Privacy Policy

Privacy at a Glance

We collect: Only necessary information

We protect: All data with standard security

We never sell: Your personal data

You control: Your information

1. Information We Collect

1.1 Information You Provide Directly

Account Information

• Full name and email address
• Phone number (optional)
• Password (hashed and secured)
• Profile photo (optional)

Professional Information

• Resume and CV documents
• Work experience and education
• Skills and certifications
• Job preferences and location

1.2 Information We Collect Automatically

Usage Data

Pages visited, time spent, search queries

Device Information

Browser type, operating system, IP address

Location Data

General location for job matching (with consent)

1.3 Information from Third Parties

Social media profile information (when you choose to connect accounts)
Professional networking sites (LinkedIn, etc.) - with your permission
Background check providers (for certain positions, with explicit consent)
Employer feedback and references (when provided)

2. How We Use Your Information

Core Services

• Matching you with relevant job opportunities
• Facilitating communication with employers
• Managing your job applications
• Providing personalized job recommendations

Platform Improvement

• Analyzing usage patterns to improve features
• Personalizing your experience
• Sending relevant notifications and updates
• Conducting user research and surveys

We Never Use Your Data For:

✗ Selling to third parties for profit

✗ Unrelated marketing campaigns

✗ Sharing without your consent

✗ Creating profiles for non-job purposes

3. How We Share Your Information

3.1 With Your Consent

Job Applications

When you apply for jobs, we share your profile and resume with the specific employers you choose.

Public Profile

Information you choose to make public in your profile can be viewed by employers and recruiters.

3.2 Service Providers

We work with trusted third-party service providers who help us operate our platform:

Cloud Hosting

Secure data storage and processing

Email Services

Sending notifications and communications

Analytics

Understanding platform usage (anonymized)

Payment Processing

Handling premium subscriptions securely

3.3 Legal Requirements

We may disclose information when required by law, such as:

Response to legal subpoenas or court orders
Protection of our rights and property
Prevention of fraud or illegal activities
Protection of user safety and security

4. Data Security and Protection

Our Security Commitment

We implement industry-standard security measures and Django's built-in security features to protect your personal information from unauthorized access, alteration, disclosure, or destruction.

Technical Safeguards

HTTPS/TLS encryption for all data transmission
Django's built-in password hashing (PBKDF2)
CSRF protection on all forms and requests
SQL injection prevention through Django ORM
XSS protection with automatic escaping
Secure session management

Administrative Safeguards

Limited staff access on need-to-know basis
Regular security updates and patches
Django-allauth for secure authentication
Secure file upload validation
Regular backup procedures
Security headers implementation

Django Security Features

Our platform leverages Django's comprehensive security framework:

CSRF Protection: Prevents cross-site request forgery attacks
SQL Injection Prevention: Through Django's ORM and parameterized queries
XSS Protection: Automatic HTML escaping in templates

Clickjacking Protection: X-Frame-Options header
Secure Headers: HSTS, Content-Type-Options
Session Security: Secure cookies and session protection

Data Breach Response

In the unlikely event of a data breach:

We will assess and contain the incident as quickly as possible
Affected users will be notified within 72 hours where required by law
We will provide clear information about what data was involved
Steps to protect yourself will be provided immediately
We will work with relevant authorities as required

5. Your Privacy Rights and Controls

Access

View and download all personal data we have about you

Correct

Update or correct inaccurate personal information

Delete

Request deletion of your personal data

Additional Rights

Portability: Export your data in a readable format
Restrict Processing: Limit how we use your data

Object: Opt out of certain data processing
Withdraw Consent: Revoke previously given permissions

How to Exercise Your Rights

You can exercise these rights through:

Your account settings and privacy dashboard
Contacting our privacy team at privacy@everydayvacancies.com
Using our online privacy request form

We will respond to your request within 30 days and verify your identity for security purposes.

6. Cookies and Tracking Technologies

Essential Cookies

Required for basic site functionality and security (CSRF tokens, sessions)

Analytics Cookies

Help us understand how you use our site (with consent)

Preference Cookies

Remember your settings and personalize experience

Cookie Control: You can manage cookie preferences through your browser settings or our cookie preference center.

Note: Disabling essential cookies may affect site functionality and security features.

7. Data Retention

Active Accounts

• Profile data: Retained while account is active
• Job applications: 7 years for legal compliance
• Messages: 3 years or until deleted by user
• Usage logs: 2 years for security purposes

Inactive/Deleted Accounts

• Personal data: Deleted within 90 days
• Anonymous analytics: May be retained
• Legal records: As required by law
• Backup systems: Purged within 12 months

8. International Data Transfers

If you access our service from outside our primary jurisdiction, your information may be transferred to and processed in countries with different privacy laws. We ensure adequate protection through:

Standard contractual clauses approved by relevant authorities
Adequacy decisions recognizing equivalent protection
Your explicit consent for specific transfers
Certification under recognized privacy frameworks

9. Children's Privacy

Age Requirement

Our service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete that information promptly.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes:

We will notify you via email and platform notification
The updated policy will be posted on our website
Material changes will include a 30-day notice period
Your continued use constitutes acceptance of changes