1. Who is responsible
Jobumi is responsible for personal information under its control. The Privacy Officer can be reached at contact@jobumi.com.
Employers may also act as independent organizations responsible for candidate information they collect, export, or use for their own recruitment and legal obligations.
2. Information we collect
The information depends on your role, settings, and use of the service.
- Account and authentication information, including name, email, role, sign-in provider, verification state, session identifiers, IP address, device, and security events.
- Candidate profile information, including contact details, work history, education, skills, languages, certifications, résumé files, availability, and profile visibility.
- Employer and organization information, including company profile, members, invitations, roles, job offers, screening questions, notes, and recruitment activity.
- Applications and application snapshots, answers, statuses, withdrawal events, communications, and employer review activity.
- Videos, audio, images, thumbnails, files, captions or related metadata, including ownership, purpose, duration, and technical processing status.
- Hiring and support messages and associated channel, delivery, unread, and reminder information.
- Preferences and compliance records, including language, theme, support choices, cookie-consent decisions, timestamps, and audit events.
- Usage, diagnostics, and security information, including pages or features used, browser information, errors, interaction events, and approximate location derived from network information where available.
3. Sources of information
We receive information directly from you, from authorized members of an organization, through your use of Jobumi, from Google or Apple when you choose social sign-in, and from service providers operating features on our behalf.
An employer may add recruitment notes or status information about an application. We do not treat client-supplied role, ownership, or identity information as proof of authorization without platform checks.
4. Why we use information
We use personal information only for identified and compatible purposes, including:
- Creating accounts, authenticating users, maintaining sessions, and preventing abuse.
- Building and displaying candidate profiles, company profiles, jobs, and applications according to visibility and authorization settings.
- Processing, encoding, storing, delivering, and managing video and other uploaded media.
- Supporting search, résumé parsing, matching, recommendations, and hiring-team organization.
- Delivering chat, email, invitations, verification, password reset, application, notification, and support communications.
- Operating, debugging, securing, measuring, and improving Jobumi.
- Complying with legal obligations, enforcing agreements, investigating incidents, and protecting users and the public.
- Running optional analytics or advertising measurement only after the corresponding consent is granted.
5. Video and media processing
Videos may be uploaded directly to Cloudflare Stream for encoding, storage, thumbnail generation, and delivery. Jobumi may also store controlled copies, thumbnails, or related media in Cloudflare R2 when required by the feature lifecycle.
Your profile or job visibility determines who can access published media through Jobumi. Submitting an application may preserve a snapshot of the candidate information provided for employer review. Withdrawing or deleting content changes access through Jobumi, but technical processing, backups, legal holds, or an employer’s independent records may require limited retention.
6. Artificial intelligence, matching, and profiling
Jobumi may use Cloudflare Workers AI to parse résumé content, normalize skills or experience, and enrich search terms for profiles or jobs. Search and matching features may use profile, job, location, skill, language, and activity information to rank potentially relevant results.
These tools support discovery and organization. Jobumi does not make a solely automated decision to hire, reject, promote, or terminate a person. Employers make their own decisions and are responsible for explaining any automated process they independently use.
7. When information is shared
We share information only as needed for the service, with consent, or as permitted by law.
- With candidates, employers, and authorized organization members when a profile, job, application, message, or collaboration feature requires it.
- With Cloudflare for Workers, D1, R2, KV, Stream, Workers AI, security, and content delivery.
- With Stream for authenticated hiring and support chat infrastructure.
- With Resend for transactional and notification email delivery.
- With Google and Apple when you choose their sign-in services.
- With Google Analytics, Google Tag Manager, and Microsoft Clarity only under the optional consent choices described in the Cookie Policy.
- With professional advisers, authorities, or counterparties when reasonably necessary for legal compliance, security, claims, financing, reorganization, or a business transfer, subject to appropriate safeguards.
8. Processing outside Québec
Jobumi and its providers use infrastructure that may process or store information outside Québec and Canada. Before communicating personal information outside Québec where required, Jobumi assesses relevant privacy factors and uses contractual and security safeguards appropriate to the sensitivity and purpose.
Information processed elsewhere may be subject to lawful access by authorities in that jurisdiction.
9. Consent and choices
Where consent is the appropriate basis, we seek it in clear language for the relevant purpose. You may withdraw consent, subject to reasonable notice and legal or contractual restrictions. Withdrawal does not invalidate prior lawful processing and may prevent an optional feature from functioning.
Optional analytics and advertising storage are denied by default. You can accept, reject, or customize them and reopen Cookie settings in the jobumi.com footer at any time.
10. Retention and disposal
We keep personal information only as long as reasonably necessary for the identified purpose, an active account or recruitment relationship, security and audit needs, dispute resolution, and applicable legal obligations. Standard authentication sessions are configured for seven days unless refreshed or ended sooner.
Profiles, jobs, applications, media, and messages follow their controlling account or resource lifecycle. Withdrawal, deletion, or loss of authorization restricts access according to the feature’s rules. When information is no longer required, it is deleted or irreversibly anonymized using processes appropriate to the system and any backup or legal-hold constraints.
11. Security safeguards
We use administrative, technical, and physical safeguards proportionate to the sensitivity, quantity, purpose, and format of the information. These include access controls, authentication, tenant and ownership checks, encrypted transport, managed infrastructure, logging, and incident procedures.
No system is perfectly secure. Contact us promptly if you believe an account or personal information has been compromised.
12. Your privacy rights
Subject to applicable law, you may ask to:
- Access personal information held about you and understand how it is used or shared.
- Correct incomplete or inaccurate information.
- Withdraw consent or change optional tracking preferences.
- Request deletion, cessation of dissemination, or de-indexing where the legal conditions are met.
- Receive computerized personal information in a structured, commonly used technological format where portability applies.
- Ask questions about a technology that identifies, locates, profiles, or makes an exclusively automated decision.
- Make a complaint to Jobumi or to the Commission d’accès à l’information du Québec.
13. Exercising your rights
Write to the Privacy Officer at contact@jobumi.com. Describe your request and the account or information involved. We may verify identity before responding and will explain any refusal or limitation required by law.
14. People under 18
Jobumi is intended for people 18 and older. We do not knowingly create accounts for minors. Contact the Privacy Officer if you believe a person under 18 has provided personal information so we can investigate and take appropriate action.
15. Changes to this Policy
We may update this Policy to reflect product, provider, legal, or operational changes. We will publish the revised date and provide additional notice before a material change takes effect when required.