This Privacy Policy explains how Georgios Evangelou trading as getarustjob (“we”, “us”) collects and uses personal data when you use https://www.getarustjob.com (getarustjob).
1. Data controller
Georgios Evangelou trading as getarustjob
Pirgou Street no.18, Larnaca, Kiti 7550, Cyprus
Email: hello@getarustjob.com
For privacy requests, email us from the address you want us to look up, or explain which listing or subscription you mean.
2. What we collect
- Job submissions. Company name, job title, location, description, application method (URL or email), optional salary and logo, billing email, pricing selections, submission timestamp, IP address, and browser user agent.
- Newsletter. Email address, signup source (e.g. footer, modal), signup time, IP address, and user agent. We sync subscribers to our email provider for double opt-in and delivery.
- Payments. Lemon Squeezy processes card data directly as merchant of record. We store payment references (checkout id, order id), amount paid, and billing email — not full card numbers. See Lemon Squeezy's Privacy Policy for how they handle payment data.
- Listing engagement.When someone opens a live job detail page or clicks Apply (link or email), we record counters tied to that job (job id and timestamp). Where our hosting provider supplies an approximate country from the visitor's IP, we store that ISO country code in aggregated statistics (not the IP itself). We may process IP addresses briefly to prevent duplicate counts and abuse; IPs are not stored in the view or click statistics we show employers. Apply clicks for email listings are counted the same way as link applications.
- Admin access. Admin login uses email magic links and optional two-factor authentication. Session cookies are set only for authenticated administrators.
3. Why we use your data (legal bases)
- Job posting and payment fulfilment — performance of a contract (GDPR Art. 6(1)(b)).
- Moderation, fraud prevention, accounting, and listing metrics — legitimate interests (Art. 6(1)(f)), balanced against your rights. Listing metrics help employers understand performance and help us operate the service.
- Newsletter — your consent (Art. 6(1)(a)). You can withdraw consent anytime by unsubscribing.
- Legal obligations — where required for tax, disputes, or regulatory requests (Art. 6(1)(c)).
4. What we do not do
- We do not run advertising or social-media trackers.
- We do not sell personal data to marketers or data brokers.
We use Vercel Web Analytics for aggregated page-view statistics (routes visited, referrers, device type). It is first-party, cookieless, and does not profile visitors for ads. Processing is covered under our Vercel sub-processor agreement (see §6).
5. Cookies and local storage
We use a small number of strictly necessary technologies:
- Admin session cookie — keeps administrators signed in (HTTP-only, secure in production).
- Session storage — remembers that you dismissed the newsletter modal, or completed a signup in this browser session.
- Local storage — remembers that you dismissed the cookie notice.
- Vercel Web Analytics — privacy-oriented, cookieless page-view measurement (see §4). No advertising cookies.
Essential cookies and storage are required for basic site operation. We do not use advertising or social-media cookies. Because we do not use marketing trackers, we do not run a marketing-cookie consent gate. We show a short informational notice on first visit linking to this section.
6. Recipients and sub-processors
We use contracted service providers who process personal data only on our instructions and under data-processing terms:
- Hosting and delivery — Vercel Inc.: Website hosting, serverless functions, CDN, Web Analytics.
- Database and file storage — Supabase Inc.: PostgreSQL database, object storage for company logos.
- Payment processing — Lemon Squeezy (Stripe Payments Europe Ltd. MoR): Checkout, tax collection where applicable, payment receipts.
- Transactional email — Resend Inc.: Job confirmation and admin magic-link email.
- Newsletter delivery — Buttondown Inc.: Double opt-in and weekly digest for subscribers.
Some providers may process data outside the European Economic Area (including the United States). Where required, we rely on appropriate safeguards such as Standard Contractual Clauses offered by those providers. For DPA copies or an updated list, email hello@getarustjob.com.
7. Retention
- Newsletter: until you unsubscribe or request deletion.
- Job postings: kept for the life of the service and historical record; public display ends when a listing expires or is unpublished.
- Listing engagement: view and apply counters are kept while the job record exists; short-lived rate-limit logs (which may include IP) are deleted automatically after use.
- Payment records: kept as long as needed for accounting, tax, and dispute handling (typically up to 7 years where law requires).
- Server logs: hosting providers may retain short-lived access logs under their own policies.
8. Your rights
If you are in the EU/EEA or UK, you may have the right to access, rectify, erase, restrict, or port your personal data, and to object to certain processing. Where we rely on consent (newsletter), you may withdraw it at any time without affecting prior lawful processing.
To exercise these rights, email hello@getarustjob.com. We respond within one month where GDPR applies.
You may also lodge a complaint with a data protection supervisory authority in your country of residence, workplace, or where the alleged infringement occurred. In Cyprus, that is the Commissioner for Personal Data Protection.
9. Children
The Site is intended for adults posting or seeking professional roles. We do not knowingly collect data from children under 16.
10. Changes
We may update this policy. The “Last updated” date at the top reflects the current version. Material changes may be noted on the Site.
11. Contact
Privacy questions: hello@getarustjob.com. See also our Legal Notice.
