Privacy Policy

This Privacy Policy applies to the Azerra Agency Portal (the “Portal”), operated by AZERRA Business Services N.V. (“Azerra”, “we”, “us”), registered at Keizerstraat #16, Paramaribo, Suriname.

This policy describes how we process personal data of recruiting agency representatives who access the Portal. For our broader privacy practices and data processing related to consultants and end clients, see the relevant agreements between Azerra and your agency.

This policy covers only personal data of agency users — the individuals from a recruiting agency who are invited by Azerra to access the Portal. It does not cover the consultant or end-client data visible inside the Portal, which is governed by the Master Service Agreement (MSA) between your agency and Azerra.

We process the following categories of personal data about you:

• Account data: email address (provided by Azerra when you are invited), full name (where supplied)
• Authentication data: magic-link tokens, session timestamps, IP address at login
• Activity data: timestamps of actions you perform in the Portal (logins, document downloads, page navigation), tied to your account for audit and security purposes

We do not collect: payment information, identity documents, biometric data, or any data outside of what is strictly necessary to operate the Portal.

We process your personal data to:

• Provide you with secure access to the Portal
• Operate the magic-link authentication flow
• Maintain an audit trail of access and actions for security and compliance purposes
• Communicate with you about portal-related matters (e.g. service notices)

We process your personal data on the basis of:

• Performance of a contract: providing access to the Portal forms part of the service agreement between Azerra and your agency
• Legitimate interest: maintaining an audit trail for security and regulatory compliance

Your personal data is shared with the following sub-processors, each bound by appropriate data protection terms:

• Supabase Inc. — backend database and authentication infrastructure (data hosted in Americas/US East region)
• Lovable AB — frontend application hosting
• Resend Inc. — transactional email delivery for magic links and notifications

We do not sell, rent, or otherwise share your personal data with third parties for marketing purposes.

Your personal data is stored in the Americas/US East region via our Supabase infrastructure. Standard cross-border data transfer safeguards apply.

We retain your personal data for as long as you have an active agency user account, plus a reasonable period thereafter for audit and legal compliance purposes (typically up to seven years for financial-record-adjacent data, in line with applicable retention obligations).

Audit log entries tied to your account are retained for the same period and are stored in immutable form (insert-only, no updates or deletions).

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your data (subject to legal retention requirements)
• Object to or restrict certain types of processing
• Lodge a complaint with the relevant data protection authority

To exercise any of these rights, contact our Data Protection Officer (see Section 11).

The Portal uses essential browser storage (localStorage) to maintain your authenticated session. We do not use third-party analytics cookies, advertising trackers, or fingerprinting techniques.

Our internal Data Protection Officer is:

For any privacy-related questions or to exercise your rights, contact our DPO directly.

We may update this policy from time to time. Material changes will be communicated to active agency users via the email address associated with their account. The “Last updated” date at the top indicates when this policy was last revised.

General questions about the Portal: support@azerraservices.com
Privacy-specific questions: claudia@azerraservices.com