Privacy Policy

Effective date: June 21, 2026

1. Who We Are

Jobpaq LLC (“Jobpaq,” “we,” “us,” or “our”) is a limited liability company incorporated in Washington State, United States. We operate the Jobpaq platform (the “Platform”), an online hiring marketplace that connects job seekers (“Candidates”) with companies looking to hire (“Employers”). For questions about this Privacy Policy or how we handle your personal information, contact us at legal@jobpaq.com.

2. What Data We Collect

We collect only what is necessary to operate the Platform. The categories below reflect what is actually collected.

  • Account data — your email address, used as your login identifier.
  • Passkey credentials — WebAuthn public-key credentials generated on your device and stored on our servers to authenticate future logins without a password.
  • Candidate profile data — your display name and any resumes you create (title and description).
  • Employer profile data — your organization name and description, and the name of any managers you add to your account.
  • Job postings and vacancies — job titles, locations, descriptions, compensation details, and posting status submitted by Employers.
  • Application data— when a Candidate applies to a posting, we associate the submitted resume with the posting and track the application's status.
  • Messages — text content and timestamps of in-platform messages exchanged between Candidates and Employers, as well as support ticket messages you send to us.
  • Notification preferences — your choices about receiving platform updates, news, application status alerts, and new posting alerts via email.
  • Billing contact data — the name and email address associated with your Employer billing profile, used for payment receipts and invoices.
  • Payment data — processed entirely by Stripe, Inc. We do not store your card number, CVV, or full card details. Stripe may share a payment reference token with us to confirm completed transactions.
  • Technical and diagnostic data — error events, stack traces, and basic device/browser context collected automatically by Sentry when you encounter an error on the Platform.
  • Session data — a session cookie stored in your browser to keep you logged in across page loads.
  • Feedback — any free-text feedback you voluntarily submit about an application, posting, or user interaction.

3. How We Collect It

  • Directly from you — when you create an account, build a resume or profile, apply to a posting, send a message, submit a support ticket, or adjust your notification preferences.
  • Automatically — a session cookie is set when you log in. If an error occurs, Sentry automatically captures diagnostic context from your browser session.
  • From third parties — Stripe sends us a transaction reference after you complete a payment. We receive no raw card data from Stripe.

4. Why We Use It

We use your data only for the purposes described below, each with a stated legal basis.

  • To provide the Platform (contract performance) — authenticating your account, displaying your profile and resumes, processing job applications, facilitating messaging, and managing payments.
  • To send transactional email notifications (contract performance) — one-time login codes, application status updates, new message alerts, and payment receipts.
  • To send platform news and updates by email (consent) — only when you have opted in via your notification preferences. You can withdraw consent at any time in your profile settings.
  • To monitor and fix errors (legitimate interest) — Sentry error data helps us identify and resolve bugs to keep the Platform stable and secure.
  • To handle support requests (contract performance / legitimate interest) — support ticket content is used to respond to and resolve your issue.
  • To comply with legal obligations — we may retain or disclose data where required by law, court order, or regulatory authority.
  • To prevent fraud and abuse (legitimate interest) — account activity may be reviewed to detect and prevent violations of our Terms of Service.

5. Who We Share It With

We do not sell your personal data. We share it only with the service providers listed below, strictly for the stated purpose.

  • Stripe, Inc.— payment processing. When you complete a purchase, you interact directly with Stripe's hosted checkout. Stripe's use of your data is governed by the Stripe Privacy Policy.
  • Sentry (Functional Software, Inc.)— error monitoring. Sentry receives error events and diagnostic context when exceptions occur on the Platform. Data is processed under Sentry's data processing agreement.
  • Platform participants — when a Candidate applies to a posting, their resume and name are visible to the Employer. Messages you send are visible to the recipient. This sharing is inherent to the purpose of the Platform.
  • Law enforcement or regulatory authorities — we may disclose personal data when required by law, valid legal process, or to protect the rights, property, or safety of Jobpaq, its users, or the public.
  • Business successors — in the event of a merger, acquisition, or sale of substantially all of our assets, your data may be transferred to the acquiring entity, subject to the same privacy commitments described here.

6. International Transfers

Jobpaq LLC is based in Washington State, United States. Our service providers (Stripe, Sentry) also operate in the United States and may process data on servers located there. If you access the Platform from outside the United States, your data will be transferred to and processed in the US. We rely on our service providers' own transfer mechanisms (such as Standard Contractual Clauses where applicable) to safeguard cross-border transfers.

7. Retention

  • Account and profile data — retained for as long as your account is active. When you close your account, your personal profile data is deleted immediately, except where retention is required by law or for legitimate business need (e.g., fraud prevention, financial records).
  • Messages and support tickets — retained for the duration of your account. After account closure, messages may be retained in anonymized form.
  • Payment records — Stripe retains payment data per its own policies. We retain transaction references for as long as required by tax and accounting obligations (typically 7 years in the US).
  • Error logs (Sentry)— retained for up to 90 days within Sentry's platform per its default retention settings.
  • Session cookies — expire at the end of your browser session or when you log out, whichever comes first.

8. Your Rights

Depending on where you live, you may have rights over your personal data. We honor the following rights for all users, regardless of jurisdiction:

  • Access — request a copy of the personal data we hold about you.
  • Rectification — update or correct inaccurate data directly in your profile settings, or by contacting us.
  • Deletion — request deletion of your account and personal data. Deletion is immediate except where retention is required by law.
  • Portability — request an export of your personal data in a structured, machine-readable format.
  • Objection / withdrawal of consent — opt out of marketing and news notifications at any time via your profile notification settings. You may also object to processing based on legitimate interests by contacting us.
  • California residents (CCPA/CPRA) — you have the right to know what categories of personal information we collect and disclose, the right to delete, the right to correct, and the right to opt out of the sale or sharing of personal information (we do not sell personal information). To submit a request, email legal@jobpaq.com.

To exercise any of these rights, contact us at legal@jobpaq.com. We will respond within 30 days. We may ask you to verify your identity before fulfilling a request.

9. Cookies and Tracking

We use a minimal set of cookies and do not use advertising or cross-site tracking technologies.

  • Session cookie (strictly necessary) — set when you log in to keep you authenticated across pages. This cookie is required for the Platform to function and cannot be disabled while using the service.
  • Sentry SDK (functional) — the Sentry client library may set identifiers in browser storage to correlate error events from the same session. This data is used solely for error diagnostics and is not used for advertising.

You can control cookies through your browser settings. Blocking the session cookie will prevent you from logging in.

10. Children's Privacy

The Platform is intended for users who are at least 18 years old. We do not knowingly collect personal information from anyone under 18. If you believe a minor has created an account, please contact us at legal@jobpaq.com and we will delete the account promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email to the address associated with your account at least 14 days before the changes take effect. The updated policy will be posted on this page with a new effective date. Continued use of the Platform after changes take effect constitutes acceptance of the revised policy.

12. Contact

If you have questions about this Privacy Policy, want to exercise your data rights, or have a concern about how we handle your information, contact us at legal@jobpaq.com.