Enigma Job (enigmajob.com) is a recruitment and job-posting service (including shift/rotational work arrangements), owned by a private individual. No sole proprietorship or other business entity is registered. The owner's full name is not publicly disclosed — see the legal limitation in RESOLVED_DECISIONS_2026-11-11.md, section 1.
Contact for questions about this policy: [email protected].
From job seekers: name, contact details (phone, email, Telegram), work experience, education, skills, desired position/salary, resume (including an uploaded resume file via AutoResume), answers to application questions, response history.
From employers: company name, contact person, job description, requirements, compensation terms.
Technical: IP address, visit logs (with bot-pattern filtering for statistics, not for blocking humans), Telegram channel subscription data (@cis_job), "Share" click identifier, result of the bot-protection check (Cloudflare Turnstile — on the application form only), rating/like data in the Safety Academy and Blitz sections.
Article comments (Blog, Academy, "Price of a Mistake"): the name entered in the comment form (not necessarily real), comment text, a hash of the IP address for spam protection (not the IP itself).
Resume visibility to employers and the mechanism for sharing contact details are governed by profile settings. Pending completion of a technical review of the actual default visibility settings, the safe product principle is: the profile is closed by default until the job seeker explicitly enables visibility; the exact wording of this section will be refined based on that review (see CLAUDE_IMPLEMENTATION.md, item 10).
An employer who receives an application or profile access processes this data for its own recruitment purposes and may act as an independent data controller under applicable law. Its further handling of candidate data is not controlled by Enigma Job — review the specific employer's terms when applying.
The service uses an automated agent that participates in processing profiles and vacancies (matching, ranking). Whether its output constitutes a fully automated decision, a human-in-the-loop decision, or an assistive tool requires an internal audit before a final wording is published. Pending that audit, we claim neither that the decision is "fully automated" nor the opposite.
If it is later confirmed that the agent makes decisions with legally significant consequences for a candidate without human involvement (e.g., an automatic rejection with no possibility of review), this requires separate assessment under Art. 22 GDPR/UK GDPR, and possibly a DPIA, for EU/UK users. A candidate may request an explanation of the matching logic and a review of the outcome via [email protected].
G-833548K4J7) and Google Ads (conversion tracking, tag AW-18411891026) — visit statistics and ad-effectiveness measurement.Google Cloud Platform, region us-central1 (USA). For job seekers and employers from Russia, Kazakhstan, and other countries, this means cross-border transfer of personal data outside their own country.
Separate warning regarding Russia: Art. 18(5) of Federal Law 152-FZ requires the initial recording, systematization, and storage of Russian citizens' personal data using databases located within the territory of Russia. Because Enigma Job's infrastructure is located in the USA, processing Russian citizens' personal data through this service may not comply with this requirement. This is an open legal question that cannot be resolved by a wording choice in the policy text — see OPEN_LEGAL_QUESTIONS_2026-11-11.md.
The profile and applications are kept while the account is active or until the job seeker requests deletion. Employer vacancies are kept until the listing expires or is deleted by the employer. Exact retention periods for backups and logs are to be specified in DATA_GOVERNANCE_EN.md.
Access, correction, profile export, deletion, consent withdrawal — via [email protected]. Separately: hiding your profile from new employers does not delete applications already sent — these are distinct actions, and the user must understand this boundary when making a request.
The service is intended for persons who have reached working age under the law of their country of residence (generally 18 for shift-work vacancies with special labor conditions; for specific vacancies the age threshold may be higher due to the nature of the work).
Revision date and change history are kept on the document page.