Privacy Policy

1. Who we are

KartiLink (formerly ShaqoGo) is a jobs, services, and opportunities platform connecting job seekers, freelancers, employers, service providers, and opportunity seekers worldwide. When you use KartiLink, your data is handled as described in this policy.

2. What data we collect

We collect the following types of data:

• Account data: your email address and password (stored securely via Supabase Auth)
• Application data: your full name, email, phone number, cover note, and CV/resume file when you apply for a job
• Employer data: your company name, location, and website when you create an employer account
• Usage data: pages visited, search queries, and actions performed within the platform

3. How we use your data

We use your data to:

• Enable you to create an account and sign in
• Submit and manage job applications
• Share your application details (name, email, phone, CV, cover note) with employers whose jobs you apply to
• Allow employers to post jobs and manage their hiring pipeline
• Process subscription payments via Stripe
• Improve the platform and fix bugs

4. Who we share your data with

We do not sell your personal data. We share data only as needed to operate KartiLink:

• Employers: when you apply for a job, your application data is visible to the employer who posted it
• Supabase: our database and authentication provider (supabase.com)
• Stripe: our payment processor for employer subscriptions (stripe.com)

5. Data storage and security

Your data is stored securely using Supabase, which uses industry-standard encryption. CV files are stored in private Supabase Storage buckets and are only accessible via temporary signed URLs. Passwords are hashed and never stored in plain text.

6. Your rights

You have the right to:

• Access the personal data we hold about you
• Request correction of incorrect data
• Request deletion of your account and data
• Withdraw any application you submitted

To exercise any of these rights, contact us at privacy@kartilink.com.

7. Cookies and advertising measurement

KartiLink uses session cookies to keep you signed in. We do not use third-party analytics products.

With your consent, KartiLink also uses Google Ads measurement (the Google tag, a service of Google LLC) to understand which of our Google ads bring visitors to KartiLink. If you accept, Google may set advertising cookies and identifiers in your browser and receives the address of the public pages you visit on www.kartilink.com and of the public page you arrived from — never a query string, a URL fragment, a sign-in token, an invitation code, a private page or your profile details — for the purpose of measuring our advertising. We do not use it to personalise the ads you see. Google chooses which advertising cookies it sets and how long they last; their usual purpose is to recognise the ad click that brought you to KartiLink. Your own cookie choice is stored in your browser, not on our servers, for up to one year, after which we ask again. This applies only to public pages (for example the home page, job and service listings, company pages and this policy) and only after you accept, whether or not you are signed in. Your account areas (the job seeker, employer and provider workspaces), job applications, invitations, authentication pages, support tickets, safety appeals and the admin area are never measured.

Nothing is set until you choose. The consent banner offers Accept and Reject with no option preselected; if you do not choose, measurement stays off. You can change or withdraw your choice at any time with "Cookie preferences" in the footer or the button below. Google describes its own processing in its privacy policy and in How Google uses information from sites or apps that use our services.

If you withdraw your consent after accepting, we tell Google's script that consent is withdrawn and the page reloads; from then on the page loads no Google script and our own measurement stops: we send no further measurement data to Google. While the withdrawal is being processed, however, Google's already-loaded script may still send one brief signal carrying only the withdrawn consent state. Cookies that Google set earlier are not deleted by withdrawing; they remain in your browser until they expire or you delete them in your browser settings. Because the page reloads, anything you have typed into a form on that page but not yet submitted may be lost.

8. Changes to this policy

We may update this policy from time to time. We will update the "Last updated" date above when we do. Continued use of KartiLink after changes constitutes acceptance of the updated policy.

9. Contact

If you have any questions about this Privacy Policy, email us at privacy@kartilink.com.