Privacy policy
This document explains what data the Nova Personnel website collects, how it is used, and who is able to access it.
What we collect
Through the request form: the business name, the contact person's name, email, phone, request type and message; the IP address the request was sent from is stored with it. For an account: first name, last name, email, phone and existing profile information, including CVs. When you sign in with Google, we receive your name and email address from Google. For security, the IP address and browser string of sign-in attempts are recorded.
Visit statistics
We count page views and button clicks anonymously: only the event name, the page address, the interface language and the time are recorded; no IP address, cookie or user identifier is stored. In addition, Cloudflare Web Analytics collects aggregate visit statistics without using cookies.
How we use data
We use data only to respond to your request and to provide the agreed service. Account data is used only to run and secure your account.
Who has access
Requests are seen only by the Nova Personnel team. They are stored in the site's database; the email notification sent to the team about a new request is delivered through an email service provider.
How CVs are stored
CV files are never publicly reachable. They are kept outside the site's public folder under random names and can only be read through an API request that has passed an authorisation check.
Who can read your CV
You; the employer of a vacancy you have applied to (this access ends when you withdraw the application); platform administrators. Every administrative read is written to the audit log.
Passwords
Passwords are never stored in plain text. They are hashed with scrypt using a unique random salt per user.
Cookies
Only cookies strictly necessary for the site to work are used: a session cookie (httpOnly), a CSRF cookie and, during a Google sign-in only, a short-lived verification cookie. Your language choice is kept in your browser's storage. We use no advertising or tracking cookies.
Your rights
You can contact us to have the information you sent corrected or deleted. If you have an account, you can edit or delete your profile and CVs yourself at any time; deleting a CV also removes the file from storage.