1. Introduction

[SITE NAME] ("we," "us," "our," or "the Platform") operates a job board connecting job seekers and employers in Saint Lucia. This Privacy Policy explains what personal data we collect, why we collect it, how it is used, who it may be shared with, and the rights you have over your own data. By creating an account or otherwise using the Platform, you agree to the practices described in this policy.

If you do not agree with this policy, please do not use the Platform. We may update this policy from time to time; see Section 13 for how we communicate changes.

2. Information We Collect

2.1 Information you provide directly

For all users:

• Full name and email address
• Password (stored as a salted, irreversible hash - we never store or have access to your plaintext password)
• Account role (job seeker or employer)

If you sign up using Google:

• Your name, email address, and profile photo as provided by Google, in accordance with the permissions you grant during sign-in

If you are a job seeker, additionally:

• Resume, cover letter, portfolio links, and any other documents you upload
• Answers you provide to employer-specific application questions
• Phone number and LinkedIn/portfolio URLs, if provided
• Saved jobs, followed companies, and notification preferences
• Messages exchanged with employers through the Platform's messaging feature

If you are an employer, additionally:

• Company name, description, industry, location, website, and logo
• Job postings, job templates, and email templates you create
• Internal notes you record on individual applicants
• Billing and payment information necessary to purchase job postings, processed by our third-party payment processor (see Section 5)

2.2 Information collected automatically

• IP address, browser type, and device/operating system information
• Pages visited, search filters used, and general usage patterns, used to operate and improve the Platform
• Authentication session data, including session timestamps used to enforce automatic session timeout for your security
• Cookies and similar technologies (see Section 8)

3. How We Use Your Information

We use the information we collect to:

• Create and maintain your account, and verify your identity (including email confirmation upon sign-up)
• Allow job seekers to apply to jobs and employers to manage applications, hiring stages, and communications
• Deliver in-app and email notifications you have opted into (e.g. application status updates, new messages, jobs from companies you follow)
• Enable direct messaging between employers and applicants regarding a specific job application
• Process payments for job postings and related employer features, where applicable
• Maintain the security of your account, including detecting suspicious activity and enforcing inactivity-based session timeouts
• Improve, troubleshoot, and develop new features for the Platform
• Comply with applicable law and respond to lawful requests from public authorities

4. How We Share Your Information

We share personal data only in the following circumstances:

• With employers: When you apply to a job, your name, contact details, resume, and any other application materials are shared with the employer who posted that job.
• With job seekers: If an employer messages you regarding your application, your company name and the content of the message you receive are visible to you as the applicant. Employers do not see job seekers' contact details beyond what was submitted with the relevant application.
• With service providers: We use third-party providers to operate the Platform, including:
  • Supabase, for database hosting, authentication, and file storage
  • Our transactional email provider, for sending account, application, and notification emails
  • Our payment processor, for handling employer payments (we do not store full payment card details ourselves)
  • Google, where you choose to sign in or sign up using a Google account
• For legal reasons: If required to comply with a legal obligation, enforce our Terms of Service, or protect the rights, property, or safety of our users or the public.
• Business transfers: If the Platform is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to this Privacy Policy.

We do not sell your personal information to third parties, and we do not share your data with advertisers.

5. Payment Information

Where the Platform charges employers for job postings or related features, payments are processed by a third-party payment processor. We do not store your full card number, CVV, or other sensitive payment credentials on our own servers. The payment processor's use of your information is governed by their own privacy policy, which we encourage you to review.

6. Data Retention

We retain personal data for as long as your account remains active, and for a reasonable period afterward to comply with legal, accounting, or reporting obligations, resolve disputes, and enforce our agreements. Specifically:

• Account and profile data is retained until you delete your account.
• Job applications and related messages are retained for the duration of the relevant hiring process and for a limited period afterward, after which they may be anonymized or deleted.
• You may request deletion of your account and associated personal data at any time (see Section 7).

7. Your Rights

Depending on your location, you may have some or all of the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that we correct inaccurate or incomplete information.
• Deletion: Request that we delete your account and associated personal data, subject to any legal retention obligations.
• Portability: Request your data in a structured, commonly used format.
• Objection / opt-out: Opt out of non-essential notifications and communications via your account settings.
• Withdraw consent: Where processing is based on consent (e.g. optional notification preferences), withdraw that consent at any time.

To exercise any of these rights, contact us using the details in Section 12. We will respond within a reasonable timeframe and in accordance with applicable law.

8. Cookies and Similar Technologies

We use cookies and similar local storage technologies to:

• Keep you signed in and maintain your session
• Remember your sign-in email if you select "Remember me"
• Understand how the Platform is used so we can improve it

We do not currently use third-party advertising or cross-site tracking cookies. You can control or disable cookies through your browser settings; note that disabling essential cookies may prevent you from signing in or using core features of the Platform.

9. Data Security

We implement technical and organizational measures designed to protect your personal data, including encrypted password storage, database-level access controls (Row Level Security) restricting which users can view which data, and automatic session timeout after a period of inactivity. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

10. Children's Privacy

The Platform is intended for users who are at least 16 years of age, or the applicable legal working age in their jurisdiction if higher. We do not knowingly collect personal data from children below this age. If we become aware that we have inadvertently collected such data, we will take steps to delete it.

11. International Data Transfers

Our service providers, including our database and hosting infrastructure, may store and process data in countries other than Saint Lucia. Where this occurs, we take steps to ensure your data continues to be protected in a manner consistent with this Privacy Policy.

12. Contact Us

If you have questions about this Privacy Policy, or wish to exercise any of the rights described above, please contact us at:

Email: [INSERT PRIVACY EMAIL]
Address: [INSERT BUSINESS ADDRESS], Saint Lucia

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will update the "Last updated" date at the top of this page, and for material changes, we will provide additional notice, such as a notice on the Platform or an email to registered users, before the changes take effect.