Privacy Policy

Last Updated: January 26, 2025

Our Commitment to Your Privacy

At Work In Data Center, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our job board platform.

By using our platform, you agree to the collection and use of information in accordance with this Privacy Policy. This policy should be read in conjunction with our Terms of Service.

This Privacy Policy complies with the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA).

1. Information We Collect

1.1 Information You Provide Directly

Account Registration: When you create an account, we collect your email address, password (stored securely as a hash), name, role (employer or job seeker), and company name (for employers).

Job Postings (Employers): Company details, job descriptions, requirements, location, compensation information, application contact methods (URL or email), and company logos.

Job Applications (Job Seekers): Resume files or URLs, cover letters, and any information you include in your application materials.

Newsletter Subscriptions: Email address and category preferences for job alerts.

Contact Forms: Name, email, inquiry type, subject, and message content when you contact us.

Payment Information: We use Stripe for payment processing. We do NOT store credit card numbers or financial account information. We only store Stripe transaction IDs, payment amounts, and payment status for record-keeping.

1.2 Information Collected Automatically

Usage Data: We collect information about how you interact with our platform, including:

Pages viewed and jobs browsed
Search queries and filters used
Job view counts and application counts
Date and time of visits

Device Information: Browser type, operating system, IP address (for security), and device identifiers.

Cookies: We use cookies and similar technologies for authentication, preferences, and analytics. See Section 4 for details.

1.3 Information From Third Parties

Payment confirmations and transaction data from Stripe
Email deliverability information from email service providers

2. How We Use Your Information

We use your personal information for the following purposes, based on the following lawful bases:

Contract Performance: To provide our job board services, process job postings, facilitate applications, and manage your account.

Legitimate Interests: To improve our platform, prevent fraud, ensure security, analyze usage patterns (in aggregate), and communicate about platform updates.

Consent: To send you job alerts and newsletters (you can withdraw consent anytime by unsubscribing).

Legal Obligations: To comply with tax laws, payment processing regulations, and respond to legal requests.

Specific Uses:

Facilitate job postings and applications between employers and job seekers
Process payments for job listings via Stripe
Send job alerts and newsletters to subscribers (with consent)
Respond to support requests and inquiries
Improve platform functionality and user experience
Prevent fraud, spam, and ensure platform security
Comply with legal obligations and enforce our Terms of Service
Analyze platform usage in aggregate (non-identifying) form

3. How We Share Your Information

We DO NOT Sell Your Personal Information

We do not sell, rent, or share your personal information with third parties for their marketing purposes.

We Share Information With:

1. Other Users (As Necessary for Platform Function):

Employers can view job seeker applications (resume, cover letter, contact information) for jobs they posted
Job seekers can view employer job postings, company information, and application contact details
We act as an intermediary platform; direct sharing occurs between users

2. Service Providers:

Stripe: For secure payment processing (see Stripe's privacy policy for how they handle payment data)
Cloudinary: For hosting company logos and images
Email Service Providers: For sending transactional emails, job alerts, and newsletters
Hosting/Infrastructure: For platform operation and data storage

These providers are contractually obligated to protect your data and use it only for specified purposes.

3. Legal Requirements:

To comply with laws, regulations, legal processes, or government requests
To enforce our Terms of Service and protect our rights, property, or safety
To protect the rights, property, or safety of our users or the public
In connection with a merger, acquisition, or sale of assets (users will be notified)

We Do NOT share your data with advertisers or use it for unrelated marketing purposes.

4. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our platform.

Types of Cookies We Use:

Essential Cookies: Required for login, authentication, and basic platform functionality. These cannot be disabled without affecting core features.
Functional Cookies: Remember your preferences, settings, and choices to improve your experience.
Analytics Cookies: Help us understand how users interact with our platform in aggregate form (non-identifying).

Managing Cookies:

You can control cookies through your browser settings. However, disabling essential cookies may prevent you from using certain features like logging in or posting jobs.

Most browsers allow you to refuse cookies or delete existing cookies. Check your browser's help documentation for instructions.

5. Data Retention

We retain your personal information only as long as necessary for the purposes outlined in this Privacy Policy or as required by law.

Specific Retention Periods:

Active User Accounts: Retained while your account remains active
Deleted Accounts: Personal data deleted within 30 days of account deletion, except where legally required to retain (e.g., payment records)
Job Postings: Active for 30 days, then archived for 90 days before permanent deletion (unless deleted earlier by employer)
Job Applications: Retained while the related job posting exists plus 90 days
Newsletter Subscriptions: Retained until you unsubscribe
Payment Records: Retained for 7 years for tax and legal compliance
Contact Form Submissions: Retained for 2 years
Cookies: Session cookies expire when you close your browser; persistent cookies last up to 1 year

Data is automatically purged after these retention periods through scheduled deletion processes. You can request deletion of your data at any time by exercising your privacy rights (see Section 6).

6. Your Privacy Rights

You Have Control Over Your Data

Depending on your location, you have specific rights regarding your personal information. We honor these rights for all users regardless of location.

CCPA/CPRA Rights (California Residents)

Right to Know: You can request to know what personal information we collect, use, disclose, and sell (we don't sell).
Right to Delete: You can request deletion of your personal information, subject to legal exceptions.
Right to Correct: You can request correction of inaccurate personal information.
Right to Opt-Out: You can opt out of the sale or sharing of personal information (we don't sell your data).
Right to Limit: You can limit our use of sensitive personal information.
Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

GDPR Rights (EU/EEA Residents)

Right to Access: Obtain a copy of your personal data we hold.
Right to Rectification: Request correction of inaccurate or incomplete data.
Right to Erasure: Request deletion of your personal data ("right to be forgotten").
Right to Restrict Processing: Limit how we process your data under certain circumstances.
Right to Data Portability: Receive your data in a machine-readable format.
Right to Object: Object to certain types of data processing.
Right to Withdraw Consent: Withdraw consent for consent-based processing (e.g., newsletters).

How to Exercise Your Rights

You can submit privacy rights requests through any of the following methods:

Email: privacy@workindatacenter.com or support@workindatacenter.com
Contact Form: Visit our Contact Page
Account Settings: For certain actions like deleting your account or unsubscribing from emails

We will respond to verified requests within 45 days (CCPA) or 30 days (GDPR). We may need to verify your identity before processing requests.

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal information:

Encryption: Data transmitted over the internet is encrypted using HTTPS/TLS
Password Security: Passwords are hashed and never stored in plain text
Payment Security: Stripe handles payment processing and is PCI-DSS Level 1 compliant
Access Controls: Limited employee access to personal data on a need-to-know basis
Regular Updates: We regularly update our security practices and software

Important Security Notice

While we use industry-standard security measures, no method of transmission over the internet or electronic storage is 100% secure. You are responsible for maintaining the confidentiality of your account credentials. Please notify us immediately if you become aware of any unauthorized access to your account.

8. Children's Privacy

Our platform is not directed at children under 18 years of age. To use our services, you must be at least 18 years old or the age of majority in your jurisdiction.

We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly.

If you believe we have collected information from a child under 18, please contact us at privacy@workindatacenter.com.

9. International Data Transfers

Our platform is operated in the United States. If you are accessing our services from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States.

By using our platform, you consent to the transfer of your information to the United States and processing in accordance with this Privacy Policy.

For users in the European Economic Area (EEA), we ensure that data transfers comply with GDPR requirements through appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

10. Third-Party Links & Services

Our platform contains links to employer websites and third-party application portals. When you apply for a job, you may be directed to an external website to complete your application.

We are not responsible for the privacy practices or content of third-party websites.

We encourage you to review the privacy policies of any third-party sites you visit. Once you leave our platform via a link, our Privacy Policy no longer applies.

Employers who receive your applications through our platform are responsible for their own data handling practices. We recommend reviewing employer privacy policies before applying.

11. California "Shine the Light" Law

California Civil Code Section 1798.83 permits California residents to request information about disclosure of personal information to third parties for their direct marketing purposes.

We do not share your personal information with third parties for their direct marketing purposes.

If you have questions about this, please contact us at privacy@workindatacenter.com.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

When we make changes, we will:

Update the "Last Updated" date at the top of this page
Post the updated Privacy Policy on our website
For material changes, provide prominent notice or send email notifications

Your continued use of our platform after changes become effective constitutes acceptance of the updated Privacy Policy. We recommend reviewing this policy periodically to stay informed about how we protect your information.

We update this policy at least annually as required by CCPA.