Privacy policy
Last updated: 2 October 2026
This policy covers people who visit aurahr.ge and people who use the AuraHR recruiter panel. If you are a job candidate, the Candidate privacy notice shown before your application or interview applies to you instead.
Who is responsible
AuraHR, 24 University Street, Tbilisi, Georgia is the controller of the data described here. Contact: privacy@aurahr.ge.
What we collect
- account details: your name, email and the company information you give when you register;
- sign-in data: one-time codes sent to your email, or your Google or Microsoft account identifier if you sign in that way. We do not receive your password;
- what you do in the panel: vacancies, criteria, notes, and a record of actions kept for security;
- messages you send us;
- technical data: device and browser type, server logs and error reports;
- with your consent, analytics about how you use the site and the panel. The Cookie policy has the details.
Why, and on what basis
- creating your account and providing the service: necessary to provide the service you asked for and to perform the contract with your company;
- service messages, such as sign-in codes and notices about your account: necessary to perform the contract;
- security, preventing abuse and fixing errors: our legitimate interest;
- understanding how the product is used: only with your consent, which you can withdraw in Cookie settings;
- duties the law places on us, such as accounting: legal obligation.
Whether you have to give it
No law requires you to give us this data. Without your name and email, however, we cannot open an account for you or run it.
Marketing
We send news and offers about AuraHR only if you have agreed to receive them. You can withdraw that consent at any time, with the link in each message or by writing to us, and we stop within 7 working days.
Who receives it
Our service providers, listed on the Subprocessors page, process the data only on our instructions. We give data to public authorities only where the law requires it. We do not sell personal data or use it for advertising.
Transfers abroad
Account data is stored in the European Union (Germany). Email delivery and server logs are handled by providers in the United States. Such transfers take place only on a basis that the Law of Georgia on Personal Data Protection allows.
How we protect it
We protect the data with encrypted connections, access limited to the people who need it, and a record of the actions taken on the data. The Security page has the details.
How long we keep it
We keep account data while the account exists. After it is closed we delete the data, except records the law requires us to keep, such as invoices. Server logs are kept for up to 30 days. The Cookie policy says how long analytics data is kept.
Your rights
Free of charge, you can ask for: information about the processing, access and a copy, correction, stopping processing or deletion, blocking, portability, and to withdraw consent. We answer within 10 working days, and within 3 working days for blocking. In special cases the 10 days can be extended by up to 10 more, and we tell you at once. Write to privacy@aurahr.ge.
Complaints
If you believe your rights were breached, you can turn to the Personal Data Protection Service of Georgia or a court.
Changes
If this policy changes materially, we email account owners.