, contact us at [email protected].
12. Changes to this policy
We may update this Privacy Policy. Material changes will be communicated by email at least 14 days before they take effect.
13. Contact
TheAdvertisingRing SIA
Rāznas iela 47, Kaunata, LV-4622, Latvia
Email: [email protected]
Phone: +48 732 098 064