Privacy Policy

1. Introduction & Scope

At INemployed, operated by FallUp (operator of INemployed) ("INemployed," "we," "us," or "our"), we respect your privacy and are committed to protecting the personal information you share with us.

This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you visit inemployed.work (the "Site"), apply for job listings, create a candidate account, or interact with our platform services. This policy applies to all Site visitors, registered candidate account holders, and guest job applicants.

2. Information We Collect

We collect information directly from you when you provide it voluntarily, as well as automatically when you navigate the Site.

A. Account Information

When you create an account via Firebase Authentication or Google Sign-In, we collect:

Full Name
Email Address
Profile Photo URL (if provided by Google Sign-In)
Unique Firebase User ID (firebaseUid)

B. Resume & Profile Information

When you set up or save your candidate profile (User record and Supabase Storage), we collect:

Uploaded Resume PDF/Document file
Contact Phone Number
Summary of Work Experience
Array of Technical Skills & Keywords

C. Job Application Submissions

When you submit a job application on INemployed (Application record), whether logged in or as a guest applicant, we collect:

Full Name
Email Address & Phone Number
Experience Level & Technical Skills
Resume File Attachment
Optional Cover Note / Message

D. Job Alert Preferences

If you create saved job alerts (JobAlert record), we store your specified search keywords, job categories, and location filters.

E. Contact Form Messages

When you send an inquiry via our Contact Page (ContactMessage record), we collect your name, email address, subject line, inquiry category, and message text.

F. Technical & Analytical Data

Analytics: INemployed does not currently use invasive third-party tracking cookies or advertising pixels as of this policy's effective date. Standard web server logs (IP address, browser type, operating system, referrer URL, and timestamp) are maintained strictly for security, performance monitoring, and abuse prevention.
Cookies & Session Tokens: We use essential session tokens and authentication cookies (via Firebase Authentication) required to keep you signed in securely.

3. How We Use Information

We use the personal data we collect for the following legitimate business purposes:

Operating the Platform: Displaying job listings, matching candidates with open positions, and managing candidate profiles.
Processing Job Applications: Delivering your submitted application data, resume, and cover note to the recruiting team or external portal associated with the listing.
Candidate Auto-Fill: Storing your resume and profile details in your Candidate Dashboard so you can apply to future roles seamlessly.
Communications: Sending essential account administration emails (such as password resets or security alerts) and responding to support inquiries submitted through our Contact Page. Note: INemployed does not currently send marketing newsletters or automated job alert emails.
Security & Compliance: Detecting and preventing spam applications, automated scraping, account hijacking, and fraudulent activity.

4. How Information Is Stored & Who Can Access It

Structured Database Hosting: Account records, job application records, saved alerts, contact messages, and site configuration data are securely stored in a cloud-hosted PostgreSQL database provided by Supabase.
Private Storage Buckets for Resumes: Uploaded resume files are stored in a dedicated, private bucket in Supabase Storage. Resume files are never publicly exposed or indexed by search engines. Access to resume files is restricted via short-lived, cryptographically signed URLs generated server-side on demand.
Access Restrictions: Access to user application data and database records is restricted to authenticated candidate account owners for their own data, authorized admin accounts (gated by internal email allowlists), and the relevant employer process for submitted job applications.

5. Third-Party Service Providers

We share data with trusted third-party infrastructure providers who process data strictly on our behalf to enable Site functionality:

| Provider | Purpose | Data Handled | |---|---|---| | Firebase (Google Cloud) | User authentication & identity management | Name, email address, hashed credentials, Google profile photo | | Supabase | Cloud PostgreSQL database & private file storage | Candidate profiles, applications, job alerts, contact messages, uploaded resume files | | Vercel | Edge application hosting & deployment | Server execution logs, IP addresses, HTTP request headers | | Clearbit Logo API | Displaying company logos on job cards | Public company domain names only (no personal data) |

Each third-party service provider operates under its own security standards and privacy terms. INemployed selects infrastructure providers that comply with industry-standard encryption and data security protocols.

6. Data Retention Policy

Job Listings: Job postings automatically expire and are purged from our active listings database 7 days after publication. Note: Expiration of a job listing does not affect job applications previously submitted for that role.
Candidate Profiles & Applications: Submitted applications, user profile records, saved resumes, and job alerts are retained until you delete them from your dashboard or request account erasure (see Section 7).
Contact Messages: Messages submitted through our contact form are retained for as long as necessary to resolve your inquiry and for a reasonable record-keeping period thereafter.

7. User Rights & Choices

You have full control over your personal information on INemployed:

Access & Update: You can view, edit, or replace your saved resume, skills, phone number, and experience summary at any time in your Candidate Dashboard.
Delete Alerts: You can delete individual saved job alerts via your Alerts Dashboard.
Account Erasure: You may request complete deletion of your account and erasure of all associated personal data by emailing inemployed.work@gmail.com. Erasure requests are processed within 30 days of verification.
Statutory Privacy Rights: If you access INemployed from jurisdictions with statutory privacy laws (such as GDPR in the EU/UK or CCPA/CPRA in California), you have the right to request access to, correction of, or deletion of your personal data, as well as the right to object to processing. Note: INemployed does not sell your personal information.

8. Children's Privacy

INemployed is intended strictly for job seekers aged 18 years or older. We do not knowingly solicit or collect personal information from individuals under the age of 18. If we learn that we have inadvertently collected personal data from a minor, we will promptly delete that information from our servers.

9. International Data Transfers

INemployed operates internationally and uses globally distributed cloud infrastructure (provided by Firebase, Supabase, and Vercel). Consequently, your personal data may be stored or processed in servers located outside your country of residence (including the United States, India, and European Union data centers). By using the Site, you consent to the transfer of your data to these global locations under appropriate technical and organizational safeguards.

10. Data Security Measures

We implement robust administrative, technical, and physical security controls to safeguard your personal data:

Encryption in Transit & at Rest: All web traffic is encrypted using HTTPS/TLS. Database data and file storage buckets are encrypted at rest.
Signed URL Access: Resume files in storage can only be accessed through short-lived, signed URLs generated server-side.
Credential Protection: Raw passwords are never received or stored by INemployed; all authentication credentials are managed securely by Firebase Authentication.

However, no method of electronic transmission over the internet or method of digital storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect technological changes, product updates, or evolving legal obligations. Any updates will be posted on this page with a revised "Last updated" date. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

12. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact our privacy team:

Privacy Email: inemployed.work@gmail.com
Contact Form: Submit a request on our Contact Page (select category "Privacy request")