Privacy Policy

Your data is stored securely using Supabase, a PostgreSQL-based platform with enterprise-grade security, encryption at rest and in transit, and regular security audits. Files are stored in Supabase Storage with end-to-end encryption.

We implement industry-standard security measures including:

• SSL/TLS encryption for all data in transit
• AES-256 encryption for files at rest
• Row-level security (RLS) policies to ensure users can only access their own data
• Regular security backups and disaster recovery procedures
• No storage of passwords for external job websites

We use the following third-party services:

• Supabase (PostgreSQL, Authentication, Storage): Stores your account data, job records, and files with their privacy policy available at supabase.com/privacy
• Google Authentication (OAuth): Allows you to sign in with your Google account. Google's Privacy Policy applies.
• GitHub Authentication (OAuth): Allows you to sign in with your GitHub account. GitHub's Privacy Policy applies.
• Google Analytics 4 (GA4): Collects anonymized usage data to help us understand how the Service is used. GA4 respects your privacy settings and does not collect personally identifiable information.
• Stripe (Payment Processing): Processes subscription payments. Stripe does not store your full credit card information. See Stripe's Privacy Policy.

We do not sell or rent your personal information to third parties. We only share your data:

• With service providers who help us operate the Service under strict data protection agreements
• When required by law or to comply with legal processes (subpoenas, warrants)
• To protect our rights, privacy, safety, or property
• In connection with a merger, acquisition, or sale of assets (with notice)

Where GDPR applies, we process your data on the following legal bases:

• Contract performance (Art. 6(1)(b)): Account management, job tracking, subscription fulfilment.
• Legitimate interests (Art. 6(1)(f)): Fraud prevention, service security, product analytics (aggregated only).
• Consent (Art. 6(1)(a)): Analytics cookies (Google Analytics 4). You may withdraw consent at any time via the cookie banner or Privacy settings.
• Legal obligation (Art. 6(1)(c)): Billing records retained for 7 years as required by EU accounting law.

We retain your data for the following periods:

• Account & profile data: Retained until you delete your account.
• Job records & application logs: Retained until you delete your account or clear data.
• Email content (IMAP sync): Retained until you delete it or disable email sync.
• Billing records: 7 years from the date of the transaction (legal obligation).
• Server & access logs: Up to 90 days for security purposes.
• Consent records: 3 years from the date of consent.

Under GDPR, you have the following rights (exercisable at any time):

• Right to Access (Art. 15): Request a copy of your personal data. Use Settings → Privacy → Export My Data for an instant download.
• Right to Rectification (Art. 16): Correct inaccurate information in your account settings.
• Right to Erasure (Art. 17): Delete your account and all data via Settings → Privacy → Delete Account. Billing records required by law are excluded.
• Right to Data Portability (Art. 20): Export your data as structured JSON via Settings → Privacy → Export My Data.
• Right to Withdraw Consent (Art. 7(3)): Withdraw analytics consent at any time using the cookie preferences banner or your Privacy settings.
• Right to Object (Art. 21): Object to processing based on legitimate interests by contacting us.
• Right to Lodge a Complaint (Art. 77): You have the right to lodge a complaint with your local data protection supervisory authority. For EU residents: EDPB member list.

To exercise any right, contact us at info@bestjobfinder.net. We respond within 30 days.

We use the following cookies:

You can change your analytics preference at any time using the cookie banner at the bottom of this page. Strictly necessary cookies cannot be disabled as the Service cannot function without them.