Privacy Policy
This policy describes what personal data the platform collects, how it is protected, and the controls you have over it.
1. Controller and contact
The controller for personal data processed through C-Level Work is the platform operator:
The Service is operated by C-Level.Work, a remote-first sole proprietorship (Ukrainian PE, working online), contactable at happy@c-level.work. No formal company registration or registrable office exists yet; the Service is operated remotely across the EU.
For any privacy matter, including requests and complaints, contact the data-protection contact at happy@c-level.work.
2. Data categories we process
- Account data — email address, hashed password, role, and account status.
- Anonymous profile data — the published profile: title, skills, experience, salary expectations, location, languages. It deliberately contains no name and no contact details.
- Identity data — your contact block (name, phone, messaging handles, links, resume file), stored encrypted and disclosed to a recruiter only by your explicit consent, per conversation. Platform moderators may read identity data only to decide a moderation case, under logged, access-controlled tooling.
- Recruiter and company data — your name and position title, and your company's name and email domain with its verification status.
- Vacancy data — the vacancies a company publishes.
- Conversation data — messages you send and receive.
- Platform state — applications and pipeline stages, moderation decisions, hire confirmations, favorites, and audit entries. Audit entries record user ids, event names and reasons only — never the underlying private values.
- Notification and mail-delivery records — per-recipient delivery records for platform notifications and authentication email: event name and delivery status. They contain no message bodies, and authentication-mail records keep no second copy of your email address.
3. Purposes and legal bases
We use personal data to operate the marketplace: accounts and registration, anonymous profile publishing, search, messaging and applications; to moderate profiles, companies and vacancies before they remain visible and to keep the platform safe; to disclose identity data to a recruiter only where you have consented in that conversation; to send service email (address confirmation, password reset, and platform notifications you have not switched off); and to answer export or deletion requests.
PENDING-COUNSEL: purpose-by-purpose legal-basis mapping (completed with counsel, FA-L1).
4. Processors and transfers
We keep data processing to a minimum. Today, personal data is processed by:
- Our hosting provider — the servers and database that run C-Level Work, located in the European Union.
- Email delivery from the platform's own infrastructure — service email (address confirmation, password resets, notifications) is sent by the platform itself; notification email carries no private profile data.
No cookies beyond the essential ones described in our cookie notice are set.
If AI-assisted matching is enabled in the future, it would receive only de-identified profile data — never your contact block, resume or other identity data.
PENDING-COUNSEL: transfer mechanism for any processing outside the EEA, sub-processor list changes and their notice policy, and the hosting provider's legal name and service address (completed with counsel, FA-L1).
5. Retention
Account data is kept while your account exists. If you delete your account, your identity data (contact block and resume) is erased, your login email is replaced with a non-functional placeholder, your account is reduced to an anonymized record, and your profile is unpublished. Anonymous artifacts that other users legitimately keep (for example, messages in their conversations), aggregate platform state, and pseudonymous security audit records are retained.
PENDING-COUNSEL: retention periods per data category (founder/counsel facts, completed with counsel, FA-L1).
6. Your rights
You can export your data as a downloadable file and delete your account from your dashboard at any time, without contacting us. Further rights (access, rectification, objection, complaint) apply as provided by law.
PENDING-COUNSEL: rights-response process and supervisory-authority reference (completed with counsel, FA-L1).
7. Cookies
We set essential cookies only — see the cookie notice.
8. Reports
If you have a privacy question or want to report abuse, impersonation or a data concern, write to happy@c-level.work.
Reports are handled by the operator.