Effective October 11, 2026 | Version 2026-10-11

Privacy Policy

This policy describes information handled through Job Bulletin at jobbulletin.org. The service operator is responsible for privacy practices; AI assistance does not replace that responsibility. Use the contact form for privacy questions, access, correction, deletion, or complaints.

Information collected

Employer accounts include company name, email, password hash, listings, account status, and registration-agreement time and policy versions. Job seeker accounts include name, email, password hash, saved jobs, account status, and agreement records. Applications may include a name, email, phone number, portfolio or resume link, uploaded resume, and message. Support and safety reports include submitted contact details and message content.

We use session cookies, verification and password-recovery records, security events, and limited visitor analytics. Browser storage can preserve saved-job navigation and search preferences. Public job details and company hiring links are visible to visitors. Account passwords, private shortlists, and private application records are not published as a public directory.

Purposes and recipients

We use information to create and secure accounts, deliver requested account messages, display listings, save jobs, route applications, respond to requests, prevent abuse, and maintain the service. Applications submitted here are shared with the employer for the selected role and authorized administrators. Employers separately control the copies they receive and are responsible for their own privacy practices.

Hosting, email delivery, and network-location services process information needed to provide their services. Current services include Render for hosting, Resend for transactional email, and ipapi.co for approximate network location. Their processing may occur outside your province, state, or country, including in the United States, where applicable local laws may permit lawful access. We may disclose information when lawfully required or reasonably necessary to investigate abuse and protect rights, subject to applicable law.

We do not sell applicant information or authorize using private resumes for unrelated advertising or general-purpose AI training. Registration agreement is not a subscription to promotional messages.

Analytics and network information

Analytics include page-view totals, a pseudonymous visitor identifier, approximate city, region and country, visit date, and account category. Security events use hashed network identifiers. Full IP addresses are not kept in the application's analytics or security-event tables; network addresses are processed for requests, rate limits, and location lookup and may appear in infrastructure-provider logs. Do Not Track and Global Privacy Control disable visit recording in this service, but do not disable essential account or security processing.

Retention, deletion, and backups

Listings normally expire after 30 days; expiry does not itself erase stored records. Account data and application records remain in active storage until deleted or otherwise removed. We retain information needed for service operation and may retain limited records when required by law, to resolve disputes, or protect against fraud. Requests for unnecessary or outdated information to be removed can be made through the contact form.

Daily backups include the database and stored resume files. The default backup retention is 14 days and may vary with service configuration or a lawful preservation requirement. Deletion from active storage may precede expiry of backup copies. Independently downloaded employer copies and external application websites cannot be erased by deleting a Job Bulletin record.

Your choices and requests

You may request access, correction, deletion, account closure, or withdrawal of consent through the contact form. We may need proportionate identity checks to protect your information and will respond as required by applicable law. Withdrawing information needed to operate an account or process an application can prevent providing that function. Optional information can be omitted. You retain any right to complain to a competent privacy regulator.

Security and sensitive information

Passwords use salted cryptographic hashes and sessions use HTTP-only cookies. Access controls, upload restrictions, and rate limits help protect information, but no service is immune to incidents. Report suspected exposure or misuse promptly. We will investigate incidents and make notifications when required by law. Do not submit government identification numbers, bank details, passwords, medical records, or other unnecessary sensitive information.

External sites, age, and policy updates

Applications made on linked employer websites are governed by those websites' policies. Job Bulletin accounts are intended for people aged 18 or older. Contact us if an underage account or inappropriate personal information is discovered. Policy changes will be dated on this page; material changes will be notified and additional consent obtained where required. Current Terms and Conditions also apply.