Privacy
What Postulo keeps, why, for how long, and how to have it erased.
Who is responsible
Postulo is a project by Ilyes Litim, in Montréal. For any question or request about your data, write through the contact form of his portfolio.
What is kept
Your account: e-mail address, Firebase identifier, language, creation date.
Your sessions: a random token in a cookie; the database keeps only its fingerprint (SHA-256), 30 days at most.
Invitations: the fingerprint of the code, the address it was made for, who made it and who used it.
Your search preferences: roles, keywords, place, way of working, contract, salary, languages, level.
Your CV, if you upload one: the PDF file as you sent it. You can delete it any time from your preferences.
Your password
It is handled by Firebase Authentication (Google), which also sends the confirmation and reset e-mails. It is never stored on Postulo's servers.
Technical logs
Like any website, the servers record each request (IP address, browser, page) for security and troubleshooting. These logs are deleted after 14 days.
Cookies
One cookie only, the session one, needed to stay logged in. Your light or dark theme choice stays in your browser. No advertising, no tracker, no third-party analytics.
Your rights
You can ask to access, correct or erase your data through the contact form. Export and account deletion from the dashboard arrive during the beta.