This is a draft policy, provided as the platform is under active development. It will be reviewed and finalized as the service matures. This is not an anonymous template, though: the data controller identified below is real, and the rest of this document describes what the platform actually does today, in plain terms, so users have an honest picture.
Last updated: 2026-08-08
CompliJob is operated by Tymofii Gotsko, an individual entrepreneur registered in Lithuania under an Individual Activity Certificate (No. 1478201), who acts as the data controller for the personal data described in this Privacy Policy. Contact: support@complijob.com.
CompliJob is a niche hiring platform connecting Compliance, AML, KYC, Sanctions and Risk specialists with employers across Lithuania and the EU. Questions regarding this Privacy Policy or the processing of your personal data may be directed to us using the contact details above or via our support form.
We do not intentionally collect special categories of personal data (such as health information, religious beliefs, or biometric data). Please do not include such information in your profile, CV, or messages unless it is necessary for your recruitment process.
Your data is used strictly to operate the platform: matching candidates with relevant vacancies, letting employers search the candidate database, processing applications, delivering messages between employers and candidates, moderating job postings before they go live, and sending transactional emails (email verification, password reset, new application/message notifications). We do not sell your data, and we do not use it for advertising or share it with third parties for marketing purposes.
We process personal data on the following legal bases under the GDPR:
A candidate's name, photo/avatar, email, phone number, LinkedIn URL, and CV all stay hidden from an employer until the candidate actually applies to one of that employer's vacancies (or replies to that employer's outreach) — this is enforced in the platform itself, not just a policy promise. Until then, an employer searching or browsing the candidate database sees only your desired title, category, general location (e.g. a city — not an address), experience, employment preferences, desired salary, public summary, skills, and languages — information that describes your professional profile without identifying you personally. Your title (e.g. "AML Compliance Manager") is shown in place of your name on these pre-application views, and no avatar or photo of any kind is displayed until your identity unlocks. Once an application to one of their own vacancies exists, an employer sees your real name, avatar, and full contact/CV details as normal. Platform administrators can access account and application data as needed to moderate vacancies, investigate abuse reports, or fulfill a data request under Section 9.
Your public summary — the short text description of your experience you write on your profile — is visible to any employer browsing or searching the candidate database, including before you have applied to any of their vacancies or unlocked your contact details. It exists so an employer can gauge your seniority and background while you're still browsing anonymously; do not include your name, contact details, or other identifying information in it, since it is not subject to the same pre-application visibility restriction as the rest of your profile.
Employers using CompliJob may process candidate personal data independently for their recruitment activities. Employers are responsible for ensuring that their processing of candidate data complies with applicable data protection laws. See Section 5 above for what candidate data becomes visible to an employer, and when.
We use carefully selected service providers that process personal data on our behalf, such as hosting providers, database providers, email delivery providers, and infrastructure providers, under data processing agreements where required. These providers only process personal data on our instructions and are not permitted to use it for their own purposes. A current list of the categories of service providers is available upon request.
Our production infrastructure is hosted within the European Economic Area (EEA). If any personal data is transferred outside the EEA, we will ensure appropriate safeguards required by the GDPR are in place.
If you are in the EU/EEA, you have the right to:
To exercise any of these rights or ask questions about this Privacy Policy, contact us using the contact details above. Deleting your account removes your profile, CV, applications, and message history and cannot be undone once completed.
You also have the right to lodge a complaint with a supervisory authority. In Lithuania, this is the Valstybinė duomenų apsaugos inspekcija (State Data Protection Inspectorate). If you are located elsewhere in the EEA, you may instead contact your local data protection supervisory authority.
We keep your account data for as long as your account is active. If you request deletion, your profile, CV file, applications, and messages are permanently removed from our active production systems as part of that request. We will process deletion requests without undue delay and in accordance with applicable law. Backups, where they exist, age out on their own retention schedule and are not treated as "live" access to your data.
In some cases, we may retain limited data — such as records of applications, hires, or related communications — for up to 3 years after account deletion, where necessary to establish, exercise, or defend legal claims (for example, in the event of a dispute over a success fee). This retained data is kept separately from active systems and is not used for any other purpose.
If your account has been inactive for an extended period, we may contact you to confirm you still wish to keep it, or delete it in accordance with applicable law.
We apply technical and organizational measures to protect your data, including: passwords stored as salted hashes rather than plain text, encrypted (HTTPS) connections to the platform, role-based access controls that restrict who can view or act on your data within the platform, and limited administrator access granted only where needed to operate and moderate the platform.
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the competent supervisory authority and, where required, affected users, in accordance with the GDPR.
We do not use automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you. Decisions about applications, hiring, and moderation are made by people, not by an algorithm.
CompliJob is intended for use by individuals aged 18 and over. We do not knowingly collect personal data from anyone under 18.
We use only cookies that are strictly necessary for authentication, security, and keeping you signed in during your session — no analytics or advertising cookies. Under applicable EU cookie rules, strictly necessary cookies like these do not require your consent. Fonts are self-hosted rather than loaded from a third-party CDN, specifically to avoid leaking visitor IP addresses to an external party before consent.
We may update this Privacy Policy from time to time, for example to reflect changes to the platform or to applicable law. We will update the "Last updated" date above when we do, and where changes are significant, we will take reasonable steps to notify users (for example, via email or a notice on the platform).
We use only the essential cookies needed to keep you signed in — no analytics or advertising cookies. See our Privacy Policy.
