Privacy Policy

Your Privacy is Our Priority

Real Jobs, Real People ("we," "our," or "us") is committed to protecting your personal information and being transparent about how we collect, use, and store it. This Privacy Policy explains our practices regarding your data.

1. Data Collection
2. How We Use Your Data
3. Data Storage and Security
4. Data Retention
5. Data Sharing and Third Parties
6. Cookies and Tracking
7. Your Rights
8. Contact Us

We collect information that you provide directly to us and information collected automatically when you use our service.

Information You Provide

Account Registration:

• Name (first and last)
• Email address
• Username and password
• Phone number (optional, for verification)

For Job Seekers:

• Resume/CV files (PDF, DOC, DOCX formats)
• Skills and work experience
• LinkedIn profile URL (optional)
• Cover letters for job applications
• Location and desired job title
• Professional bio/summary

For Employers:

• Company name and description
• Company logo (image file)
• Company website and LinkedIn page
• Job posting content (titles, descriptions, requirements)

For Recruiters:

• Agency/company name
• LinkedIn profile URL (required for verification)
• Agency website

Information from Third-Party Services

When you sign in using Google OAuth, we receive:

• Your Google account email address
• Your name (as set in your Google account)
• Your Google account ID (for authentication purposes only)

We do not access your Google contacts, calendar, or any other Google services data.

Automatically Collected Information

• IP address
• Browser type and version
• Pages visited and time spent on pages
• Referring website
• Device information

We use the information we collect for the following purposes:

Account and Service Operations

• Create and manage your user account
• Authenticate your identity when you log in
• Process job applications and connect job seekers with employers
• Enable employers to post and manage job listings
• Facilitate communication between applicants and employers

Verification and Security

• Verify your phone number via SMS (using Twilio)
• Verify your email address
• Provide two-factor authentication for account security
• Prevent fraud and protect against unauthorized access
• Verify employer legitimacy to reduce ghost job postings

Communications

• Send application status updates
• Notify you about job matches (if opted in)
• Send account-related notifications
• Respond to your inquiries and support requests

Service Improvement

• Analyze usage patterns to improve our platform
• Develop new features and services
• Monitor and improve platform performance

Where Your Data is Stored

• Database: Your account information and application data are stored in a PostgreSQL database hosted on Render (cloud infrastructure located in the United States)
• File Storage: Uploaded files (resumes, company logos) are stored on Cloudinary's secure cloud storage
• Session Data: Temporary session information is stored server-side with encrypted session cookies

Security Measures

• Password Encryption: All passwords are hashed using industry-standard algorithms (never stored in plain text)
• HTTPS/TLS Encryption: All data transmitted between your browser and our servers is encrypted
• Secure Sessions: Sessions expire after inactivity; secure and HTTP-only cookies are used
• Access Controls: Employers can only view applications for their own job postings
• CSRF Protection: All forms are protected against cross-site request forgery attacks
• Rate Limiting: Login and signup forms are rate-limited to prevent brute force attacks

We retain your data for different periods depending on the type of information:

Data Type	Retention Period
Account Information	Until you delete your account
Job Applications	Until you delete your account or 2 years after application, whichever is longer
Job Postings	Until deleted by employer or 1 year after expiration
Uploaded Files (Resumes)	Until you delete them or delete your account
Verification Codes	10 minutes (automatically deleted after use or expiration)
Server Logs	30 days

Account Deletion: When you delete your account, we permanently remove your personal information within 30 days. Some anonymized data may be retained for analytics purposes.

When We Share Your Information

• Job Applications: When you apply for a job, your application (including resume and cover letter) is shared with that specific employer only
• Recruiter Access: If you opt in to allow recruiter contact, verified recruiters can view your profile
• Legal Requirements: When required by law, court order, or government request
• With Your Consent: When you explicitly authorize us to share your information

Third-Party Service Providers

We use the following third-party services to operate our platform:

Service	Purpose	Data Shared
Google OAuth	Account authentication	Email, name (received from Google)
Twilio	SMS verification and 2FA	Phone number, verification codes
Cloudinary	File storage (resumes, logos)	Uploaded files
Render	Web hosting and database	All platform data (encrypted)
Cloudflare	Security (Turnstile CAPTCHA)	IP address, browser information
Hostinger	Email delivery	Email addresses, notification content

What We Never Do

• Sell your personal data to third parties
• Share your information with advertisers or marketers
• Make your email address publicly visible
• Share your applications with employers you did not apply to

Cookies We Use

Cookie	Type	Purpose
sessionid	Essential	Maintains your login session
csrftoken	Essential	Protects against cross-site request forgery
messages	Functional	Displays success/error messages

We do not use advertising cookies or third-party tracking cookies. We do not track your activity across other websites.

You have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Update or correct inaccurate information in your profile
• Deletion: Request deletion of your account and all associated data
• Portability: Request your data in a portable format
• Opt-out: Unsubscribe from email notifications at any time
• Withdraw Consent: Revoke consent for optional data processing (e.g., recruiter contact)

To exercise any of these rights, please contact us at privacy@realjobsrealpeople.net or access your account settings.

If you have any questions about this Privacy Policy or our data practices, please contact us:

• Email: privacy@realjobsrealpeople.net
• Website: Contact Form

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.