Privacy Policy

1. Information We Collect

1.1 Information You Provide Directly

• Account Information: When you register, we collect your name, email address, and password. For minors under 18, we also collect a parent or guardian's email address for parental consent purposes. For employers, we may also collect business name and contact information.
• Profile Information: Bio, profile picture, skills, work experience, education level, age group, location (city, state), and availability.
• Job-Related Information: Job postings (title, description, requirements, compensation), job proposals sent by employers to students, job applications, cover letters, and employment preferences.
• Communications: Messages exchanged with other users, support inquiries, and feedback you provide.
• Payment Information: When you make purchases (e.g., job boosts), payment is processed by third-party providers (Stripe). We do not store full credit card numbers.
• Identity Verification (DiDit): If you choose to verify your identity, we use DiDit, a third-party identity verification service. When you click "Get Verified," you will be redirected to DiDit's secure platform where they collect identification documents and biometric data (such as facial recognition data) to verify your identity. We receive only verification status (verified/not verified) and a session ID from DiDit. DiDit's privacy policy governs how they collect, process, and store your verification data. Biometric data is used solely for verification purposes and is deleted by DiDit within 30 days after verification is complete or denied. We do not store your identification documents or biometric data on our servers.
• Phone Number & SMS: Your mobile phone number, when you provide it at signup and consent to SMS notifications. We use it to send automated text-message notifications about your account and applications (matching jobs, application status updates, and testimonial requests) via our SMS provider, Twilio. Message frequency varies. Message and data rates may apply. We do not share your mobile number with any third party other than Twilio (our SMS provider), and we never sell your phone number. See the Terms of Service for SMS consent and opt-out details.

1.2 Information Collected Automatically

• Device Information: Device type, operating system, browser type, unique device identifiers.
• Usage Data: Pages visited, features used, search queries, time spent on the platform, click patterns.
• Location Data: Approximate location based on IP address. With your permission, we may collect precise location for job search features using Google Maps API. Your exact home address is never shared publicly or with employers until a job is officially accepted and confirmed by both parties. We use location data to show nearby job opportunities and calculate distances.
• Cookies and Similar Technologies: We use cookies, web beacons, and similar technologies to collect information about your browsing behavior.

1.3 Information from Third Parties

• Social Login: If you sign in through Google or other social providers, we receive basic profile information from those services.
• Referrals: If you were referred by another user, we may receive information about that referral.

2. How We Use Your Information

We use the information we collect to:

• Provide Our Services: Create and manage your account, display your profile to relevant users, process job applications, facilitate messaging between users.
• Match Jobs and Candidates: Recommend relevant job opportunities to students and suitable candidates to employers based on preferences, skills, and location.
• Improve Our Platform: Analyze usage patterns, conduct research, troubleshoot issues, and develop new features.
• Communications: Send you service-related notifications (application updates, messages), marketing communications (with your consent), and important platform updates. We use automated tools to scan in-app messages to detect and prevent fraud, requests for off-platform payments, inappropriate content, and other safety concerns to ensure a secure environment for all users, especially minors.
• Safety and Security: Detect and prevent fraud, abuse, and security incidents; enforce our Terms of Service; moderate content.
• Legal Compliance: Comply with applicable laws, regulations, and legal processes.
• Lawful Basis for Processing (EEA Users): For users in the European Economic Area, we process your personal data under the following lawful bases: (a) Contract performance — to provide the services you requested and fulfill our obligations to you; (b) Legitimate interests — for fraud prevention, platform security, abuse detection, and improving our services, where these interests are not overridden by your rights; (c) Consent — for marketing communications, optional features, and any processing not covered above. You may withdraw consent at any time without affecting the lawfulness of prior processing.

3. How We Share Your Information

3.1 With Other Users

• Public Profile: Your profile name, photo, bio, skills, and reviews are visible to other users.
• Job Applications: When you apply for a job, employers can see your profile and application details.
• Job Postings: Employer names and job details are visible to all users.
• Messages: Your messages are shared with the intended recipients.

3.2 With Service Providers

We share information with third-party vendors who help us operate our platform, including:

• Cloud hosting and data storage providers
• Payment processors: We use Stripe to process payments. When you make a payment, Stripe's privacy policy and terms of service apply to the collection and processing of your payment information.
• Identity verification: We use DiDit for identity verification services. When you choose to verify your identity, you are redirected to DiDit's platform where they collect and process your identification documents and biometric data according to their privacy policy. We receive only verification results (verified/not verified) and do not have access to the documents or biometric data you submit to DiDit.
• Location services: We use Google Maps API to provide location-based features. Google's privacy policy applies to location data processed through their services.
• Email and communication services
• Analytics providers
• Customer support tools
• SMS / text messaging: We use Twilio to deliver SMS notifications. Twilio receives your mobile phone number and the message content needed to send texts; Twilio's privacy policy applies to the data it processes. We do not share your mobile number with any other third party, and we never sell your phone number.

These service providers are contractually obligated to use your information only for the purposes of providing services to us and in accordance with applicable privacy laws.

3.3 For Legal Reasons

We may disclose information if required by law, subpoena, or court order, or if we believe disclosure is necessary to protect the rights, property, or safety of Jobee, our users, or others.

3.4 Business Transfers

If Jobee is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

3.5 We Do Not Sell Your Data

We do not sell your personal information to third parties for their marketing purposes.

4. Data Retention

We retain your information for as long as your account is active or as needed to provide you services. We may retain certain information after account deletion for legal compliance, dispute resolution, fraud prevention, or to enforce our agreements. Typically, account data is deleted within 90 days of account deletion, though some anonymized data may be retained for analytics purposes.

Post-Deletion Data: After account deletion, certain de-identified data (such as job reviews, aggregated statistics, and anonymized application data) may remain on the platform to maintain marketplace integrity and provide transparency to other users. This data cannot be traced back to you.

Biometric Data: Biometric data collected for identity verification is processed by our third-party verification provider, DiDit. We do not store biometric data on our servers. DiDit retains biometric data only for the duration necessary to complete verification (typically 24-72 hours) and permanently deletes it within 30 days after verification is completed or denied, in accordance with their privacy policy and applicable laws.

5. Your Rights and Choices

5.1 Account Information

You can access, update, or correct your profile information at any time through your account settings.

5.2 Account Deletion

You can delete your account through settings. Upon deletion, we will remove your personal information, though some data may be retained as described above.

5.3 Communication Preferences

You can opt out of marketing emails by clicking "unsubscribe" in any marketing email or adjusting your notification settings. You will still receive essential service-related communications.

You can opt out of SMS/text notifications at any time by replying "STOP" to any Jobee text message, toggling SMS notifications off in your account settings, or contacting us. Opting out does not affect your account or other notifications.

5.4 Cookies

Most browsers allow you to refuse or delete cookies. Note that disabling cookies may affect the functionality of our platform.

5.5 Location Data

You can disable location services in your device settings. This may limit certain features like distance-based job search.

5.6 California Residents (CCPA & CPRA)

California residents have additional rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), including:

• Right to Know: The categories of personal information we collect, the sources, the business purpose, and the third parties with whom we share it;
• Right to Delete: Request deletion of personal information we collected from you (subject to legal exceptions);
• Right to Correct: Request correction of inaccurate personal information;
• Right to Opt-Out of Sale or Sharing: We do not sell your personal information. We do not "share" your personal information for cross-context behavioral advertising as defined by the CPRA;
• Right to Limit Use of Sensitive Personal Information: We limit use of sensitive personal information (such as government ID data handled by our verification provider) to the purposes of providing our services;
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise any of these rights, contact us at contact@jobee.work. We will verify your identity before responding. Authorized agents may submit requests on your behalf with written authorization.

5.7 Canadian and Quebec Residents (PIPEDA & Law 25)

If you are in Canada, you have rights under the federal Personal Information Protection and Electronic Documents Act (PIPEDA), and if you are in Quebec, under An Act respecting the protection of personal information in the private sector (Quebec Law 25), including:

• Right of Access: Request access to the personal information we hold about you;
• Right to Rectification: Correct inaccurate personal information;
• Right to Withdraw Consent: Withdraw consent to the collection, use, or disclosure of your personal information (subject to legal and contractual limits);
• Right to Be Informed: Be informed of the use made of your personal information and the right to object to the disclosure of personal information to third parties or its use for purposes other than those for which it was collected;
• Automated Decision-Making: Quebec Law 25 grants rights regarding decisions based exclusively on automated processing — you may request information about the logic used and challenge such decisions.

To exercise these rights or for questions about how we handle personal information, contact us at contact@jobee.work. We will respond within the timeframe required by applicable law (generally within 30 days).

5.8 European Users

If you are in the European Economic Area, you have rights under GDPR including access, rectification, erasure, data portability, and the right to object to processing. Contact us at contact@jobee.work to exercise these rights.

6. Data Security

We implement industry-standard security measures to protect your information, including encryption in transit (TLS/SSL), secure data storage, access controls, and regular security assessments. However, no system is completely secure. You are responsible for keeping your password confidential and notifying us of any unauthorized account access.

7. Children's Privacy

Our platform is designed to serve users aged 14 and older. For users under 18, we require parental involvement in account creation and platform use. We take extra precautions to protect younger users:

• We do not knowingly collect information from children under 14
• Parental Consent Mechanism: Users under 18 must provide a parent or guardian's email address during registration. We send a consent notification to the parent requiring acknowledgment of our Terms of Service and Privacy Policy. The parent's email address is stored securely and used solely for consent verification and important safety notifications.
• We encourage parents to monitor their children's online activities
• We provide tools to limit profile visibility
• Our content moderation is designed with younger users in mind
• Enhanced Protection for Minors (Ages 14-17): Users aged 14-17 receive enhanced privacy protections, including limited profile visibility to unverified users, stricter content moderation standards, additional safety warnings, and enhanced monitoring of communications to detect inappropriate contact or requests.

If you believe a child under 14 has created an account, please contact us immediately at contact@jobee.work.

Quebec Young Workers (CNESST): For users and jobs located in Quebec, the minimum working age is 14 under the Act respecting labour standards, with limited exceptions for certain roles requiring the written consent of the holder of parental authority. The parent or guardian email we collect at registration supports this consent process. Employers are responsible for obtaining any required CNESST parental consent and respecting Quebec's young-worker schedule limits and protections. See CNESST — Young workers.

Massachusetts Young Workers: For users and jobs located in Massachusetts, minors under 18 require a youth employment work permit issued by the school district. The parent or guardian email we collect supports consent for users under 18, but employers are solely responsible for obtaining and keeping the work permit on file and complying with all Massachusetts and federal youth labor laws. See Mass.gov — Youth Employment.

California Young Workers: For users and jobs located in California, minors generally require a Permit to Employ and Work issued by the school district, and California imposes strict hour and hazardous-duty restrictions. The parent or guardian email we collect supports consent for users under 18, but employers are solely responsible for obtaining the permit and complying with all California Labor Code and federal child labor laws. See California DIR — Child Labor Law.

8. International & Cross-Border Data Transfers

Jobee operates in Canada (Montreal/Quebec) and the United States (Boston, MA and the San Francisco Bay Area, CA). Because our users span both countries, your personal information may be transferred to, stored in, or processed in countries other than your country of residence — including transfers between Canada and the United States. These countries may have different data protection laws.

By using our Service, you consent to such cross-border transfers. We implement appropriate safeguards for international transfers as required by law, including where applicable the recognition of equivalent protection mechanisms (for example, Canada's assessment that certain jurisdictions provide adequate protection under PIPEDA). Where an adequacy determination does not exist, we rely on your consent and/or contractual safeguards consistent with the requirements of Quebec Law 25, PIPEDA, and U.S. state privacy laws.

Quebec users can obtain information about the jurisdictions in which their personal information is held and the categories of persons who may access it by contacting us at contact@jobee.work.

9. Third-Party Links and Off-Platform Communications

Our platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies.

10. Google API Services

Jobee's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by posting the updated policy on this page with a new "Last updated" date. For significant changes, we may also send you an email notification. Your continued use of the platform after changes are posted constitutes acceptance of the updated policy.