HR Suite privacy policy

1. Who is responsible

findjobs.ge (contact: info@findjobs.ge) is the controller for the data described in sections 2 to 4: your employer account, how you use the suite, your billing and your support requests.

For the data in section 5, the records a company keeps about its employees, applicants and contractors, the company is the controller and findjobs.ge is the processor, bound by the data processing agreement at hr.findjobs.ge/hr/legal/dpa. If you are an employee of such a company, the employee notice at hr.findjobs.ge/hr/legal/employee-notice is for you.

The findjobs.ge privacy policy covers the job board itself, your vacancies and the applications you receive there.

2. Your account and your team

The suite uses your findjobs.ge employer account: the company name, the owner's email, the language, and the team members with their emails, names and roles. Sign-in is by a code or link sent to your email and a second lock; we keep the session, its device and the time of the last visit, and we may email you when your account is opened from a device we have not seen.

3. How you use the suite

We keep server logs (address, time, page, status) for security and for finding faults, for up to ninety days. We keep an access log of every view of a personal number, a bank account, a salary or a document in your company, with who and when, which the owner can read and nobody can edit. We keep the log of every API call made with your keys for ninety days. The suite uses no advertising or analytics cookies and no pixels.

4. Billing and support

Payments are taken by Stripe, Inc.; we receive the fact and amount of a payment, the last digits of the card and the invoice, never the card number. We keep the ledger of payments for as long as tax law requires. Support messages are kept with your account.

5. Your staff's records, which we process for you

On your instructions the suite stores, for the people you enter: identity and contact details; job, department, manager and pay history; documents you upload, including contracts, identity copies, permits and certificates; leave, sick days and shifts; reviews and goals; work permit cases; pay runs and the files prepared from them; and the applications, interviews and scorecards of your applicants on findjobs.ge.

We use this data only to provide the suite to you, to make backups, and to answer your instructions. We do not use it for our own purposes, we do not sell it, and it never feeds the market figures shown to other companies. The voluntary salary survey publishes groups of five or more companies only.

Private fields (personal numbers, bank accounts, home addresses) and documents are encrypted at rest with AES-256-GCM; the key lives on the server, never in a browser. The suite never tells a company whether one of its people has a findjobs.ge profile or has applied anywhere.

6. Processors and where data goes

Providers that process data for us, each only for its own part: Cloudflare, Inc. (hosting, the Workers runtime, the database located in Frankfurt, key-value and object storage, email routing); Stripe, Inc. (payments); Resend, Inc. and Amazon Web Services (sending email); Google LLC (encrypted off-site backups in Google Drive); Apple Inc. and Google LLC (push notifications to the findjobs apps). The full list, with locations, is the subprocessor list at hr.findjobs.ge/hr/legal/subprocessors.

The suite's own tools (pay check, radar, ad doctor, pay run, files) are rule-based and send nothing to AI providers. Vacancies published on findjobs.ge are translated and checked by AI models as the findjobs.ge privacy policy describes.

Our infrastructure runs on Cloudflare's network, so data may be processed in data centres outside Georgia, including in the European Union and the United States, under the providers' standard contractual clauses.

7. How long we keep things

Account and team data: while the account exists, then as the findjobs.ge policy says. Server logs: ninety days. Access and API logs: ninety days, except the access log of private fields, which is kept for twelve months. Staff records: for as long as the company keeps them; after the agreement ends, archived for twelve months and then deleted or anonymised unless the law requires longer. The demo: fourteen days after the last visit.

8. Your rights

For your account data: ask us at info@findjobs.ge to see, correct, export or delete it, or to object; we answer within ten working days. For records a company keeps about you: ask the company, which is the controller; if you cannot reach it, write to us and we will pass the request on and help. You may complain to the Personal Data Protection Service of Georgia.

No decision with legal effect on a person is made by the suite automatically; the pay run, a leave decision or a hire is always confirmed by a person at the company.

9. Cookies

Three first-party cookies, no third-party ones: the session cookie (while you are signed in), the language cookie (a year), and the demo cookie (fourteen days). None is used for advertising. Browser storage keeps small conveniences such as a chosen tab.

10. Changes and contact

We update this policy when the suite changes; the date is at the top and material changes are announced by email. Questions and requests: info@findjobs.ge. The Georgian text governs.