Privacy Policy
From employers (when you post a Listing): your name, company name, billing email, billing details processed by Stripe (we don’t store credit card numbers), and the content of your Listing.
We try to collect as little personal data as possible. The short version: employers give us enough to bill them and run their Listing. Candidates give us enough to apply for a job. We don’t sell anything, we don’t build profiles, and we delete application data immediately after forwarding it to the employer. The longer version is below.
Information we collect
From employers (when you post a Listing): your name, company name, billing email, billing details processed by Stripe (we don’t store card numbers), and the content of your Listing.
From candidates (when you apply via our form): your name, email address, phone number (optional), LinkedIn URL (optional), portfolio URL (optional), years of experience (optional), US work authorization status (optional), your resume (PDF), and any cover-note message you submit.
From everyone (passive): standard server logs (IP address, browser type, referring URL, timestamps) used for operational, security, and abuse-prevention purposes. We use Cloudflare Turnstile for bot protection, which receives limited browser fingerprint data per Cloudflare’s privacy policy.
How we use it
We use employer information to deliver your paid Listing, send you confirmation and renewal emails, process payments via Stripe, and provide customer support. We use candidate application data exclusively to forward your application to the employer who posted the Listing. We use server logs to operate, secure, and improve the Service.
What we do not do
We do not sell personal data. We do not build candidate profiles. We do not store candidate applications, resumes, or cover notes after they are forwarded to the employer. We do not contact candidates on behalf of employers, run aggregated analytics on individual candidates, or share data with third parties for marketing.
How long we keep things
Listings and associated employer data are retained for as long as the Listing is live and for a reasonable archival period afterward (currently 12 months). Candidate applications are forwarded immediately and not retained by us. We use a service called Resend to deliver emails. Once Resend confirms delivery, the application data is discarded. Server logs and Turnstile data are retained for up to 90 days for operational and security purposes. Rate-limit records (IP address + timestamp) are retained for up to one hour and then automatically purged.
Service providers we use
We rely on the following third-party services to operate AECjobs.co. Each has its own privacy practices, summarized below:
- Stripe—processes payments. Receives billing email and payment details. See stripe.com/privacy.
- Resend—delivers transactional and notification emails. Receives the email content and recipient address. See resend.com/legal/privacy-policy.
- Supabase—hosts our database and file storage. Receives all data we store. See supabase.com/privacy.
- Cloudflare (Turnstile + hosting)—bot protection and content delivery. Receives standard request metadata. See cloudflare.com/privacypolicy.
Your rights
Depending on where you live, you may have the right to access, correct, or delete the personal data we hold about you, or to object to how we use it. Because we hold very little candidate data (we discard applications after forwarding), most candidate-side requests are not applicable—the data lives with the employer who received your application, not with us. For employer data, email privacy@aecjobs.co to make a request.
Cookies
We use a small number of strictly-necessary cookies and similar storage to keep the site working. For example, a sessionStorage flag that prevents your own view from inflating an employer’s view count. We do not use advertising or cross-site tracking cookies.
Children’s privacy
AECjobs.co is intended for adult professionals. We do not target or knowingly collect information from children under 16. If you believe we have done so, email privacy@aecjobs.co and we’ll delete it.
Changes to this policy
We may update this Privacy Policy from time to time. When we do, we’ll update the “Last updated” date above. For material changes, we’ll make a reasonable effort to notify affected users.
Contact
Privacy questions or requests: privacy@aecjobs.co.