Privacy Policy

This policy explains how canadarefugeejobs handles information when you browse jobs, create an employer account, buy posting credits, publish listings or contact us. For privacy requests, email [email protected].

Information we handle

Employer accounts: your email address, company name, password hash, email verification status and account creation information. We store password hashes rather than readable account passwords. Session and email-link tokens are stored in hashed form.

Job listings: the information you enter, such as company name, role, location, pay, description, qualifications and application email or website. Published listing details are public and may be seen by search engines or shared by others.

Purchases: package, amount, payment status, Stripe checkout identifiers, posting credits and funded listing dates. Stripe collects payment details on its hosted checkout page. Our application does not receive or store your complete card number or security code.

Service and security records: session information, request information available to our hosting and network providers, rate-limit records, and administrative actions with their reasons. If you contact us, we also receive the information in your message.

Why we use information

We use information to operate accounts, verify email addresses, reset passwords, display jobs, record payments and credits, respond to requests, investigate misuse and meet applicable legal or accounting obligations. We do not ask refugees or asylum seekers to provide immigration documents to browse the job board.

On-site job applications

When you apply, we collect your name, email address, optional phone number, optional message, PDF résumé, consent time and submission information. A job-seeker account is not required. You agree to share these details with the employer named on the form. The employer can review applications, record a review status and download résumés through its authenticated workspace. Your application is not published on the job board.

We send transactional application receipts and employer notifications when email delivery is available; résumé files are not attached to those emails. An application email address is supplied by the applicant and is not automatically verified. Submission counts reflect completed forms, not verified identities or a promise of employment. Do not include immigration documents, banking details or unnecessary identification numbers in your application.

Keep the private withdrawal link in your application email. It lets you remove your personal application details and résumé from the employer workspace without an account. You can also contact us for help. Withdrawal cannot recall copies an employer has already downloaded; the employer is responsible for handling those copies appropriately.

Cookies and browser storage

We use essential cookies to keep you signed in and protect forms against unauthorized requests. Your browser may also store an unfinished job form locally so you can continue a draft. You can clear cookies and local storage in your browser; doing so may sign you out or remove a browser-only draft. Our network providers may use their own security mechanisms to protect the service.

Service providers and disclosure

We use DigitalOcean for hosting, Cloudflare for network delivery and security, Resend for transactional account emails, and Stripe for payment processing when enabled. Our contact mailbox is hosted through our email provider. These providers process the information needed to deliver their services and may process it outside your province or Canada.

Authorized administrators can access account, listing and transaction information needed to operate the site. We may disclose information when required by law or reasonably necessary to investigate abuse, protect people or establish legal rights. We do not sell personal information.

Security and retention

We use HTTPS, password hashing, restricted account access and security checks on account and administrative actions. No online service can guarantee complete security. Keep your password private and tell us promptly about suspected account misuse.

Application personal details and résumé files are normally removed from active storage after 180 days from submission. Withdrawal, employer deletion of an application, or an administrator deleting its job or employer removes the stored applicant details and file sooner. Minimal non-identifying submission records remain for job counts; previous backup copies may persist until the backups are retired. We keep other information for service operation, security, recovery and applicable legal or accounting needs. An administrator's “Delete employer” or “Delete job” action removes records from active use; it is not an automatic purge of all stored information. Account, purchase, audit and backup records may remain. Retention needs vary by record type; contact us about a specific record or privacy request.

Your choices and requests

Employers can edit job listings, archive opportunities and delete applications they no longer need. Applicants can withdraw using their private email link or contact us for assistance. Contact [email protected] to request access to, correction of or deletion of personal information, or to raise a privacy concern. We may need to verify your identity. Some records may need to be retained where law or legitimate recordkeeping obligations require it; we will explain any applicable limitation when responding.

Policy updates

We will update this page when our practices change. Check the date above for the current version. Contact us if you have questions about this policy or how it applies to your information.