Zorky CRMZorky CRM
EN|RU
@ekaterinovikova
🇬🇧 EN · 🇷🇺 RU

Privacy Policy

Effective from 2026-05-13 · Updated 2026-05-13

1. Who we are

Zorky CRM is a recruitment SaaS platform for IT agencies across the CIS and Europe. Data controller: I. Pitskaliou (sole proprietor). Contact: @ekaterinovikova.

2. What we collect

From your CV (via /apply or our automated public-source ingestion):

  • Name, email, phone, Telegram, LinkedIn, GitHub
  • Professional data: seniority, experience, tech stack, languages, city
  • CV file (PDF/DOC/DOCX/TXT, up to 8 MB)
  • IP address and browser data (for abuse protection)

From public Telegram channels and job boards:

  • Vacancy and candidate post text (with contacts explicitly published by the poster)
  • Public information only. We do not parse private channels or direct messages.

3. Why we use it

  • Candidate-to-vacancy matching performed by our AI system
  • Sharing matches with recruiters at our client agencies (legitimate interest under GDPR Article 6(1)(f))
  • Improving matching quality through aggregated feedback (no personal data)
  • Abuse and fraud protection

We do not use your data for advertising, do not sell it to third parties, and do not transfer data to countries lacking a European Commission adequacy decision without your explicit consent.

4. How long we keep it

  • Candidate profile: 24 months from the last update or contact
  • CV file: 12 months from upload, after which only aggregated fields are retained
  • Interaction log: 36 months (for audit and conversion analysis)
  • Verification status and exclusivity flags: deleted with the profile
  • Data-processing consent log: 36 months (statutory requirement)

5. Who has access

  • Client-agency recruiters — access to candidate personal data after authentication, with every action audit-logged
  • The system operator (I. Pitskaliou) — solely for technical maintenance
  • No third parties without your explicit consent

Servers are hosted in secure datacentres of certified providers. Data is encrypted at rest and in transit.

6. Your rights (GDPR Articles 15-22)

  • Article 15 — Right of access: request a copy of your data
  • Article 16 — Right to rectification: correct inaccurate data
  • Article 17 — Right to erasure ("right to be forgotten"): delete your profile
  • Article 18 — Restriction of processing: temporarily limit processing
  • Article 20 — Data portability: receive your data in a machine-readable format
  • Article 21 — Right to object: object to processing based on legitimate interest

To file a request: /privacy/request (self-serve, processed within 7 days) or contact @ekaterinovikova directly.

7. Web Analytics

We use web analytics to understand general traffic patterns — which pages are popular, how users find the site, what devices they use. This helps us improve content and site experience.

The specific list of analytics providers, types of data collected, and opt-out instructions are on a separate page: Cookies and Analytics.

We do not share analytics data with third parties for marketing purposes and do not use it for individual targeting.

8. Changes to this policy

We will provide notice of material changes via email to account holders and a homepage banner at least 30 days before they take effect.

9. Privacy contact

@ekaterinovikova on Telegram. We respond within 72 hours on business days.

If our response is not satisfactory, you may lodge a complaint with the supervisory authority in your country of residence (EU residents: list of Data Protection Authorities via the EDPB).