Privacy policy

1. Controller

[Company name to complete], publisher of Joobrio, is the controller for the processing described here, under Organic Law No. 2004-63 of 27 July 2004 on the protection of personal data. Filing with the INPDP: [number to complete]. Contact: [email protected].

2. Data processed

Account: name, email address, password (hashed), language, time zone, preferences. Profile: headline, experience, education, skills, languages, uploaded CVs, availability. Activity: applications, messages, interviews, alerts, posts, reviews, training requests, quotes.

Technical data: sign-in and security logs, IP address for abuse limits, an anonymized fingerprint for ad frequency caps. No CV content, password or token is ever written to logs.

3. Purposes and legal bases

Providing the requested service (account, applications, recruiting, messaging, training, projects); security and fraud prevention; emails related to your account; with your consent, alerts and newsletters; aggregated measurement of our campaigns.

B2B outreach only targets work addresses, with one-click unsubscribe.

4. Recipients

Companies you apply to; recruiters at verified companies if your profile is visible to them (without your contact details); the training provider or client you send a request or quote to.

Our technical processors: host, email delivery service and AI provider (Anthropic's Claude API) for assistance features, which receives neither your contact details nor your identity.

5. Transfers outside Tunisia

AI features rely on a provider located outside Tunisia. This transfer is covered by [INPDP authorization / contractual safeguards to complete] and limited to what is strictly necessary (text to analyze, without contact details).

6. Retention

Account and profile: while the account is active, then deleted at your request. Applications: 2 years after the company's last action. Security logs: 12 months; audit log: 3 years; AI usage: 13 months. Imported contacts who did not join: until they decline, after which only a fingerprint is kept so they are not contacted again. Invoices: 10 years.

7. Your rights

You can access, correct, object to processing and withdraw consent. From Settings → Privacy, you can download all your data and delete your account. For any request: [email protected]; if you disagree, you may contact the INPDP.

8. Security

Encrypted connections, hashed passwords, two-factor authentication, checks on uploaded files, data separation between companies, log of sensitive actions.