Privacy Policy

Last updated: 8 July 2026

This Privacy Policy explains how Victra ("Victra", "we", "us") collects, uses, shares and protects personal data when you use victra.careers and related services (the "Service"). The data controller is Victra Careers, Republic of Armenia, contact gevorg.arakelyann@gmail.com.

We process personal data in line with the EU GDPR and the Republic of Armenia Law on the Protection of Personal Data. By using the Service you acknowledge this Policy.

1. Data we collect

  • Account data: email, name, language and notification preferences, authentication identifiers.
  • Job-search data: resumes and documents you upload, parsed resume fields, job preferences, assistant configuration, favourites and application history.
  • HR data (for employer accounts): company details, vacancy text, and matches generated for your vacancies.
  • Usage and technical data: device/browser data, IP address, log and diagnostic data.
  • AI request metadata: prompts and token usage needed to provide and meter AI features.

2. How we use data

  • Provide job matching, resume tools, applications and the HR marketplace.
  • Operate, secure, debug and improve the Service.
  • Send notifications and communications you have opted into.
  • Enforce quotas, billing and our Terms of Use.
  • Comply with legal obligations.

3. Legal bases

We rely on: performance of a contract (to provide the Service you request); your consent (e.g. optional notifications, and sharing your contact details with an employer); our legitimate interests (security, product improvement, fraud prevention); and legal obligations.

4. AI processing

To provide resume generation, match analysis and parsing we send relevant content to AI and OCR providers acting as our processors. We do not sell your data. AI output is generated automatically and may be inaccurate; see the Terms of Use.

5. Sharing and disclosure

Candidate profiles surfaced to employers are anonymised by default. An employer sees your name, email and phone only after you explicitly consent to a contact request through the Service. We may share data with service providers (hosting, payments, email, AI/OCR), and where required by law. We do not sell personal data.

6. Third-party platforms

The Service integrates with third-party job boards and sign-in providers. Data you exchange with those platforms is governed by their own privacy policies.

7. Data retention

We keep personal data for as long as your account is active and as needed to provide the Service, then for up to 24 months for billing and security logs unless a longer period is required by law. You can delete your account and data at any time.

8. Security

We use technical and organisational measures (encryption in transit, access controls, isolated secrets) to protect personal data. No method of transmission or storage is completely secure.

9. Your rights

Subject to applicable law, you have the right to access, correct, delete, restrict or object to processing, to data portability, and to withdraw consent at any time. To exercise these rights, use the in-app controls, our data-deletion instructions, or email gevorg.arakelyann@gmail.com. You may also lodge a complaint with your data-protection authority.

10. Cookies

We use strictly necessary cookies/local storage for authentication and preferences (such as language). We do not use them for third-party advertising.

11. International transfers

Some processors may be located outside your country. Where that occurs, we rely on appropriate safeguards permitted by applicable law.

12. Children

The Service is not directed to children under 16, and we do not knowingly collect their data.

13. Changes to this Policy

We may update this Policy from time to time. Material changes will be notified through the Service or by email.

14. Contact

Privacy questions and data requests: gevorg.arakelyann@gmail.com