Privacy Notice

MOVEABRO is a subscription-based SaaS platform that helps users discover and match with employment opportunities based on their professional profile, preferences and selected markets. It is operated by Tomas Gabalis, an individual sole trader based in Lithuania, who is the data controller for the personal data described here. This notice explains what we collect, why, and what rights you have.

1. Data we collect and why

• Account data (name, email, password credentials, authentication provider ID) — to create and secure your account. Legal basis: performance of our contract.
• Career profile data (uploaded CV and its extracted contents, work history, skills, certificates, education, languages, target roles and target markets) — to match you with job opportunities and, on paid plans, to generate tailored CVs and cover letters. Legal basis: performance of our contract.
• Usage and telemetry (pages viewed, features used, device identifiers, IP address, error logs) — to keep the Service secure, prevent fraud and abuse, and improve the product. Legal basis: our legitimate interests.
• Support messages — to answer your questions. Legal basis: legitimate interests and contract performance.
• Marketing communications — only where you have opted in. Legal basis: consent, which you can withdraw at any time.
• Records required by law (for example accounting records) — legal obligation.

We do not invent or enrich profile data: your profile contains only what you upload or enter yourself.

2. Who we share data with

• Service providers / subprocessors: cloud hosting and database providers, AI model providers used to generate documents and analysis, email delivery, and error monitoring. They act on our instructions under contract.
• Stripe, our Merchant of Record, for the sale of subscriptions, payments, subscription management, tax compliance and invoicing.
• Professional advisers such as accountants and lawyers, where necessary.
• Authorities, where required by law.

We do not sell your personal data, and we do not send your CV to employers on your behalf without your action.

3. International transfers

Some providers process data outside the EEA/UK. Where that happens we rely on adequacy decisions or EU Standard Contractual Clauses together with appropriate technical safeguards.

4. Retention

We keep account and profile data for as long as your account is active, and for up to 30 days after deletion to allow recovery, after which it is deleted or anonymised. Usage logs are kept for up to 12 months. Billing records are retained for the period required by tax law.

5. Security

We apply appropriate technical and organisational measures, including encryption in transit and at rest, row-level access controls so that each user can only access their own data, least-privilege access for staff, and monitoring.

6. Your rights

Under the GDPR you may request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interests; you may also withdraw consent at any time. We respond within one month. You may lodge a complaint with the Lithuanian State Data Protection Inspectorate or your local supervisory authority.

To exercise any right, email privacy@moveabro.com.

7. Cookies

We use essential cookies and local storage to keep you signed in and to remember your preferences; these cannot be switched off without breaking the Service. Where analytics or marketing cookies are used, they are set only with your consent and you can change your choice at any time in your browser settings or by contacting us. See our Cookie Notice.

8. Contact

Tomas Gabalis — privacy@moveabro.com