Privacy Policy

Jobyx (“Jobyx”, “we”, “us”) is operated by MANHIVE LLC, registration number 999.110.1594956, 3A Moskovyan St., 5th floor, Kentron, Yerevan 0001, Republic of Armenia. We are the controller of personal data processed through https://jobyx.org, the Jobyx web application (https://app.jobyx.org), our emails, and our support channels.

We process personal data under the Law of the Republic of Armenia “On Protection of Personal Data”. Where we offer our services to people in the European Union or the European Economic Area, or monitor their use of the platform, we also follow the EU General Data Protection Regulation (GDPR).

• Privacy contact: [email protected]
• General contact: [email protected]

This policy applies to:

• Applicants: people who register to look for work.
• Agency candidates: people whose profile a recruitment agency adds to the platform, whether or not they have their own account.
• Employer and agency users: people who use the platform on behalf of a company, including named contact persons.
• Visitors to our website and people who contact us through live chat, email, WhatsApp or Telegram.
• Representatives of companies whose basic business details we publish from public sources (see section 6).

Employers and agencies that download, export or copy candidate data out of the platform become responsible for that data under their own privacy obligations.

Medical records are health data, a special category of personal data. Passport, visa and identity documents need extra care. We process this data only to support a hiring or relocation process that you take part in, and only with your explicit consent, or where the law of the country of employment requires it.

• Upload medical documents only when an employer or the destination country actually requires them.
• Do not upload data about religion, ethnic origin, political views, trade union membership, sexual life or criminal records. The platform does not ask for it.
• Gender is used in matching only when a job states a gender requirement. Employers must set such a requirement only where the law allows it.
• Medical and identity documents are visible only to you, your agency, our administrators, and an employer you have applied to or been submitted to.

You can withdraw consent for sensitive data at any time by deleting the document or writing to us. This does not affect processing that took place before you withdrew.

Jobyx uses automated tools to help people find good matches faster:

• CV reading: when you upload a CV to create or fill a profile, the text may be sent to OpenAI to extract fields such as experience, education and skills. You review the result before saving it.
• Match scores: we turn profile and job text into numerical representations (embeddings) and compare them with occupation, location, work mode, contract type, gender requirement and salary to calculate a percentage.
• Match explanations: an AI service writes a short summary of how a candidate lines up with a job. It does not change the score.

Scores rank and suggest. They do not decide. Employers and agencies decide who to shortlist, submit, reject or hire. We do not make decisions based solely on automated processing that have legal or similarly significant effects on you.

You can see the reasons behind every score. If you believe a score is wrong or unfair, you can correct your profile, ask us to review it, or object to profiling at [email protected]. OpenAI processes data on our behalf under a data processing agreement and, under its API terms, does not use it to train its models.

• From you, when you register, fill your profile, upload documents, apply, message or pay.
• From recruitment agencies, which add candidate profiles and documents, one by one or by spreadsheet import.
• From employers, about their own staff who act as contacts.
• From our administrators, who can create accounts and review documents.
• Automatically, from your device and your use of the platform.
• From public sources, for basic company facts only (see below).

Agency candidates. An agency that adds you is responsible for having a lawful basis to share your data with us and for telling you about it. When an agency adds your email, we may invite you to create your own account. You can then view, correct or remove your data, or ask us to remove the agency's profile of you.

Company profiles from public sources. We may create a basic profile for a company using its name, address, general email and phone, and website, taken from public sources. Such profiles are marked as created by Jobyx. Company representatives can claim, correct or remove them. We do not copy descriptions, logos or substantial parts of third-party directories without permission. We keep a record of where each item came from.

Where we rely on legitimate interest, we have weighed it against your rights. You can object at any time (see section 11).

Jobyx connects people across countries, so your data will be handled outside your country. We are based in Armenia, our providers may be in the EU, the United States and elsewhere, and employers may be in any country you apply to.

For transfers out of the EU/EEA to countries without an adequacy decision, including Armenia and the United States, we use the European Commission's Standard Contractual Clauses or another lawful mechanism, such as the EU-U.S. Data Privacy Framework where the provider is certified. When you apply to or are submitted to an employer abroad, the transfer is needed to perform the service you asked for.

You can ask for a copy of the safeguards at [email protected].

We may keep data longer if the law requires it, or to establish, exercise or defend legal claims. Data we no longer need is deleted or anonymised.

Depending on where you live, you have the right to:

• Access your data and get a copy.
• Correct inaccurate or incomplete data. Most data you can edit yourself in the app.
• Delete your data (“right to be forgotten”).
• Restrict how we use your data.
• Receive your data in a machine-readable format and move it to another service (portability).
• Object to processing based on legitimate interest, including profiling for matching.
• Withdraw consent at any time, without affecting earlier processing.
• Not be subject to a decision based solely on automated processing that significantly affects you.
• Complain to a data protection authority.

To use these rights, write to [email protected] from the email on your account. We may ask you to confirm your identity. Under Armenian law we correct or delete data within 3 working days of a valid request. We answer other requests within one month, extendable by two months for complex requests, in which case we will tell you why.

Supervisory authorities: in Armenia, the Personal Data Protection Agency of the Ministry of Justice. In the EU, the authority in the country where you live or work. In Poland, that is the President of the Personal Data Protection Office (UODO).

• Encrypted connections (HTTPS) for all traffic.
• Passwords stored only as salted hashes; optional two-factor authentication, required for administrators.
• Role-based access: each user sees only what their role and relationship to an application allow.
• Documents are downloaded only through our servers, after an access check. Profile photos and company logos are served from a web address that anyone with the link can open.
• An audit log of sign-ins and important actions.
• Access limited to staff who need it, under confidentiality obligations.

No system is completely secure. If a breach puts your rights at risk, we will notify you and the relevant authority as the law requires; under GDPR, the authority within 72 hours. Keep your password private and turn on two-factor authentication.

We use only cookies and browser storage needed to run the service and remember your choices. We do not use advertising or cross-site tracking cookies.

You can block or delete cookies in your browser settings. If you block the session cookie, you cannot sign in. If we add analytics or marketing cookies later, we will ask for your consent first.

Jobyx is for people aged 18 and over. We do not knowingly collect data about anyone younger. If you believe a minor has an account or a profile, write to [email protected] and we will delete it.

We send service messages you cannot opt out of while you have an account, such as verification codes, security alerts, application updates, new messages, document expiry reminders and payment receipts. We send news and marketing only with your consent, and every such email has an unsubscribe link.

We may update this policy as the platform or the law changes. The date at the top shows the latest version. If a change is significant, we will tell you by email or in the app before it takes effect and, where the law requires it, ask for your consent again.

• MANHIVE LLC, 3A Moskovyan St., 5th floor, Kentron, Yerevan 0001, Republic of Armenia
• Privacy: [email protected]
• General: [email protected]