Privacy Policy

1. Who this applies to

Joblay is a job board where candidates browse jobs without an account and recruiters create an account to post jobs. This policy covers both, and visitors who use our contact form.

2. What we collect

Candidates. We don't ask candidates to register or upload anything. We don't collect your name, resume or contact details. When you contact a recruiter, that happens directly between you and them by phone, WhatsApp or email — outside Joblay.

Recruiters. When you register we collect your name, email address, optional company name and a password (stored only as a secure one-way hash). For each job you post we store the job details, the contact details you choose to publish and any attachment you upload.

Contact form. Your name, email address and message.

Technical data. A strictly necessary session cookie keeps recruiters signed in. Our hosting provider may log standard request data such as IP address and browser type for security and reliability. We don't use advertising or tracking cookies.

3. How we use it

• To run recruiter accounts, including sign-in and password reset.
• To publish job listings, including the contact details recruiters choose to show.
• To send service emails, such as a welcome email or a password reset link.
• To respond to messages and review reports of suspicious listings.
• To keep the service secure and prevent abuse.

We don't sell personal data or use it for advertising.

4. Information recruiters publish

Contact details and attachments added to a job listing are public by design so candidates can reach the recruiter. Only publish details you are authorised to share. Deleting a listing removes it from the site.

5. Service providers

We use trusted providers to run Joblay: database and file storage (Supabase), email delivery (Google), bot protection on forms (Cloudflare Turnstile) and website hosting. If a recruiter uses the optional AI auto-fill, the job description they paste is sent to Google Gemini to extract the form fields. Providers process data only to provide their services to us. Data may be stored on servers outside India.

6. How long we keep data

Recruiter account data is kept while the account is active. Job listings are kept until the recruiter deletes them. Password reset links expire after 1 hour. Contact messages are kept only as long as needed to respond.

7. Your rights

Subject to applicable law, including India's Digital Personal Data Protection Act, 2023, you can ask to access, correct or delete your personal data, or withdraw consent. Recruiters can delete their listings from the dashboard at any time. For anything else, contact us and we'll respond within a reasonable time.

8. Security

Passwords are hashed, sessions use signed secure cookies, and the site is served over HTTPS. No method of transmission or storage is completely secure, but we work to protect your data.

9. Children

Joblay is not intended for anyone under 18.

10. Changes

We may update this policy. The date at the top shows when it last changed.

11. Contact

For privacy questions or requests, use our contact form.