Legal document · WM-PRIV
Privacy policy
Last updated: July 13, 2026 · Pre-launch version
WorkMate connects employers in Romania with foreign workers already in the country. We process personal data to do exactly that — and nothing more. In short: your data is yours; you can see it, export it, and delete it yourself, anytime.
01What we collect
Account: name, email, phone (optional), password (stored encrypted). Candidate profile: city, fields, languages, experience, salary expectations, availability, and the SELF-REPORTED status of residence/work permits. Company profile: name, city, industry, description. Documents: files the candidate chooses to upload (permits, passport) — in a private bucket. Messages and applications inside the platform.
02What we use it for
Candidate–job matching (explained criteria: city, field, legal status, languages, experience), messaging between parties, account notifications, and manual document verification. We do not sell data. No ads. No marketing trackers.
03Who can see your documents
The rule is strict and enforced technically, in the database: a company sees your documents ONLY if you gave explicit consent AND you are already on their shortlist. Platform administrators see them for manual verification. No one else.
04AI assistants
Assistant features (profile building, job drafting, first message) send the conversation text to an AI model — either local (on our servers) or Anthropic Claude. Your text is NOT used to train models. Every assistant action is logged and human-approved before it takes effect. Smart search (matching candidates and jobs by meaning, not just filters) turns your profile text into a numeric vector through an external processor (NVIDIA NIM). This text is NOT used to train their models. A formal review of this processor (DPA) is underway ahead of public launch; the feature can be switched off platform-wide at any time.
05Where data lives
Data is stored in Supabase (EU infrastructure where available), protected by row-level security policies in the database. Your password is never visible to us.
06Your rights
Access & portability: the “Download my data” button in your profile gives you everything we hold, as JSON, instantly. Erasure: the “Delete account permanently” button removes everything — profile, messages, applications, documents and their files — immediately and irreversibly. Rectification: you edit your own profile anytime.
07Retention
For as long as your account is active. On deletion everything is removed immediately (no soft-delete copies). Technical security logs rotate automatically.
Data questions: write to the contact address published on the main page. Controller: WorkMate (pre-launch).