Privacy

Prefer the short version? See the Data Safety summary.

This notice explains what information Michi collects when you use the site, why we collect it, who helps us process it, and the control you have over it. We have tried to write it plainly.

Michi is operated by Paata Jibuti, who is responsible for how your data is handled (the data controller). If anything here is unclear, email help@michi.ge.

Information we collect

Your CV - the file you upload (PDF or Word) and the text we extract from it.
Your professional profile - the skills, tools, work history, education, role, seniority, and years of experience we derive from your CV.
Your email address - only if you choose to provide it, so you can sign in with a one-time code and return to your matches.
Usage data - which pages you visit and the steps you take while uploading, and the jobs you save, open, or give feedback on, used to help us improve the site.
A sign-in cookie - a small cookie that keeps you signed in to your matches.
Technical data - your IP address is processed briefly to rate-limit uploads and to keep short security logs of admin sign-ins. We do not use it to build a profile of you.

How we use your information

To read your CV and generate job matches for you.
To let you sign in and come back to your results.
To send you optional emails you asked for - new job matches, and a one-time check-in on how an application went - which you can turn off anytime.
To understand how the site is used so we can improve it.

We do not sell your data. We do not share your CV or profile with an employer or recruiter unless you explicitly opt in - today, Michi is candidate-only, so it isn't shared at all. We do not make any automated decision about you beyond showing you matches - whether to apply to any job is always your choice.

Who processes your data for us

Michi relies on a small number of trusted service providers to run the service. They act only on our instructions:

OpenAI - we send the text of your CV to OpenAI's API so it can extract your skills and experience. It is processed to return that analysis to us and is not used to show you advertising.
Resend - sends your sign-in and notification emails (receives your email address).
PostHog - product analytics that show us how the site is used.
Render - hosting and the database where your data is stored (European Union - Frankfurt, Germany).
Vercel - hosting for the website you are using now.
Cloudflare - holds the encrypted nightly backup copy of the database (stored in the European Union), provides the website's DNS, and runs the "confirm you're human" check on the upload form.

Where your data is stored, and for how long

Your data is stored in the European Union (Frankfurt, Germany). We keep it until you delete it, or until your account has been inactive for 180 days, after which it is automatically removed.

Your rights and choices

You can ask to see or delete your data at any time.

Delete - use Delete my data on your profile page. We email you a confirmation link, and once you confirm, your CV, profile, and matches are permanently removed.
Someone else uploaded your CV? If a CV was uploaded without your consent and you cannot sign in to delete it, ask us to remove it from the remove my CV page. No account needed.
You also have the right to access, correct, or object to how your data is used. Email help@michi.ge.

Cookies

We use a single sign-in cookie to keep you logged in to your matches. Our analytics are cookieless - they store nothing on your device and do not track you across visits. We do not use cookies for advertising.

Age

Michi is for adults. It is meant for people aged 18 and over who are looking for work, and we do not knowingly collect personal data from anyone under 18. If you believe someone under 18 has uploaded a CV or given us their data, email help@michi.ge and we will delete it.

Changes to this notice

We may update this notice as the service grows. When we do, we will update the date below.

Questions? Email help@michi.ge.

Effective date: 1 July 2026.