Privacy policy

Version of 28 October 2026

This policy explains what personal data the RobotaYES website (robotayes.com) — a job search service for citizens of Ukraine looking for work in EU countries — collects, why we process it, whom we share it with, how long we keep it and what your rights are. We process data in accordance with the EU General Data Protection Regulation (GDPR) and the Law of Ukraine “On Personal Data Protection”.

1. Who processes your data

The controller of your personal data is the operator of the RobotaYES service.For any question about your personal data, write to support@robotayes.com.

2. What data we collect

  • Account: email address and password (we store only a secure hash of it), interface language, dates of registration and last sign-in. If you sign in with Google — the identifier of your Google account, the email address and name that Google provides; if with Telegram — your Telegram user identifier, name and username; your Telegram phone number only if you share it yourself with the button in the bot (it is then stored in your profile and filled into your applications).
  • Profile (if you fill it in): first and last name, phone, Telegram, country and city of stay, legal status in the EU, experience. Your name and contacts from the profile are filled into the application form; they are passed on only with an application.
  • Vacancy subscriptions (if you create them): search conditions — country, region, city, categories, desired salary, housing, how recent the vacancies are — and your plan; which vacancies have already been sent to you.
  • Consents to the terms of use and this policy: document version, date, time and IP address.
  • Job application: name, phone, Telegram, email and message — whatever you enter in the form — and your consent to share this data. You can apply without an account.
  • Service request or callback order (visa, insurance): name, phone, Telegram or email, preferred way and time to contact you, message — and your consent to the processing of this data.
  • Conversation with the chat assistant (registered users only): your messages. The conversation history is kept only in your browser until you close the tab; on the server we record only technical data of each request — time, model, size, cost, errors — without the text of the conversation.
  • Telegram notifications (if you turn them on in your account or sign in with Telegram): the ID of your chat with the website bot and the date you connected it.
  • Technical data: IP address, browser type, time and addresses of requests — in server logs; cookies (section 8).

We do not ask for or process special categories of data (health, religious beliefs, etc.) — please do not include them in messages.

3. Purposes and legal bases

  • Registration, sign-in and account maintenance — performance of a contract (the terms of use), Art. 6(1)(b) GDPR.
  • Passing your application to an employer or a recruitment agency — your consent in the application form, Art. 6(1)(a), and steps taken at your request before entering into a contract, Art. 6(1)(b).
  • Service request or callback order — your consent in the form and steps taken at your request before entering into a contract, Art. 6(1)(a) and 6(1)(b).
  • Chat assistant — performance of a contract: you start the conversation yourself, Art. 6(1)(b). To answer, it reads only your own data (profile, applications, subscriptions) and published vacancies.
  • Service emails (email address confirmation, password reset) — performance of a contract, Art. 6(1)(b).
  • Telegram notifications — performance of a contract: you turn them on yourself and can turn them off at any time, Art. 6(1)(b).
  • Security of the service: protection against password guessing and abuse, server logs — our legitimate interest, Art. 6(1)(f).
  • Compliance with legal obligations — Art. 6(1)(c).

We do not send marketing emails; if we ever do, it will be only with your separate consent.

4. Whom we share data with

  • The employer or the licensed recruitment agency that manages the vacancy — the data from your application, and only after your consent in the application form. For some vacancies we show you the employer's contact details and you contact the employer yourself.
  • Processors acting on our behalf: Hetzner Online GmbH (Germany; servers in Finland) — the hosting the website runs on and where the database is stored, and Brevo (France) — sending service emails.
  • Anthropic and OpenAI (USA) — the artificial intelligence services the chat assistant runs on: they receive your messages and the data the assistant has read to answer (profile, applications, subscriptions), as well as the interface language and the address of the page you are writing from. If you do not use the assistant, your data is not passed to them.
  • Telegram — delivers notifications and vacancy digests if you have connected Telegram, and confirms sign-in in the bot if you sign in with Telegram. Notifications about new applications contain no applicant data: only the vacancy and a link to the application on the website.
  • Google — only if you sign in with Google: Google passes us your email, name and account identifier and sees that you are signing in to our website. We request no other data from Google.
  • Google Maps — only if, being signed in, you switch to the map view of jobs: your browser loads the map from Google servers, and Google sees your IP address and data about your use of the map. On pages without the map and for guests nothing is loaded from Google; we pass neither your search conditions nor your data to Google — the map receives only cities with coordinates and the number of jobs in them.
  • Public authorities — only when required by law.

We do not sell personal data or share it for advertising. We prepare vacancy texts with the help of the same artificial intelligence services — from the source advertisements, without data of website users.

5. Transfers outside the EU

The chat assistant runs on services in the USA (Anthropic, OpenAI), so the data of a conversation with it is transferred outside the EU. If data is transferred outside the European Union and the European Economic Area, we apply the safeguards provided for by the GDPR, in particular the European Commission's standard contractual clauses.

6. How long we keep data

  • Account — until you delete it; if for 24 months you neither sign in to the website nor receive vacancy digests, the account is deleted after a reminder 30 days in advance by email (or in Telegram for accounts without email); signing in is enough to keep it.
  • Applications — 12 months after they are closed, then anonymised.
  • Consents — together with the account.
  • Technical server logs — up to 90 days; the log of actions in the system — 2 years.
  • Conversations with the chat assistant — the text is not stored on the server; the technical record of a request (without text) — 2 years.
  • Database backups — encrypted, kept for up to 30 days; deleted data disappears from them as old copies expire.

7. Your rights

Under the GDPR you have the right to:

  • access your data and obtain a copy of it;
  • have inaccurate data rectified;
  • have your data erased (“right to be forgotten”);
  • restrict processing;
  • receive your data in a machine-readable format (portability);
  • object to processing based on legitimate interest;
  • withdraw your consent at any time — this does not affect the lawfulness of processing before the withdrawal.

To exercise your rights, write to support@robotayes.com from the email address of your account. We will reply within one month. You can also lodge a complaint with the data protection supervisory authority in the EU country where you live or work (in Poland — the President of the Personal Data Protection Office, Prezes Urzędu Ochrony Danych Osobowych), and in Ukraine — with the Ukrainian Parliament Commissioner for Human Rights.

8. Cookies

We use only strictly necessary cookies and one that you switch on yourself — no advertising and no third-party analytics:

  • ry.auth — signing in to your account; up to 14 days, extended while you use the website;
  • .AspNetCore.Culture — the selected interface language; 1 year;
  • .AspNetCore.Antiforgery.* — protection of forms against forged requests; until the browser is closed;
  • Identity.External, .AspNetCore.Correlation.*, ry.tglogin — only while signing in with Google or Telegram; up to 10 minutes;
  • ry.search — your latest job search conditions, so that the home page and the catalogue open with them; only if you switch on “Remember my filters” in the search form; 90 days from the last search; switch it off in “Your cookie choices” below this policy.

9. Security

Data is transmitted only over an encrypted connection (HTTPS), passwords are stored only as a secure hash, only staff who need data for their work have access to it, and the number of sign-in attempts and form submissions is limited.

10. Children

The service is intended for people aged 18 and over; we do not knowingly collect data of minors. If you believe that a minor has given us their data, write to us and we will delete it.

11. Changes to this policy

We will announce significant changes on the website and notify registered users by email. The date of the current version is shown at the top of this page.

Your cookie choices

Remembering search filters: off

The ry.search cookie keeps your latest search conditions for 90 days so that the home page and the catalogue open with them. You can also switch it on in the search form — “Remember my filters”.