Privacy Policy

1. Who we are

Jobpify is a global job board operated from Ontario, Canada. We are the data controller for the information you provide when you create an account, browse jobs, or use our tools. When an employer receives your application through Jobpify, that employer becomes a separate data controller for the information in that application.

Our designated privacy officer can be reached at privacy@jobpify.com. That person is responsible for answering questions, handling complaints, and managing data access requests.

2. What we collect

We collect only what's needed to operate Jobpify and match candidates with jobs. Here's the full list, grouped by how it arrives:

You give us directly

• Account data — name, email address, password (hashed), and account type (candidate or employer).
• Profile data — job title, skills, location, work history, education, salary expectations, and any other information you add to your profile.
• Resume and cover letter files — anything you upload or create using our builders.
• Messages — the content of any messages you send to employers or candidates through Jobpify.
• Payment data — billing name, email, and address. We never store your full card number — payment processing is handled entirely by our payment providers (Stripe, PayPal).

We collect automatically

• Log data — IP address, browser type, device type, operating system, referring URL, and pages visited on Jobpify. This is standard server logging.
• Usage data — which jobs you view, save, or apply to; which searches you run; how long you spend on each page.
• Cookies — small text files used to keep you logged in, remember your filters, and understand how the site is used. See section 5.

We receive from third parties

• Job listing data — aggregated from public APIs like Jobicy, Remote OK, and Arbeitnow. This is not personal data — it's public job information.
• Payment confirmations — from Stripe or PayPal, confirming a transaction succeeded or failed.
• Social login data (if you use it) — name and email address from Google, LinkedIn, or another provider you choose to sign in with.

3. Why we collect it

Every piece of data we collect serves a specific purpose:

We do not use your data for advertising, we do not sell it to third parties, and we do not share it with employers unless you explicitly apply for a job.

4. Legal basis (GDPR)

If you're in the European Economic Area, the UK, or Switzerland, we process your personal data under these legal bases:

• Contract — processing necessary to create your account and deliver the services you signed up for.
• Legitimate interests — keeping the platform secure, preventing fraud, and improving the product. We balance these interests against your rights.
• Consent — for non-essential cookies and, where required, for marketing emails. You can withdraw consent at any time.
• Legal obligation — for tax records, responding to valid legal requests, and complying with applicable law.

5. Cookies & tracking

We use three categories of cookies:

• Strictly necessary — keep you logged in, remember your session, and protect against CSRF. These cannot be turned off because the site won't work without them.
• Functional — remember your language, region, saved searches, and builder drafts. You can turn these off, but the site will forget your preferences.
• Analytics — Google Analytics 4, used in aggregate to understand which pages are visited and where users get stuck. Not used to identify individuals. You can turn these off without any impact on your experience.

We do not use advertising cookies, retargeting pixels, or cross-site tracking. You can manage your cookie choices from the cookie banner that appears when you first visit, or any time from your account settings.

6. Third parties

We share data with a small number of trusted service providers, only when necessary to run Jobpify:

Each provider is bound by their own privacy terms and, where applicable, a Data Processing Agreement with Jobpify. We do not sell or rent your data to anyone.

Employers you apply to. When you submit an application through Jobpify, the employer receives your name, contact details, resume, and cover letter. Once they have that information, they become a separate data controller — their privacy policy applies to how they handle it. We cannot control what they do with it, but we do require every employer on Jobpify to comply with applicable data protection law.

Legal requests. We may disclose data if required by law, subpoena, or valid court order — but we will notify you first unless prohibited by law.

7. How long we keep it

• Active accounts — for as long as you keep your account open.
• Deleted accounts — permanently deleted within 30 days of your request.
• Application data — retained for 12 months after submission so employers can review past applications.
• Payment records — retained for 7 years, as required by tax and financial regulations.
• Server logs — retained for 30 days, then automatically purged.
• Backups — retained for 90 days, then overwritten.

When retention periods end, we securely delete or anonymize the data.

8. Your rights

Depending on where you live, you may have the following rights. We honor all of them for every user, regardless of location:

To exercise any of these, email privacy@jobpify.com. We respond within 30 days, usually much sooner. We never charge a fee for handling these requests.

California residents (CCPA/CPRA): You have the right to know what personal information we collect, to request deletion, to opt out of the sale or sharing of personal information (we don't do either), and to not be discriminated against for exercising your rights.

Quebec residents (Law 25): You have the right to access, correct, and delete your data, to withdraw consent, and to request that we stop disseminating your personal information. Our privacy officer is the contact person for all Law 25 requests.

9. Security

We protect your data with:

• TLS 1.3 encryption for all data in transit.
• AES-256 encryption for all data at rest.
• bcrypt hashing for all passwords — we never store them in plain text.
• Two-factor authentication available on every account.
• Regular security audits and annual third-party penetration tests.
• Least-privilege access — our team can only access what's needed to support you.

If we ever experience a data breach that affects your rights, we will notify you and the relevant authorities within 72 hours, as required by GDPR and Quebec Law 25.

To report a security issue, email security@jobpify.com. We respond to every report within 1 hour during business hours.

10. Children

Jobpify is not intended for anyone under the age of 16. We do not knowingly collect data from children. If you believe a child has created an account, email us and we will delete it immediately.

11. Changes to this policy

We may update this policy from time to time. When we do:

• We update the "Last updated" date at the top of this page.
• We email registered users if the changes are material.
• We keep a public archive of previous versions on request.

Your continued use of Jobpify after changes take effect means you accept the updated policy.

12. Contact

Questions, concerns, or requests about your data:

• Privacy officer: privacy@jobpify.com
• Security issues: security@jobpify.com
• General support: support@jobpify.com

You can also write to us at the address published on our Contact page.