Privacy Policy

This Privacy Policy explains how Jobnex ("we," "us"), a platform operated by its founder as a sole proprietorship based in British Columbia, Canada, collects, uses, discloses, and protects personal information when you use jobnex.net (the "Platform"). It applies to both individual users (job seekers) and Business users (employers and their team members), and it forms part of our Individual User Terms of Service and Business Terms of Service.

Our approach in one sentence: we collect what we need to run a resume-matching platform, we do not sell your personal information, and the third parties who receive your data are service providers working for us — with one important exception you already expect: if you are a job seeker with a visible profile, subscribing employers can see it. The table below is a plain-language summary; the rest of this policy is the detail.

Account information — name, email address, password (stored only as a cryptographic hash), and account type.

Resume & profile content — for individuals: your resume file and the information in it, profile details (work history, education, skills, location, desired roles), availability status, and any information you add or edit. Resumes may contain sensitive details; upload only what you are comfortable sharing with employers.

Business content — for Business users: company name, job postings (role descriptions, requirements, location, compensation details), organizational tags, team member invitations (names and emails), and internal notes about candidates.

Communications — messages, consent responses, support requests, and reports you submit.

Usage data — pages viewed, features used, clicks, and session information, collected via Google Analytics using cookies and similar technologies.

Device data — IP address, browser type, device type, and operating system.

Approximate location & language — we may derive your approximate location and default language from your IP address to localize the Platform. You can change your language at any time in your settings, which overrides the inference.

Bot protection — Cloudflare Turnstile processes limited technical signals at signup to distinguish humans from bots.

AI-generated data — parsed, structured versions of your resume; numerical representations (embeddings) used for matching; AI-written candidate summaries; and match scores between profiles and job postings.

Translations — machine translations of profile and posting content for display in other languages.

Payments are collected and processed by Polar as merchant of record. Polar collects your billing details and payment method directly under its own privacy policy; Jobnex receives only transaction metadata (such as plan purchased, amount, and status) and never receives or stores full payment card numbers.

We do not knowingly collect government identifiers (such as SINs or SSNs), health information, or biometric data, and we ask that you do not include such information in your resume. We do not collect precise GPS location. Individual accounts require no payment information at all.

to operate the Platform: create and manage accounts, host profiles and postings, and provide core functionality;

to perform AI matching: parse resumes, generate embeddings, score and rank candidates against postings, and produce candidate summaries shown to employers;

to facilitate contact between employers and candidates, including consent requests and the sharing of contact details after a candidate accepts;

to translate content for display across supported languages;

to communicate with you: transactional and service emails (verification, security notices, contact requests, activity confirmations) and, with your consent, marketing emails (see Section 7);

to keep the candidate pool current, including periodic activity checks and automatic deactivation of unresponsive profiles;

to protect the Platform: prevent fraud, abuse, spam, and unauthorized access, and enforce our terms;

to understand and improve the Platform using aggregated analytics; and

to comply with legal obligations.

We do not use your resume or profile content to train foundation AI models, and we do not permit our AI service providers to do so under the API terms we use. Our AI providers process your data only to provide the requested API services to us, under contractual restrictions that limit their use of it and prohibit using it for their own purposes.

We do not sell personal information, and we do not share it with third parties for their own advertising. We share personal information only as follows:

If you are a job seeker with a visible profile, subscribing employers can view your profile, resume, AI-generated summary, and match scores against their postings. Your direct contact details are shared with a specific employer only through the Platform's contact/consent flow. Employers are contractually required to use candidate data solely for genuine hiring purposes and to comply with privacy and anti-spam laws; however, once an employer has lawfully accessed your information, we cannot fully control their conduct. Setting your profile to private removes it from employer results.

Relevant business information (such as your company name and role details) is shown to candidates in postings and contact requests.

We use third parties to run the Platform. They process personal information on our behalf, under contracts limiting their use of it to providing services to us:

Analytics — Google Analytics: usage, device, and identifier data for analytics.

AI processing — Anthropic and OpenAI: resume and posting content processed via API for parsing, matching, embeddings, and summaries.

Translation — machine translation providers processing profile and posting content for display in other languages.

Hosting & storage — cloud hosting, storage, and database providers in Canada and the United States (including AWS).

Email delivery — email delivery providers (Microsoft 365) for transactional and service email.

Payments — Polar, as merchant of record, for Business payments.

Security — Cloudflare, for bot protection and security.

We may disclose personal information where required by law, subpoena, or court order; to enforce our terms; or to protect the rights, safety, or property of Jobnex, our users, or the public. Where legally permitted, we will tell you before disclosing your information in response to a legal demand.

If Jobnex incorporates, is reorganized, or is acquired, personal information may be transferred to the successor entity under the same protections as this policy. We will notify you of any such transfer.

We use a small number of cookies and similar technologies:

Essential cookies & local storage — used to keep you signed in and to remember preferences such as language and interface settings (some preferences are stored in your browser's local storage). These are necessary for the Platform to function.

Analytics cookies — Google Analytics sets cookies and collects usage data (including your IP address and online identifiers) so we can understand how the Platform is used. Under some privacy laws, this can be considered a "share" of personal information for cross-context purposes.

We do not use advertising cookies and do not run third-party ad trackers. You can control analytics in the following ways: use the cookie preferences control on the Platform (where available) to decline analytics; enable Global Privacy Control (GPC) in your browser, which we treat as an opt-out of analytics sharing where required by law; use Google's Analytics opt-out browser add-on; or block cookies in your browser settings (essential features may still require local storage). We honour GPC signals as a valid opt-out under the CCPA/CPRA.

We send transactional and service emails needed to operate your account (verification, security, contact and consent requests, activity checks, terms updates). Marketing email is sent only with your consent, consistent with CASL and CAN-SPAM; every marketing message identifies us and contains a working unsubscribe link, and unsubscribes are honoured promptly. We do not sell or rent email addresses and do not send email on behalf of third parties.

Account & profile data — retained while your account exists. If you delete your account, we delete or anonymize your personal data within 30 days, except where longer retention is required by law or for fraud prevention, backup integrity, or dispute resolution — and then only as long as necessary.

Inactive profiles — profiles deactivated for inactivity are hidden from employers but not deleted; you can reactivate by logging in, or delete your account entirely at any time.

Derived data — cached translations and embeddings derived from deleted content are deleted or become unlinkable to you within the same 30-day window.

Payment records — transaction records may be retained longer where required by tax and accounting law.

Analytics — analytics data is retained per our Google Analytics retention settings and is not used to re-identify you.

Jobnex is operated from Canada, but our service providers store and process data in the United States and may do so in other jurisdictions. When your personal information is processed outside your province or country, it is subject to the laws of those jurisdictions, and government authorities there may have lawful access to it. We use providers that offer contractual privacy commitments and, where required (for example, for individuals in the EEA or UK), transfers are protected by appropriate safeguards such as standard contractual clauses or an adequacy framework.

We use reasonable technical and organizational measures to protect personal information, including encryption in transit (TLS), hashed passwords, parameterized database access, access controls, and bot protection on signup. As the Platform matures, our security program also includes measures such as regular data backups, restricted administrative access, and monitoring and logging of significant account and system activity, which we continue to develop and strengthen over time.

No system is perfectly secure, and we cannot guarantee absolute security. If a breach of security safeguards creates a real risk of significant harm to you, we will notify you and the relevant regulator as required by applicable law (including PIPEDA's breach notification requirements).

Regardless of where you live, you can: access the personal information we hold about you; correct inaccurate profile information (mostly directly in your dashboard); delete your account and data; export your data in a portable format; and withdraw consent where processing is based on consent. Contact privacy@jobnex.net; we respond within the timelines required by applicable law and may need to verify your identity first. We will not discriminate against you for exercising your rights.

We collect, use, and disclose personal information with consent and for purposes a reasonable person would consider appropriate. You may request access to your information and an account of how it has been used and disclosed, challenge its accuracy, and withdraw consent (which may limit our ability to provide the service). You may also complain to the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner for British Columbia.

If you are in the EEA or UK, our legal bases for processing are: performance of a contract (operating your account and providing matching); consent (marketing email, analytics cookies where required, and profile visibility to employers); and legitimate interests (security, fraud prevention, and service improvement, balanced against your rights). You additionally have the rights to object to processing based on legitimate interests, to restrict processing, to data portability, not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects (see Section 12), and to lodge a complaint with your local supervisory authority.

If you are a California resident: we do not sell personal information for money. Our use of Google Analytics may constitute "sharing" of identifiers and internet activity for cross-context behavioural purposes as defined by the CCPA/CPRA; you may opt out via the cookie controls or a GPC signal as described in Section 6. In the preceding 12 months we have collected the categories of personal information listed in Section 2 (identifiers, professional and employment-related information, internet activity, approximate geolocation, and inferences in the form of match scores) for the purposes in Section 4, disclosed to the recipients in Section 5. You have the rights to know, access, correct, delete, opt out of sale/sharing, limit use of sensitive personal information (we do not use sensitive information beyond what is necessary to provide the service), and non-discrimination. You may designate an authorized agent to act for you.

Residents of other jurisdictions with privacy laws (such as Virginia, Colorado, Connecticut, and Quebec under Law 25) may have similar rights of access, correction, deletion, portability, and opt-out. We honour such requests as required by the law that applies to you; contact privacy@jobnex.net.

AI generates match scores and candidate summaries, but the Platform does not make hiring decisions. Match scores rank and surface candidates to employers; employers decide whom to contact, interview, and hire, and are contractually required to apply human review before decisions that adversely affect a candidate. If you believe an AI-generated summary or score materially misrepresents you, contact privacy@jobnex.net and we will review it, correct the underlying data where possible, and regenerate the output.

The Platform is intended for adults. You must be at least 18 years old to create an account, and we do not knowingly collect personal information from anyone under 18. If we learn that we have, we will delete it.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or in-platform notice before they take effect and update the effective date above. If a change materially expands how we use personal information already collected, we will seek consent where required by law.

Privacy questions, requests, or complaints:

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada (priv.gc.ca) or your local privacy regulator.