Your job search is private. Erioun should feel that way.

The short version

Your job search is personal — salary notes, work authorisation, CV versions, rejections and private decisions. We built Erioun around control: we never sell your data, we keep only what the product needs, AI runs only when you ask it to, and you can export or delete everything at any time.

Who is responsible for your data

Erioun is operated by Loukas Tzekos – Sole Proprietorship (Thessaloniki, Greece), the data controller for your information. You can reach us about any privacy matter at support@erioun.com. Full registered details are on our Company Details page.

What we collect

We collect only what's needed to run your personal ATS:

• Account data — your email, sign-in details and settings.
• Job-search data you add — applications, companies, job descriptions, CV versions, notes, tasks, follow-ups and fit scores.
• Email Hub data — the aliases you create and, if you opt in, the job-search messages routed through them.
• Plan and usage data — your plan, credit balance and the actions you take, so features and limits work correctly.
• Technical data — basic logs and security signals needed to keep the service running and safe.

Why we use your data

We use your data to provide and protect the service. Under the GDPR our legal bases are:

• Contract — to give you the features you sign up for, like tracking, fit scores and Email Hub.
• Consent — for AI processing of your content and for optional marketing messages, which you can withdraw at any time.
• Legitimate interests — to keep Erioun secure, prevent abuse and improve the product, balanced against your rights.
• Legal obligation — to meet accounting, tax and other legal requirements.

AI features and your consent

AI-assisted actions — such as a summary or a drafted follow-up — are triggered by you, show their credit cost up front, and explain what data they use. AI runs only on content you choose to process and is governed by its own consent, separate from marketing email, which you can switch off in Settings. AI is decision support; it never sends messages or submits applications on its own.

Email Hub and aliases

Erioun aliases keep job-search email separate from your personal inbox. Inbound processing is opt-in: messages are read and classified only to connect replies to the right application. You can pause or delete aliases and processing at any time, and Erioun never sends email on your behalf without your action.

Who we work with

A small set of trusted providers (sub-processors) helps us run Erioun. They process data only on our instructions:

• Supabase — database, authentication and file storage.
• OVHcloud — application hosting on Erioun's own EU server.
• Mistral AI — AI features, on the content you choose to process.
• Lettermint — email delivery and inbound routing.
• Revolut — to process subscription and credit payments (we never see full card details).
• Viva — fiscal invoicing and Greek tax-authority (AADE) reporting.
• PostHog — privacy-friendly product analytics to understand and improve how Erioun is used.
• Job-data sources such as Adzuna — only to surface public job listings in Opportunity Radar.
• See the Third parties page for the current list.

How long we keep it

We keep your data while your account is active and for as long as the law requires, for example billing records. When you delete your account or specific items, we remove the associated personal data within a reasonable period — except limited records we must keep to meet legal obligations.

Your rights and controls

You stay in control. From Settings — or by emailing support@erioun.com — you can:

• Access and export your data.
• Correct information that's wrong.
• Delete your account or specific records.
• Restrict or object to certain processing.
• Withdraw AI or marketing consent at any time.
• Manage email and SMS choices on the Communication Preferences page.
• Complain to your local data protection authority if you believe we've handled your data unfairly.

Keeping your data safe

Documents live in private storage with ownership checks, secrets stay out of our code, and webhooks verify provider signatures before anything is processed. We use secure authentication and separate our development, staging and production environments. No system is perfectly secure, but we apply conservative, privacy-first defaults.

Where your data is processed

Erioun is operated from the EU and uses providers that may process data inside or outside the European Economic Area. Where data leaves the EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses. Erioun is intended for adults managing their own job search; we don't knowingly collect data from anyone under 16.

Changes and contact

We may update this policy as Erioun grows or the law changes; we'll revise the date and, for significant changes, let you know. Questions or requests? Email support@erioun.com or use the Contact page.