Privacy Policy

    Last updated: July 2026

    01Data Controller

    The controller responsible for the processing of personal data through Everyjob is:

    LVDP

    Klinkkouterstraat 59, 9040 Sint-Amandsberg, Belgium

    Company number: BE 1008.270.260

    Email: privacy@everyjob.io

    02Scope

    This privacy policy applies to all personal data processed through:

    • The Everyjob web application (dashboard, analytics, settings)
    • The Everyjob Chrome extension that operates on top of LinkedIn Recruiter
    • Our website and all associated forms

    This policy is addressed both to users (recruiters and their organizations) and to candidates (individuals whose public profile data is processed for recruitment purposes).

    03What Data Do We Process?

    User data (recruiters)

    • Name, email address, and company details upon registration
    • LinkedIn account credentials required for the integration
    • Usage statistics, preferences, and configuration settings
    • Billing and payment information

    Candidate data

    • Publicly available LinkedIn profile data (name, job title, work experience, skills, education, location)
    • Interaction data: message status (sent, read, replied) and engagement metrics
    • Notes or tags added by the recruiter

    Where you connect your ATS or upload candidate files, we also process CV/resume documents and the candidate fields synchronized from your ATS. Where you use AI-assisted matching, we process candidate profiles against your vacancy to produce a suitability assessment that you review. Where you explicitly request contact enrichment, the candidate's name, company and LinkedIn URL are used to look up a professional e-mail address.

    ℹ️ Everyjob does not collect data directly from candidates. Candidate data is provided by you: derived from publicly available LinkedIn profiles (within the scope of your existing LinkedIn Recruiter license), synchronized from your ATS, or uploaded by you.

    04Purposes & Legal Bases

    PurposeLegal basis (GDPR)
    Providing and improving the Everyjob servicePerformance of contract (Art. 6.1.b)
    Generating AI-personalized opening messagesLegitimate interest (Art. 6.1.f)
    Processing candidate profiles for recruitmentLegitimate interest (Art. 6.1.f)
    Analytics and reporting on outreach performanceLegitimate interest (Art. 6.1.f)
    Billing and accountingLegal obligation (Art. 6.1.c)
    Marketing and communication to usersConsent (Art. 6.1.a)

    Explanation of legitimate interest

    For the processing of public candidate data, we rely on the legitimate interest of the recruiter: actively sourcing and approaching suitable candidates for open positions. This interest is inherent to professional recruitment and is recognized by the Belgian Data Protection Authority (GBA) as a legitimate purpose, provided it is applied proportionally.

    We carry out a balancing test in which the candidate's right to privacy is weighed against the recruitment interest. We limit processing to professional, publicly available data and always offer candidates a straightforward way to object.

    05AI Processing & Automated Messages

    Everyjob uses artificial intelligence (AI) to generate hyper-personalized opening messages based on candidates' public profile data and the recruiter's vacancy information.

    How does this work?

    • Public profile data (job title, experience, skills) is combined with vacancy details to identify a relevant match.
    • Based on this match, an AI model (via OpenAI API) generates a draft message that the recruiter can review, edit, and approve before sending.
    • There is no fully automated decision-making within the meaning of Art. 22 GDPR — every outreach requires a human action.

    AI-assisted candidate matching

    We also use AI to assist with candidate-vacancy matching: candidate profiles are compared against your vacancy requirements to produce a ranked shortlist with an explanation. Names and contact details are redacted before candidate text reaches the AI provider. Matching output is a decision-support tool: a recruiter always reviews and decides — no automated decision within the meaning of GDPR Article 22 is made, and no candidate data is used to train AI models.

    ℹ️ No message is ever sent automatically. The recruiter always retains full control and the final say over every message.

    06Sharing with Third Parties & Sub-processors

    We never sell personal data to third parties. We rely on a limited number of third-party providers ("sub-processors") that process personal data on our behalf — including database and application hosting (EU), AI processing, LinkedIn/e-mail integration, e-mail delivery and payment processing.

    The complete, current list — including the function, data categories and location of each provider, and our 30-day advance notification commitment for changes — is published at everyjob.io/sub-processors.

    Transfers outside the EEA are covered by Standard Contractual Clauses, the EU-US Data Privacy Framework, or an adequacy decision, with a Data Processing Agreement in place with each provider.

    07Retention Periods

    Account and platform data

    Retained for as long as your account is active. If you explicitly delete your account or organization, all personal data is permanently deleted after a 30-day grace window (which allows recovery of accidental deletions). If your subscription ends without explicit deletion, we retain your data for a 90-day recovery window — so you can pick up where you left off if you return — after which it is permanently deleted.

    Candidate data

    Candidate data within your workspace is controlled by you: you can rectify or permanently erase any candidate record at any time using the built-in GDPR tooling (export and erasure), and all candidate data is removed as part of account deletion.

    Billing records

    Kept for 7 years (statutory requirement).

    Backups

    Deleted data ages out of encrypted platform backups within 7 days.

    08Security

    We take appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or alteration. These include:

    • Encryption of data in transit (TLS) and at rest
    • Access control based on the need-to-know principle
    • Regular security audits and monitoring
    • Strict limits on LinkedIn automation to ensure platform compliance

    09Your Rights

    Under the GDPR, you have the following rights as a data subject:

    Access

    Request which data we process about you

    Rectification

    Have incorrect data corrected

    Erasure

    Request deletion of your data

    Restriction

    Have processing (temporarily) suspended

    Data portability

    Receive your data in a structured format

    Object

    Object to processing based on legitimate interest

    Withdraw consent

    Where processing is based on consent

    You can exercise these rights by sending an email to privacy@everyjob.io. We will respond within 30 days.

    Candidates: As a candidate who has received a message through Everyjob, you can object at any time. We will then delete your data from our system without delay.

    If you believe we are not processing your data correctly, you have the right to file a complaint with the Belgian Data Protection Authority (GBA):
    Drukpersstraat 35, 1000 Brussels — www.gegevensbeschermingsautoriteit.be

    10Cookies & Tracking

    Strictly necessary cookies

    Cookies required for the basic functionality of the application (session, authentication). No consent is needed for these.

    Analytical cookies

    Used to measure website usage and improve our service. These are only placed after your consent via the cookie banner.

    Marketing cookies

    Only placed with your explicit consent. You can adjust your preferences at any time.

    11Changes to This Policy

    We may update this privacy policy from time to time, for example when new features are introduced or legislation changes. Material changes will always be communicated in advance via email or a notification in the application. The date at the top of this document indicates the most recent version.