How JAYOBE collects, uses, shares, retains, and protects your personal information.
1. Introduction and Scope
This Privacy Policy describes how JAYOBE, Inc. ("JAYOBE," "we," "us," or "our") collects, uses, shares, retains, and protects personal information in connection with your access to and use of the JAYOBE platform located at jayobe.io, including all associated web applications, features, and functionality (collectively, the "Platform"). This Privacy Policy applies to all Users of the Platform, including Employers and Job Seekers, and to all visitors to jayobe.io.
This Privacy Policy should be read together with the JAYOBE Terms of Service, available at jayobe.io/terms, and the JAYOBE Cookie & Tracking Policy, available at jayobe.io/cookies. Capitalized terms used in this Privacy Policy and not otherwise defined have the meanings given to them in the Terms of Service. References to "user" in lowercase in Section 5 of this Privacy Policy retain the meaning of the defined term "User" as used in the Terms of Service and elsewhere in this Privacy Policy.
By accessing, registering for, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described here, you must not access or use the Platform.
Note
JAYOBE is the data controller for the personal information described in this Privacy Policy. The commitments in this Privacy Policy are binding on JAYOBE consistent with the terms of this Privacy Policy and applicable law. Questions about this Privacy Policy or about the personal information JAYOBE holds about you should be directed to privacy@jayobe.io.
2. Information We Collect — Employers
When an Employer registers an account, creates Listings, and uses the Platform, JAYOBE collects the following categories of personal information.
Business and Account Information
Business name, business address, contact name for the authorized representative of the business, email address, industry, and company size. A business phone number is required at Employer account creation. JAYOBE may contact Employers by voice call or SMS at the business phone number provided for operational purposes, as further described in Section 11.
Branding Content
Logo images and banner or cover images uploaded to the Employer profile.
Listing Content
All content included in Listings posted to the Platform, including job title, job description, employment type, work arrangement, location, salary and pay information, and any other information provided in the Listing form.
Billing Information
Payment information is collected and processed by Stripe in connection with Employer subscriptions, trials, and any applicable fees. JAYOBE does not store raw payment card data. Stripe stores payment card data on its own systems in accordance with its security and compliance standards. JAYOBE stores only the Stripe Customer ID and subscription metadata necessary to manage the Employer's subscription.
Account Activity and Usage Data
Pages viewed, features used, actions taken within the Employer dashboard, applications received, and other interactions with the Platform.
Technical Data
IP address and device information, including browser type, operating system, and device category.
Location Data Associated with Listings
The address provided for each Listing is geocoded into latitude and longitude coordinates for the purpose of placing a map pin at the Listing location on the Platform's map interface.
3. Information We Collect — Job Seekers
When a Job Seeker registers an account, completes a profile, and uses the Platform, JAYOBE collects the following categories of personal information.
Account Information
Name and email address are required. A phone number is required when a Job Seeker submits their first Application and is verified by a one-time code sent by text message. JAYOBE uses a Job Seeker phone number for account security and account recovery and for the communications described in Section 11. JAYOBE shares a Job Seeker phone number with an Employer where the Job Seeker elects to share it or includes it in an Application or in materials sent to an Employer.
Profile Information
All information a Job Seeker provides in their profile, including work history, skills, employment preferences, work arrangement preferences, and other information entered in the profile fields.
Resume and Work History
Resume files (typically PDF or document files) uploaded to the Platform, which may contain personal information in any category the Job Seeker chooses to include — typically name, contact information, work history, educational history, and skills, and sometimes certifications, licenses, and references. JAYOBE does not currently parse or extract data from resume files; resumes are stored intact and transmitted intact to Employers on submission of an application. If JAYOBE introduces parsing or extraction, this Policy will be updated to describe the practice before that use begins. Where an Employer has invited a cover letter on a Listing, any cover letter a Job Seeker chooses to submit is application content and is stored and displayed to the Employer as written; JAYOBE does not currently parse, score, rank, summarize, or otherwise evaluate cover letter content by automated means. If JAYOBE introduces any such processing, this Policy will be updated to describe the practice before that use begins. Job Seekers are encouraged not to include sensitive personal information in resume files, such as Social Security numbers, driver's license numbers, or financial account information.
Application Submissions
Records of each application submitted through the Platform, including which Employer received the application and the date and time of submission.
Saved Jobs
Listings that the Job Seeker has saved for later reference.
Employer Follows
If a Job Seeker chooses to follow an Employer to receive alerts about that Employer's new Listings, JAYOBE stores the follow relationship.
Account Activity and Usage Data
Pages viewed, features used, searches performed, Listings browsed, and other interactions with the Platform.
Technical Data
IP address and device information, including browser type, operating system, and device category.
Approximate Location (IP-Derived)
JAYOBE derives an approximate location — city and region — from the IP address of the device used to access the Platform. This is coarse, city-level location used to provide a default map center and to surface geographically relevant Listings, as described in Section 4. It is distinct from precise geolocation, which is described in Section 5 and is collected only with explicit permission.
Precise Location Data
Precise geolocation data is collected from a Job Seeker's browser only if the Job Seeker grants explicit permission through the browser's native location prompt, and only for the purposes described in Section 5 of this Privacy Policy. Before the browser prompt is presented, the Platform displays an in-product explanation screen describing what the location is used for. Precise location data is never collected without this explicit permission.
Hiring Workflow Information
In connection with an application, JAYOBE collects and stores information generated during the hiring workflow: (i) messages exchanged between the Job Seeker and the Employer in the application's message thread; (ii) interview scheduling records created by the Employer, including date and time, format, location or meeting link, and private notes the Employer records in connection with the interview or the applicant; and (iii) post-offer requirement statuses recorded by the Employer after marking an application Hired, indicating whether items such as a background check, drug screen, I-9 verification, or reference check are pending or completed. JAYOBE stores only the status label the Employer assigns. JAYOBE does not perform, order, or procure background checks, drug screens, employment-eligibility verification, or reference checks; does not collect I-9 documentation; and does not receive or store the contents or results of any screening. Employer private notes are visible only to the Employer's account and are addressed in Section 10.
Note
Sensitive Information in Free-Text Fields. Free-text fields on the Platform — including resume uploads, free-text responses to application questions, and messages exchanged through the Platform — are not designed to solicit sensitive personal information, and Users are not required to provide any such information. If a User voluntarily discloses sensitive personal information (for example, information about race, ethnicity, religious beliefs, health conditions, sexual orientation, immigration status, or precise location) in a free-text field, that information is subject to the same handling, retention, and protections described in this Privacy Policy, and the User may exercise the Right to Limit the Use of Sensitive Personal Information described in Section 10.
4. How We Use Your Information
JAYOBE uses the information described in Sections 2 and 3 for the following purposes.
Operating the Platform
To provide, maintain, and improve the Platform and its features, including user authentication, account management, profile management, Listing creation and management, application submission and delivery, and communication between Employers and Job Seekers.
Filter-Based Job Discovery
To enable Job Seekers to discover Listings through location, job category, employment type, work arrangement, pay range, keyword, and other filters that the Job Seeker explicitly selects, and to order the Listings shown. JAYOBE may order results by how recently a Listing was posted, by relevance, and by a Job Seeker's activity on the Platform. Job Seekers may opt out of personalized ordering as described in Section 10. Job Seekers may order their own saved and applied Listings by criteria they select, including distance and pay. JAYOBE does not order organic results by payment, and does not score or rank Job Seekers for Employers. If JAYOBE introduces an ordering method not described here, this Policy will be updated before that method is used on the Platform.
Geographic Relevance
To surface Listings that are geographically relevant to a visitor — for example, Listings near the visitor's city — using the visitor's city as set in their profile or derived approximately from their IP address. This purpose uses coarse, city-level location. Where a Job Seeker grants precise location, its use is described in Section 5.
Featured Placement
Certain Listings and Employers may be presented in a section or with a label identifying them as Featured. As of the Effective Date, Featured placements are selected by JAYOBE and are not purchased. Featured placement adds a labelled presentation; it does not reorder, shorten, or remove organic results. As of the Effective Date, Featured selection does not use behavioral profiling or any information about the individual viewing the Platform. If JAYOBE offers Featured placement for purchase, the label will identify the placement as paid and this Policy will be updated before that occurs.
Payment Processing
To process Employer subscription payments, trial transitions, and any other payment transactions. Payment processing is performed by Stripe. JAYOBE uses information about subscription status, billing events, and payment outcomes to manage Employer accounts.
Transactional Communications
To send transactional emails through Resend, including account verification, trial confirmations, trial end reminders, payment receipts, payment failure notices, cancellation confirmations, application confirmations, and other operational messages related to your use of the Platform. Specific transactional emails generated by billing events are further described in Section 5 of the Billing Terms.
Map Display
To display Listing locations on the Platform's interactive map interface, which is rendered using Mapbox. Geocoded Listing coordinates and, where applicable, the Job Seeker's browser-granted location are used for this purpose as described in Section 5. For Job Seekers who grant precise location, the Platform also computes the distance between the Job Seeker's position and Listing locations on the Job Seeker's device, for display, as described in Section 5.
Platform Analytics
To analyze Platform usage through Vercel Analytics in order to understand how Users interact with the Platform and to improve performance, reliability, and features, subject to the User's cookie-banner preferences described in the Cookie & Tracking Policy. Vercel Analytics is not loaded unless the User has affirmatively enabled analytics in the Manage Preferences modal.
Platform Improvement
To diagnose and resolve technical issues, to improve existing features, and to develop new features based on aggregate usage patterns.
Security and Fraud Prevention
To detect, investigate, and prevent fraud, abuse, unauthorized access, and violations of the Terms of Service, the Acceptable Use Policy, and applicable law.
Legal Compliance
To comply with applicable law, to respond to lawful requests from authorities, and to protect JAYOBE's legal rights and those of its Users.
Marketing and Promotional Use of Content
As described in Section 5 of the Terms of Service, the license granted to JAYOBE in the Content Users submit includes the right to display Content on the Platform as part of its normal operation. Examples of normal Platform operation include: displaying Employer Listing content publicly on the Platform, displaying Listing content in search engine results pages and social media previews generated from public Listing pages, and including Employer logos in Platform-generated display contexts. Use of a User's name, username, profile photograph, voice, or likeness in JAYOBE marketing, advertising, testimonials, case studies, press materials, or similar promotional content requires the User's separate opt-in consent. JAYOBE does not use Job Seeker resume contents, applications, or non-public Content for marketing purposes and will not display a User's name or likeness in third-party-targeted advertising without the User's separate opt-in consent.
Tracking Signal Treatment
JAYOBE detects Global Privacy Control ("GPC") signals on incoming requests. Where a User's browser sends a GPC signal, JAYOBE treats that signal as an opt-out of the sale or sharing of personal information for cross-context behavioral advertising and as a request to keep Platform analytics off for the sending browser. Because JAYOBE does not sell personal information or share it for cross-context behavioral advertising, the GPC signal operates as a forward-looking opt-out. JAYOBE also detects Do Not Track signals; because JAYOBE does not use cross-site tracking cookies or advertising tools, JAYOBE's data handling does not change based on the presence or absence of a Do Not Track signal. Further details about GPC and Do Not Track are set forth in Sections 8 and 9 of the Cookie & Tracking Policy.
Important
No Biometric Information. JAYOBE does not collect biometric identifiers or biometric information as those terms are defined in the Illinois Biometric Information Privacy Act (740 ILCS 14 et seq.) or in any analogous state law. JAYOBE does not collect facial geometry, fingerprints, voiceprints, retina or iris scans, or scans of hand or face geometry. If JAYOBE ever introduces a Platform feature that would collect any such biometric information, JAYOBE will update this Privacy Policy and obtain any consent required by applicable law before collection.
Important
No Scoring or Ranking of Job Seekers for Employers. As of the Effective Date of this Privacy Policy, JAYOBE does not rank or sort applications on behalf of Employers. JAYOBE does not apply any algorithmic ranking, match score, similarity calculation, or relevance score to applications. Job discovery is filter-based: Job Seekers narrow Listings using filters they select, and JAYOBE orders the results as described in Section 4. Applications submitted to an Employer are presented to that Employer in the order submitted (chronological). JAYOBE will not adopt machine learning matching, behavioral scoring, algorithmic profiling, or application ranking without first updating this Privacy Policy to describe the new practice, providing notice to affected Users, and implementing any opt-out mechanism required by applicable law.
Employer Application Management Tools. Applications submitted to an Employer are presented to that Employer in the order submitted (chronological) by default. The Employer's application management interface provides organizational tools that allow the Employer to sort or filter the Employer's own view of received applications by submission date, by an application status the Employer has assigned, or by a Job Seeker's response to a structured application question that the Employer configured for that Listing. These controls are Employer-initiated organizational tools that operate on information Job Seekers have explicitly provided in response to questions presented during the application flow. JAYOBE does not apply matching, ranking, scoring, similarity calculation, or algorithmic profiling to applications, and does not make any hiring decision or recommendation. All applications submitted to a Listing remain visible to the Employer regardless of any sort or filter selection — no application is hidden, removed, or disqualified by JAYOBE based on a Job Seeker's response.
5. Geolocation Data
This section describes how JAYOBE handles precise geolocation data collected from Job Seekers. This treatment is distinct from the handling of Listing addresses (which are geocoded business addresses provided by Employers) and is subject to the specific protections described below.
Note
CCPA Sensitive Personal Information Disclosure. Precise geolocation is classified as sensitive personal information under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA). JAYOBE discloses this classification and treats precise geolocation accordingly. The purposes for which JAYOBE uses precise geolocation are described in this Section, and a Job Seeker may exercise the Right to Limit the Use of Sensitive Personal Information through the mechanism described in Section 10.
Nature of the Data
Precise geolocation is a category of personal information collected from Job Seekers only when the Job Seeker grants explicit permission to the Platform through their browser's native geolocation prompt. A Job Seeker who does not grant this permission will not have any precise location data collected.
Pre-Permission Explanation
Before the browser's native geolocation prompt is triggered, the Platform displays an in-product explanation screen describing the purpose for which location is used and confirming that the User may decline. A User who declines at the pre-permission screen is not presented with the browser's native prompt, and no precise location data is collected. The explanation states that, once granted, precise location is used on an ongoing basis while you use the Platform, and that you may turn it off at any time.
Purpose of Use
Precise geolocation is used to center the map on the Job Seeker's current position; to compute the distance between that position and Listing locations, including for display on the Job Seeker's device; to order and match Listings for the Job Seeker, including by proximity, as described in Section 4; to notify a Job Seeker who has enabled notifications about Listings near them; and to produce aggregate marketplace analytics that do not identify any individual. The Platform does not use precise location to infer any characteristic about the Job Seeker. The Platform does not share precise location with Employers.
Transmission to Mapbox
When a Job Seeker grants browser geolocation permission, the location coordinates are transmitted to Mapbox solely to render map tiles in the Job Seeker's browser. Mapbox's SDK may generate a browser-local identifier for its own operational purposes, as described in Section 4.3 of the Cookie & Tracking Policy. JAYOBE does not transmit any JAYOBE-generated identifier (such as account ID, email address, or internal user reference) to Mapbox along with coordinates. Coordinates and incidental HTTP metadata (such as the User's IP address and browser user-agent string, which Mapbox receives by virtue of the HTTP request) are handled by Mapbox under Mapbox's privacy policy and JAYOBE's data processing agreement with Mapbox.
Server-Side and Analytics Architecture
When a Job Seeker grants browser geolocation permission, location coordinates accompany the Job Seeker's session to JAYOBE's servers and are used for the purposes described in this Section. JAYOBE stores the Job Seeker's most recent location and a coarse location history at approximately city-block resolution.
Storage and Retention
JAYOBE retains the Job Seeker's most recent location until it is replaced by a newer one or the account is deleted, and retains coarse location history for twelve (12) months from collection, after which it is deleted or aggregated so that it no longer identifies any individual. JAYOBE also remembers your location-permission preference so that the pre-permission explanation is not shown again. You may turn precise location off at any time as described below, after which no new location data is collected.
User Control
You may turn precise location off at any time through the location setting in your Job Seeker profile or through your browser settings; either takes effect immediately, after which the map falls back to your city-level location.
Full Map Functionality Without Permission
The Platform's map interface remains fully functional without precise location permission. A Job Seeker who declines or revokes permission can manually navigate the map to any area of interest using standard map pan and zoom controls and can use all filter, search, and application features. Denying location permission does not restrict map access and does not force the Job Seeker into a list-only view.
6. How We Share Your Information
JAYOBE shares personal information only as described in this section.
Sharing with Employers Upon Active Application Submission
A Job Seeker's profile information and resume are shared with an Employer only upon the Job Seeker's active submission of an application to a specific Listing posted by that Employer. Where an Employer has authorized additional users on its account, the Employer's authorized users may access applications submitted to that Employer's Listings, subject to the access limits the Employer sets. Access by an authorized user is access by the Employer for purposes of this Policy, and the Employer remains responsible for it. Where a Listing is posted by a staffing agency, recruiter, or similar intermediary on behalf of a client business, the application is submitted to that intermediary, which is the Employer for purposes of this Policy, and the intermediary may provide the application to the client business for that client's hiring decision. The Listing identifies the intermediary and states which business is the hiring employer for the role. Where a Listing is designated client-confidential, the client's identity is provided to JAYOBE and is not displayed publicly; the intermediary is identified on the Listing in every case. As of the Effective Date, JAYOBE does not make Job Seeker profiles or resumes searchable or browsable by Employers, and profile and resume data reach an Employer only when a Job Seeker submits an application to that Employer's Listing. If JAYOBE introduces any feature that makes Job Seeker information available to Employers other than through an application the Job Seeker submits, JAYOBE will describe it in this Policy and provide the choices required by applicable law before that feature operates. An Employer receives Job Seeker data only for Job Seekers who have affirmatively applied to that Employer's Listing.
Public Display of Employer Listings
Listing content — including business name, Listing title, Listing description, Listing location, pay information, and other Listing fields — is displayed publicly on the Platform and may be indexed by search engines. Users should not post information in a Listing that they do not wish to be publicly accessible.
Directions to Listing Locations
When a Job Seeker requests directions to a Listing, the Platform opens the Job Seeker's device maps application with the Listing's business address as the destination. The Job Seeker's own device and maps application supply the Job Seeker's location for routing, under that application's own permissions and privacy policy. JAYOBE does not transmit the Job Seeker's location to the maps application and shares no Job Seeker personal information in connection with the request.
No Sale of Personal Information
Under the California Consumer Privacy Act and analogous state laws, "sale" is broadly defined to include the exchange of personal information for monetary or other valuable consideration. JAYOBE does not exchange personal information for monetary or other valuable consideration with any third party. JAYOBE does not share personal information with third parties for cross-context behavioral advertising. JAYOBE does not participate in any advertising network, retargeting system, or behavioral advertising ecosystem. Transfers of personal information to JAYOBE's data processors named in Section 7, for the sole purpose of each processor performing services on JAYOBE's behalf under a written data processing agreement, are not "sales" under applicable law. A "Do Not Sell or Share My Personal Information" mechanism is made available to California residents and to other Users as described in Section 10 and at jayobe.io/do-not-sell.
Third-Party Data Processors
JAYOBE shares personal information with a limited set of third-party data processors that provide infrastructure and operational services necessary to run the Platform. These processors are described in Section 7. Data is shared with these processors solely for Platform operation and only to the extent necessary for each processor to perform its specific function.
Legal Disclosures
JAYOBE may disclose personal information when required by applicable law, valid legal process, or to protect the rights, property, or safety of JAYOBE, its Users, or others. Where permitted by law, JAYOBE will provide reasonable notice of any such disclosure.
Business Transfers
In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, personal information may be transferred to the acquiring or successor entity as part of the transaction. Users will be notified of any such transfer and any resulting material change to this Privacy Policy. The acquiring or successor entity will be bound by the commitments in this Privacy Policy, including User opt-out selections recorded as of the transfer date, until and unless the Privacy Policy is amended in accordance with Section 14.
7. Third-Party Data Processors
Controller Designation. JAYOBE, Inc. is the controller of personal information processed through the Platform, as that term is used in applicable U.S. state comprehensive privacy laws. JAYOBE determines the purposes and means of processing the personal information described in this Privacy Policy. JAYOBE's designation as controller applies uniformly to all Users regardless of state of residence and satisfies the controller-designation requirement under the Rhode Island Data Transparency and Privacy Protection Act and any analogous requirement under other applicable U.S. state law.
JAYOBE uses the following third-party data processors to operate the Platform. Each processor operates under a data processing agreement (or equivalent contractual commitment) with JAYOBE that restricts the use of personal information to the purposes described in this Privacy Policy.
Provider
Purpose
Data Received
Stripe
Payment processing
Payment card data (never touches JAYOBE servers)
Supabase
Database, auth, file storage
All Platform data under DPA
Mapbox
Interactive map rendering
Listing coords, browser location (no account IDs)
Resend
Email delivery
Recipient email, message content
Vercel Analytics
Platform analytics (opt-in)
Aggregated page views, web vitals
Vercel (Hosting)
Front-end hosting
HTTP metadata in transit
Railway
Backend compute
API payloads in transit
HubSpot
CRM (Employer only)
Business name, rep name, email, plan tier
Google Voice
Business phone + SMS infrastructure
Call/SMS content + metadata for JAYOBE business number
Stripe, Inc. processes payment information for Employer subscriptions, trials, and any other payments. Stripe receives payment card data directly from the User through Stripe's own secure forms and processes payments on JAYOBE's behalf. JAYOBE does not store raw payment card data. Stripe's privacy policy is available at stripe.com/privacy.
Supabase, Inc. provides the database, authentication, and file storage infrastructure for the Platform. Supabase stores all Platform data on JAYOBE's behalf under a data processing agreement. This includes Employer accounts, Job Seeker accounts, profiles, Listings, applications, resume files (in a private storage bucket), and consent logs. Supabase's privacy policy is available at supabase.com/privacy.
Mapbox, Inc. provides the mapping technology used to render the Platform's interactive map interface. Mapbox receives Listing coordinates (derived from Listing addresses) in order to render map pins and, where a Job Seeker has granted browser geolocation permission, receives the Job Seeker's coordinates in order to render map tiles centered on the Job Seeker's position. Mapbox does not receive Job Seeker names, email addresses, account identifiers, or any other JAYOBE-generated identifier. Mapbox's SDK may generate a browser-local identifier for its own operational purposes, as described in Section 4.3 of the Cookie & Tracking Policy. Mapbox's privacy policy is available at mapbox.com/legal/privacy.
Resend, Inc. processes and delivers email communications sent by the Platform, including transactional emails such as account verification messages, trial reminders, payment receipts, application confirmations, and — where the recipient has opted in — commercial email messages. Resend receives the recipient's email address and the content of the email message. Resend's privacy policy is available at resend.com/legal/privacy-policy.
Vercel, Inc. provides analytics about Platform usage. Where a User has affirmatively enabled analytics through the Manage Preferences modal described in the Cookie & Tracking Policy, Vercel Analytics collects aggregated usage data such as page views, navigation patterns, web vitals performance metrics, browser type, and device category. Vercel Analytics is not loaded unless the User has affirmatively enabled it. Vercel's privacy policy is available at vercel.com/legal/privacy-policy.
Vercel, Inc. also provides front-end web hosting for the Platform. Vercel receives HTTP metadata (such as IP address, user-agent, request path, and timestamps) in the ordinary course of serving Platform pages, consistent with how any web host receives HTTP traffic. Vercel does not process Platform data for any purpose other than serving Platform requests on JAYOBE's behalf. This is a separate service from Vercel Analytics described above.
Railway Corp. provides backend compute and related infrastructure services used to operate the Platform's backend. Railway receives API payloads and HTTP metadata in transit as necessary for the Platform's backend operations, and does not process Platform data for any purpose other than providing its infrastructure services on JAYOBE's behalf. Railway's privacy policy is available at railway.com/legal/privacy.
HubSpot, Inc. provides customer relationship management infrastructure used by JAYOBE to manage Employer accounts, communications with Employer prospects and active customers, and related commercial operations. HubSpot receives Employer-associated personal information limited to the business name, authorized-representative name and business email address, business phone number, subscription plan tier, trial and billing status, and communications log. HubSpot does not receive Job Seeker personal information. HubSpot's privacy policy is available at hubspot.com/privacy-policy.
Google LLC provides, through Google Voice, the business telephone and SMS infrastructure used by JAYOBE. Where an Employer or Job Seeker places a voice call to or sends an SMS to JAYOBE's published business phone number, or where JAYOBE places an outbound call or sends an SMS to an Employer (as further described in Section 11 and in Section 5 of the Billing Terms), Google Voice processes the call or message content and associated metadata on JAYOBE's behalf. Google's privacy policy is available at policies.google.com/privacy.
Sub-Processors. Each named processor may use its own sub-processors (for example, cloud infrastructure providers) to deliver its services. These sub-processors operate under each processor's own data protection agreements and are not separately identified in this Privacy Policy. A current list of sub-processors for each processor is available through the privacy policy links above.
8. Data Retention
JAYOBE begins processing account-deletion requests on receipt and completes deletion of the User's personal information from the Platform's active systems within thirty (30) days. When a User requests deletion of their account, the Platform executes a synchronous cascading hard-delete across the Platform's database and requests deletion of the User's authentication record from the Platform's identity provider. Deletion is not conditioned on any further action by the User, and a deletion request is not reversible once the thirty-day period has run. Other categories of information described below are retained for the periods specified because of legal, tax, or fraud-prevention obligations, or because they reside on the systems of third-party service providers whose retention windows JAYOBE does not control.
Active Account Data
Account data is retained while the account is active.
Profile, Resume, Applications, and Preferences
Upon a User's request to delete their account, profile data, resume files, application records, saved jobs, preferences, and other personal information associated with the account are deleted from the Platform's active systems within thirty (30) days of the request. JAYOBE may retain anonymized or aggregated data derived from deleted personal information where such data can no longer be associated with any individual User.
Resume Files
Resume files in the Platform's private storage bucket are deleted together with the account's other personal information, within the same thirty (30) day period.
Payment Transaction Records
Payment transactions on the Platform are processed through a third-party payment processor. Payment transaction records are retained on the processor's systems for the retention period specified by the processor's own policies and applicable law (typically seven (7) years to comply with Internal Revenue Service recordkeeping requirements under 26 C.F.R. § 1.6001-1 and applicable state recordkeeping rules). JAYOBE does not control the payment processor's retention windows. Any payment-related records held on JAYOBE's own systems are deleted with the account.
Consent Logs
Records of consent events (acceptance of the Terms of Service, acceptance of this Privacy Policy, marketing opt-in selections, billing authorizations, cookie banner choices, and similar events) are retained for the longer of (i) the duration of the User's account plus seven (7) years, or (ii) the applicable statute of limitations for disputes arising under the consented-to agreement. Consent logs are append-only and are not affected by account deletion. The IP address captured at the time of the consent event is retained as part of the consent log for the same period.
Listing Enforcement Logs
Records of Listing moderation actions, enforcement decisions, and related internal logs are retained for seven (7) years for legal defense purposes and are not affected by account deletion.
Security and Fraud Logs
IP address logs and related security or fraud-monitoring records held on JAYOBE-controlled systems are retained for up to one (1) year and then purged.
Precise Geolocation
Retention of precise geolocation is described in Section 5.
Inactive Accounts
If an account has been inactive for 23 months, the User associated with that account will receive an email notice of pending deletion. If the account remains inactive for 24 months, the account and its associated personal information are deleted using the same immediate cascading hard-delete process described above.
Marketing Email Opt-In and Suppression Records
Records of marketing email opt-in and unsubscribe events are retained for three (3) years after the unsubscribe event on the Platform's email service provider's systems. The email suppression list itself is permanent, is maintained by the Platform's email service provider, and is not cleared by account deletion, reactivation, or any other Platform action.
Hiring Workflow Records
In-platform messages, interview records (including Employer private notes), and post-offer requirement statuses are retained as part of the application record and follow the application record's retention and deletion schedule, including the account-deletion cascade and the retention schedule applicable to closed Listings.
Notification Send Logs
Append-only logs of notification delivery attempts — recording the notification type, channel, timestamp, and delivery or suppression reason, without message content beyond template identifiers — are retained for four (4) years — matching the federal TCPA limitations period, the sharpest liability these logs defend against — for operational troubleshooting, billing-dispute evidence, and compliance demonstration, after which entries are deleted or anonymized.
Aggregated and De-Identified Information. JAYOBE may create aggregated or de-identified information from personal information, and may retain and use that information after the underlying personal information is deleted. Aggregated information relates to a group or category of Users with individual identities removed. De-identified information is information that cannot reasonably be used to infer information about, or be linked to, any individual User or household.
Where JAYOBE maintains de-identified information, JAYOBE: (a) takes reasonable measures to ensure the information cannot be associated with any individual User or household, including removing direct and indirect identifiers and retaining the information only at a level of generality that does not permit an individual to be singled out; (b) publicly commits, by this paragraph, to maintain and use such information only in de-identified form and not to attempt to re-identify it, except solely to test whether its de-identification process satisfies this paragraph; and (c) will contractually obligate any recipient of such information to comply with (a) and (b) before disclosing it. As of the Effective Date, JAYOBE does not disclose aggregated or de-identified information to any third party other than the service providers identified in this Policy acting on JAYOBE's behalf.
JAYOBE does not treat information as de-identified in order to avoid a request to know, delete, or correct personal information that remains linked or reasonably linkable to a User.
Third-Party Service Provider Retention. JAYOBE relies on third-party service providers for authentication, payment processing, transactional email, and hosting or content-delivery infrastructure. These providers may retain records of a User's interaction with the Platform after account deletion, subject to each provider's own retention policies and outside of JAYOBE's control. Specifically: (i) the Platform's database and identity providers may retain deleted records in their own routine operational backups for each provider's backup retention window, and such backups are not used to restore a deleted account; (ii) the Platform's payment processor retains transaction records on its systems for its own compliance and recordkeeping periods; (iii) the Platform's transactional email provider retains delivery logs and the email suppression list for its own operational periods; and (iv) request logs and edge-network logs at the Platform's hosting and CDN providers are retained per those providers' operational retention windows. Users seeking further information about any provider's retention practices may contact privacy@jayobe.io.
Legal Retention Exceptions. JAYOBE may retain personal information beyond the periods described above only to the extent retention is required by applicable law, necessary to exercise or defend legal claims, necessary to enforce agreements, or necessary to prevent imminent harm. Any such retention will be limited to the specific information required for the specific purpose and for no longer than the purpose requires.
9. Security
JAYOBE implements technical and organizational security measures appropriate to the volume and nature of the personal information it processes, including encryption at rest and in transit, role-based access controls, and periodic security reviews. JAYOBE has not yet obtained a SOC 2 Type I or Type II audit report as of the Effective Date of this Privacy Policy; JAYOBE will update this Privacy Policy if and when such a report is obtained.
JAYOBE limits employee and contractor access to personal information to individuals who require access to perform their job functions, and such access is logged and reviewed periodically.
Note
No method of transmission over the internet or electronic storage is one hundred percent secure. While JAYOBE takes reasonable measures to protect personal information, JAYOBE cannot guarantee absolute security.
Breach Notification
In the event of a security breach affecting your personal information, JAYOBE will notify affected Users in accordance with applicable law, including the Michigan Identity Theft Protection Act (MCL 445.61 et seq.) and analogous data breach notification laws of other U.S. states in which affected Users reside. Several state breach notification laws require notice to affected individuals within as little as thirty (30) days of discovery of the breach (including without limitation Colorado, Florida, Maine, Vermont, and Washington), and JAYOBE will meet the shortest applicable deadline applicable to each affected User's state of residence. Notifications will include a description of the breach, the categories of personal information affected, steps JAYOBE has taken in response, and contact information for further inquiry. Where applicable law requires additional notification to state attorneys general, credit reporting agencies, or public media, JAYOBE will provide such notifications as required.
10. Your Privacy Rights
Users have the following rights regarding their personal information. All requests to exercise these rights should be submitted to privacy@jayobe.io. JAYOBE will acknowledge receipt of a verified request within ten (10) business days as required under California Code of Regulations title 11 section 7021, and will substantively respond to the request within forty-five (45) days of receipt. JAYOBE may extend the response period once by an additional forty-five (45) days when reasonably necessary, provided the User is notified of the extension within the initial forty-five (45) day period and given the reason for the extension. JAYOBE may require reasonable verification of the requester's identity, proportional to the sensitivity of the information being requested, before fulfilling a privacy rights request. JAYOBE will not require the requester to create an account solely to submit a request, and will not require more identifying information than is reasonably necessary to verify identity.
Applicability. The rights described in this Section are extended to all Users regardless of state of residence. Residents of any U.S. state with a comprehensive consumer privacy law may exercise the rights that law provides through the same channels described in this Section.
Right to Know (Categories)
You may request disclosure of the categories of personal information JAYOBE has collected about you in the preceding twelve (12) months, the categories of sources from which the information was collected, the business or commercial purpose for collecting the information, and the categories of third parties with whom the information has been shared.
Right to Access (Specific Pieces)
You may request a copy of the specific pieces of personal information JAYOBE holds about you, covering the preceding twelve (12) months. Upon verified request, JAYOBE may provide information beyond the twelve-month period unless doing so proves impossible or would involve disproportionate effort.
Right to Deletion
You may request deletion of the personal information JAYOBE holds about you. Deletion requests are fulfilled in accordance with the retention schedule in Section 8. Certain categories of information — including payment transaction records, consent logs, enforcement logs, and information JAYOBE is legally required to retain — are not deleted under this right as permitted by applicable law.
Right to Correct
You may correct inaccurate personal information directly through your account settings for most editable fields. For information that is not editable through account settings, you may request correction by emailing privacy@jayobe.io.
Right to Opt Out of Sale or Sharing
JAYOBE does not sell personal information to any third party. JAYOBE does not share personal information for cross-context behavioral advertising. A "Do Not Sell or Share My Personal Information" mechanism is provided at jayobe.io/do-not-sell, reachable through the "Your Privacy Choices" link in the Platform footer. Submitting a request through that link or by contacting privacy@jayobe.io will confirm that your personal information has not been sold or shared for cross-context behavioral advertising and will log your opt-out preference. Your opt-out preference will be applied automatically to any future practice that would constitute a sale or share under applicable law, without the need for renewed action on your part.
Right to Limit the Use of Sensitive Personal Information
The category of sensitive personal information JAYOBE collects is precise geolocation, used only for the purposes described in Section 5. You may direct JAYOBE to limit the use of your precise geolocation at any time. You can do this through the location setting in your Job Seeker profile, which turns precise location off and returns the map to your city-level location, or by emailing privacy@jayobe.io. This right can also be reached through the "Your Privacy Choices" link in the Platform footer, which leads to the page where both this right and the opt-out right above can be exercised. If you voluntarily disclose other sensitive personal information in free-text fields as described in Section 3, you may exercise this right with respect to that information by emailing privacy@jayobe.io.
Employer Private Notes
Application and interview records may include private notes an Employer records about an applicant. In responding to a verified access or deletion request from a Job Seeker, JAYOBE will disclose the categories of hiring-workflow information collected and will provide or delete specific pieces of personal information as applicable law requires, subject to any exception applicable law provides for another party's internal notes and evaluations. Employer private notes are deleted on the schedules described in Section 8.
Right to Non-Discrimination
JAYOBE will not discriminate against any User for exercising any of the rights described in this Section 10. Exercising your privacy rights will not affect the availability, features, quality, or price of the Platform or the Services in any way not otherwise permitted by applicable law. JAYOBE does not currently offer any financial incentive in exchange for personal information; if JAYOBE introduces a financial incentive in the future, JAYOBE will describe that incentive and its terms in accordance with California Civil Code § 1798.125(b).
Authorized Agents
Users may designate an authorized agent to submit privacy rights requests on their behalf. JAYOBE may require the authorized agent to provide written authorization signed by the User or may independently verify the User's identity before fulfilling the request.
Data Minimization Statement. JAYOBE collects only the information necessary to provide the Platform's features and services. JAYOBE does not require demographic data (including race, ethnicity, and gender) at account creation. Categories of personal information collected by JAYOBE are described in Sections 2 and 3 of this Privacy Policy, and the purposes for which each category is used are described in Section 4 and Section 5.
10.1 California Residents (CCPA/CPRA)
California residents have the rights described above. In the preceding twelve (12) months, JAYOBE has collected the categories of personal information described in Sections 2 and 3, from the sources described in those Sections, for the purposes described in Section 4, and has disclosed personal information only to the data processors described in Section 7 and as otherwise described in Section 6. JAYOBE has not sold or shared personal information. California residents may exercise their rights through privacy@jayobe.io or through jayobe.io/do-not-sell.
10.2 Colorado Residents (CPA)
Colorado residents have the rights described above, including the right to opt out of processing for targeted advertising, the sale of personal data, and profiling in furtherance of decisions that produce legal or similarly significant effects. JAYOBE does not engage in targeted advertising and does not sell personal data. JAYOBE does not currently engage in profiling of Colorado residents in furtherance of decisions that produce legal or similarly significant effects. Colorado residents may exercise their rights through privacy@jayobe.io. Colorado residents may appeal a denial of a rights request by replying to JAYOBE's denial; if the appeal is denied, Colorado residents may contact the Colorado Attorney General at coag.gov/resources/colorado-privacy-act.
10.3 Other State Residents
Residents of Virginia (VCDPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), Oregon (OCPA), Montana (MTCDPA), Delaware (DPDPA), Iowa (ICDPA), Nebraska (NDPA), New Hampshire (NHDPA), New Jersey (NJDPA), Tennessee (TIPA), Minnesota (MNCDPA), Maryland (MODPA), Indiana (INCDPA), Kentucky (KCDPA), Rhode Island (RIDTPPA), and any other state with a comprehensive consumer privacy law have the rights afforded under their respective state laws, including (as applicable) rights to access, correct, delete, obtain a portable copy, and opt out of targeted advertising, sale of personal data, and certain forms of profiling. JAYOBE does not engage in targeted advertising, does not sell personal data, and does not currently engage in profiling of these Users in furtherance of decisions that produce legal or similarly significant effects. Residents may exercise their rights through privacy@jayobe.io. Where a state law provides an appeal mechanism or attorney general complaint process, JAYOBE will honor that process.
10.4 Michigan Residents
Michigan residents have all rights described above. Breach notifications to Michigan residents are governed by the Michigan Identity Theft Protection Act (MCL 445.61 et seq.) and the procedure described in Section 9.
10.5 Regulator Access
Nothing in this Privacy Policy, the Terms of Service, or any other JAYOBE document requires a User to arbitrate statutory privacy rights requests before raising them with JAYOBE directly, or before filing a complaint with a state Attorney General, the Federal Trade Commission, or any other regulator with jurisdiction over the matter.
10.6 Arbitration of Privacy Policy Disputes
Disputes arising under or relating to this Privacy Policy, other than statutory privacy rights requests and regulator complaints described in this Section 10 above, are resolved under the arbitration procedures set forth in Section 18 of the Terms of Service, subject to the carve-outs and opt-out right in that Section. The opt-out right includes a time-limited window after first acceptance of the Terms of Service for a User to opt out of arbitration by written notice to legal@jayobe.io, as set out in Section 18.8 of the Terms of Service. The governing law, venue, and class action waiver provisions in Sections 18 and 19 of the Terms of Service apply to this Privacy Policy.
10.7 Fees for Unfounded or Excessive Requests
In the limited cases permitted by CCPA Section 1798.145(g)(3) and analogous laws, JAYOBE may charge a reasonable fee or refuse to act on a request that is manifestly unfounded or excessive, and will provide written justification for any such decision.
11. Communications and Marketing
JAYOBE sends two categories of email communications to Users. JAYOBE also makes voice calls and sends SMS messages to Employers in limited operational circumstances described below.
Transactional Emails
Transactional emails include account verification, trial confirmation, trial end reminder, payment receipt, payment failure notice, cancellation confirmation, application confirmation, account inactivity warning, and other operational messages necessary to the operation of your account and your use of the Platform. Specific billing-related transactional emails are further described in Section 5 of the Billing Terms. Transactional emails are sent to all Users as necessary and do not include an unsubscribe link, because the content is required for the operation of the account. A User who does not wish to receive transactional emails may close their account. Transactional emails must contain only content that is strictly operational to the User's use of the Platform; an email that combines operational content with promotional content is treated as a commercial email under this Section 11.
Commercial and Marketing Emails
Commercial emails — including product update announcements, promotional offers, and newsletters — are sent only to Users who have explicitly opted in to receive them through the optional marketing email checkbox presented at account creation or through a separate opt-in mechanism for specific features. Every commercial email includes an unsubscribe link and JAYOBE's physical postal address in the footer, in accordance with the federal CAN-SPAM Act.
Job Alerts
Job alert email notifications are sent only to Job Seekers who have affirmatively opted in to job alerts through a separate job-alert opt-in mechanism on the Platform, which is distinct from the optional marketing email checkbox at account creation. Job alerts may be disabled at any time through job-alert settings or by clicking the unsubscribe link in any job alert email.
Unsubscribe
A User may unsubscribe from commercial email or job alerts at any time by clicking the unsubscribe link in any such email or by contacting privacy@jayobe.io. Unsubscribe requests are honored within ten business days of receipt, as required by the federal CAN-SPAM Act. Once a User unsubscribes, the User's email address is added to a permanent email suppression list and will not receive commercial email from JAYOBE unless the User affirmatively requests re-subscription.
Voice Calls and SMS to Employers
JAYOBE may contact Employers by voice call or SMS at the business phone number on file for operational purposes, including trial-end reminders, payment-failure notices, billing inquiries, and account-status communications. By providing a business phone number at Employer account creation, the authorized representative of the Employer consents to receive these calls and SMS messages from JAYOBE at that number, consistent with the Telephone Consumer Protection Act (47 U.S.C. § 227) and its implementing regulations. JAYOBE does not send marketing or promotional SMS to Employers; if JAYOBE introduces marketing SMS in the future, a separate affirmative opt-in will be obtained before any such message is sent.
Voice Calls and SMS to Job Seekers
JAYOBE may contact a Job Seeker by voice call or text message at a phone number the Job Seeker provides, about the Job Seeker's account and activity on the Platform — including verification codes the Job Seeker requests, the status of the Job Seeker's Applications, activity by an Employer relating to those Applications, and account and security notices. By providing a phone number, the Job Seeker confirms that they are the subscriber or customary user of that number and consents to receive these calls and messages at that number, which may be sent by automated means. Message frequency varies. Message and data rates may apply. JAYOBE does not send marketing or promotional text messages to a Job Seeker without the separate prior express written consent that applicable law requires for those messages. A Job Seeker may revoke consent at any time by replying STOP, QUIT, END, REVOKE, OPT OUT, CANCEL, or UNSUBSCRIBE to any message received, by updating communication preferences in the Job Seeker's account, or by emailing privacy@jayobe.io; JAYOBE honors revocation within ten (10) business days, consistent with 47 C.F.R. § 64.1200. Revoking consent does not prevent JAYOBE from sending a verification code the Job Seeker requests.
Revocation of SMS Consent
An Employer may revoke consent to receive SMS messages from JAYOBE at any time by replying STOP, QUIT, END, REVOKE, OPT OUT, CANCEL, or UNSUBSCRIBE to any SMS received, by updating communication preferences in the Employer's account dashboard, or by emailing privacy@jayobe.io with a request to stop SMS communications. JAYOBE will honor revocation of SMS consent within ten (10) business days of receipt, consistent with 47 C.F.R. § 64.1200. Revocation of SMS consent does not revoke any separate consent to receive transactional or account-related email communications, and does not affect the Employer's subscription, billing, or access to the Platform, but may affect the Employer's ability to receive time-sensitive payment-failure notices by SMS.
Note
Separation of Consent. The optional marketing email checkbox at account creation is presented as a separate, unbundled consent from the required Terms of Service and Privacy Policy acceptance checkbox. Marketing email consent is never bundled into required account creation consent. Job alert opt-in is likewise presented separately from both account creation consent and marketing email consent.
12. Children and Minimum Age
As set forth in Section 7A of the Terms of Service, the Platform is not available to persons under 16 years of age. The Terms of Service is the operative contractual source of the minimum-age term. This Section 12 describes JAYOBE's data-practices commitments with respect to minors.
JAYOBE does not knowingly collect personal information from any person under 16. At account creation, every individual Job Seeker User is required to acknowledge that they are at least 16 years of age. Businesses and organizations that register Employer accounts must do so through an authorized natural-person representative who is at least 18 years of age, as required by Section 8.3 of the Terms of Service.
If JAYOBE becomes aware that an account has been created by a person under 16, JAYOBE will terminate the account and delete all associated personal information. A parent or guardian who believes their child under 16 has created an account on the Platform may contact privacy@jayobe.io. JAYOBE will respond within two (2) business days to confirm receipt and initiate termination and deletion.
The federal Children's Online Privacy Protection Act ("COPPA"), 15 U.S.C. § 6501 et seq., applies only to online services directed to children under 13. The Platform is not directed to children. COPPA does not apply to the Platform.
Important
California Residents Ages 13–17. Under California Civil Code § 1798.120(c), personal information of California residents under 16 may be sold or shared for cross-context behavioral advertising only with affirmative opt-in consent (from the consumer if age 13–15, or from the consumer's parent or guardian if under 13). JAYOBE does not sell or share personal information for cross-context behavioral advertising, so this rule is not currently triggered. If JAYOBE's practices ever change, the affirmative-consent requirement of § 1798.120(c) will be operationalized before any such practice applies to any California resident under 18. JAYOBE will not seek opt-in consent from California residents under 16 for any sale or sharing practice.
13. U.S. Only
The Platform is intended for Users located in the United States only. JAYOBE offers the Platform and the Services to Users located anywhere in the fifty (50) United States, the District of Columbia, and United States territories. Users located outside the United States should not access or use the Platform, and JAYOBE does not target or market the Platform to Users located outside the United States.
JAYOBE does not target, market to, or direct its services to individuals located in the European Economic Area, the United Kingdom, Switzerland, or other non-U.S. jurisdictions. Where non-U.S. privacy law (including the EU General Data Protection Regulation) applies to JAYOBE by operation of mandatory law despite JAYOBE's U.S.-only focus, JAYOBE will honor the minimum requirements of that law with respect to the affected individuals. If JAYOBE's geographic scope changes in the future, this Privacy Policy will be updated before any international Users are accepted, and applicable foreign privacy law requirements will be addressed at that time.
14. Changes to This Policy
JAYOBE may update this Privacy Policy from time to time to reflect changes in JAYOBE's practices, changes in the Platform's features, or changes in applicable law. The "Last Updated" date at the top of this Privacy Policy reflects the date of the most recent update.
Non-material changes — such as corrections of typographical errors, clarifications that do not alter the categories of personal information collected, the purposes of use, the categories of recipients, or the rights of Users — take effect upon posting of the updated Privacy Policy to the Platform, with the Last Updated date revised accordingly.
Material changes — including any change that expands the categories of personal information collected, adds a new purpose of use, or discloses personal information to a new category of third party for that party's own purposes — will be communicated to affected Users by email to the address associated with their account, or by a prominent notice on the Platform, at least thirty (30) days before the change takes effect. The updated Privacy Policy will be posted to the Platform as of the effective date, and a notice of the change will be displayed prominently on the Platform for a reasonable period.
Note
Survival. The obligations described in Section 8 (Data Retention), Section 9 (Security and Breach Notification), and Section 10 (Your Privacy Rights) survive termination of a User's account to the extent necessary for JAYOBE to comply with applicable law and to fulfill outstanding privacy rights requests.
15. Contact Us
Questions, concerns, requests to exercise privacy rights, and other communications about this Privacy Policy or about JAYOBE's handling of personal information should be directed to:
JAYOBE, Inc.
Legal Notices and Service of Process (Registered Agent)
