Controller and identity
The controller for Zeravo account and product data is SMARTBEES SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ. Registered address: Kępska 2/215, 45-129 Opole. Poland · Registration: KRS 0000739101; REGON 380709267 · Tax ID: NIP 7543185898. Privacy requests: [email protected] · +48 727 518 073.
Account, CV and workflow data
- Account: name, email, password hash or Google account identifiers, language/preferences and security records.
- Career profile and CV: user-entered profile fields, uploaded documents, CV-builder content and document-check results.
- User-confirmed outreach: directory filters, the company recipients you selected and confirmed, message/CV choices, scheduling, delivery state, replies and suppression events.
- Zeravo Mail: sender/recipient, subject, timestamps, safe message text and attachments received by your assigned address.
- Billing: plan, subscription state, consent/audit records and Stripe references. Full card data does not reach Zeravo.
Company-contact directory
The directory may contain company name, domain, industry/category, city/country, public-source URL, verification timestamps and a corporate contact point. Normal user views receive a masked address rather than the raw contact database.
R43 exposes only current, source-backed, verified generic corporate/role mailboxes for user selection. Named-person corporate addresses are suppressed from automatic directory sending unless a separate legal review establishes a valid basis and required notices/rights handling.
Public availability is not treated as an automatic legal basis for every use. A correction, objection or removal can be submitted through Contact record removal. More details are in Company contact privacy.
No employer suitability profiling
Zeravo does not use your CV, skills, seniority, salary expectations or sensitive information to decide which employer is suitable for you. The company directory is narrowed only by filters you choose, and the recipient list is shown to you for confirmation before a workflow starts.
CV checks evaluate document structure and text quality; they are not hiring decisions, employment suitability scores or job guarantees.
Purposes and legal bases
Data is processed to provide and secure the service, store and check CVs, display the directory, execute the exact recipient list you confirm, deliver email, process replies/bounces, manage subscriptions, prevent abuse, keep legal/security records and answer support requests.
The applicable legal basis depends on the data, purpose, person and jurisdiction and may include performance of a contract, legal obligations, legitimate interests, or consent where the law requires it. Zeravo does not describe consent as the basis for processing when another basis is actually used.
Sensitive information in CVs
Unless genuinely necessary for your own application, do not include national ID numbers, health/disability information, religion or belief, biometric/genetic data, criminal-record details or similar sensitive information in your CV. Zeravo does not use such information to select company recipients.
Email connections, Google data and staff access
Google account sign-in is separate from email sending. Zeravo no longer uses Gmail OAuth/API access to send application email. Gmail is an optional sender only when the user creates an App Password in their own Google account; Zeravo never asks for the normal Google account password.
Only authorised staff may access account, CV or mailbox content when genuinely necessary for support or security and only to the extent their role requires. Sensitive administrative access is audited where implemented and is not used for marketing.
Gmail App Password credentials are encrypted at rest and are removed from Zeravo when the Gmail sender connection is disconnected.
Marketing, analytics and email tracking
Account/security/billing/service messages are separate from marketing. Zeravo marketing email is enabled only through a separate optional choice and can be disabled in Settings.
A controlled, gradual rollout may add a first-party invisible image to normal job/internship application email sent by a user to companies they select. The resulting signal is not proof that a person read the message: Gmail/Outlook image proxies, Apple Mail privacy features and corporate security systems can generate it. Application-email links are not rewritten for click tracking. Zeravo stores no raw IP for this measurement; it may retain a shortened irreversible IP digest, limited user-agent data, time and a proxy/bot classification for security and technical interpretation.
The application open pixel is not added to password-reset, account, security, billing or other system email. Optional Google measurement scripts do not load before the relevant cookie choice.
Recipients, processors and international transfers
Your CV/message is sent to the company recipients you explicitly confirm. Necessary data may also be processed by hosting, storage, email, Google, Stripe and other vendors actually used by the production service, as well as advisers and authorities where legally required.
Before launch in a country, Zeravo must maintain an accurate processor/subprocessor and international-transfer inventory and use the safeguards required for the real operator and data flows. This notice does not invent transfer mechanisms that have not actually been implemented.
Retention, deletion and rights
Data is kept only as long as needed for the service or applicable legal/security obligations. Account deletion is available in Settings; data no longer needed is deleted or anonymised, while records that must be retained for tax, payment, fraud, security or dispute purposes may be kept for the required period.
Depending on applicable law, you may have rights of access, correction, deletion, restriction, objection, portability or complaint to a competent authority. Send a clear request from your registered email to [email protected].