Privacy Policy

Information you provide directly:

• Account information: Name, email address, password, and phone number when you create an account.
• Profile information: Resume, work experience, education, skills, language proficiency, immigration status category (e.g., immigrant, refugee, international student), and location preferences.
• Employer information: Company name, business number, contact details, and job posting content.
• Payment information: Billing address and payment details (processed securely by Stripe; we do not store full credit card numbers).
• Communications: Messages sent through our contact form, support requests, and feedback.

Information collected automatically:

• Device and usage data: IP address, browser type, operating system, referring URLs, pages visited, time spent on pages, and click patterns.
• Cookies and similar technologies: See our Cookie Policy for details.
• Analytics data: Aggregated usage statistics collected through Vercel Analytics.

We use the information we collect to:

• Provide, operate, and maintain the Service.
• Create and manage your account, and authenticate your identity.
• Facilitate job applications and connect job seekers with employers.
• Process payments and send transaction confirmations.
• Send you service-related communications, including account notifications, job alerts, and updates about the platform.
• Respond to your inquiries, support requests, and feedback.
• Analyze usage patterns to improve the Service, user experience, and content.
• Detect, prevent, and address fraud, abuse, security incidents, and technical issues.
• Comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information. We may share your information in the following circumstances:

• With employers: When you apply for a job, your profile information and resume are shared with the employer who posted the listing.
• Service providers: We use trusted third-party providers to help operate our Service, including Supabase (authentication and database), Stripe (payment processing), Vercel (hosting and analytics), and Resend (email delivery). These providers are contractually obligated to protect your information.
• Legal requirements: We may disclose your information if required by law, regulation, legal process, or governmental request.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.
• With your consent: We may share your information for other purposes with your explicit consent.

We use cookies and similar tracking technologies to enhance your experience, analyze usage, and improve our Service. For detailed information about the cookies we use and how to manage your preferences, please see our Cookie Policy.

Under PIPEDA and applicable provincial privacy laws, you have the right to:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request that we correct inaccurate or incomplete personal information.
• Deletion: Request that we delete your personal information, subject to certain legal exceptions.
• Withdrawal of consent: Withdraw your consent to our processing of your personal information at any time, subject to legal or contractual restrictions.
• Complaint: File a complaint with the Office of the Privacy Commissioner of Canada if you believe your privacy rights have been violated.

To exercise any of these rights, contact us at hello@hirenewcomerscanada.ca. We will respond to your request within 30 days.

We retain your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, or as required by law. Specific retention periods include:

• Account data: Retained for the duration of your account and up to 30 days after account deletion.
• Job applications: Retained for up to 12 months after the associated job listing expires, unless you request earlier deletion.
• Payment records: Retained for 7 years as required by Canadian tax law.
• Analytics data: Aggregated and anonymized data may be retained indefinitely for statistical purposes.

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (TLS/SSL) and at rest.
• Secure authentication with hashed passwords.
• Row-level security policies on our database to ensure users can only access their own data.
• Regular security reviews and updates.
• Access controls limiting employee access to personal information on a need-to-know basis.

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

Our Service is hosted on servers located in Canada. Some of our third-party service providers may process data in other jurisdictions. When personal information is transferred outside of Canada, we ensure that adequate protections are in place through contractual obligations and compliance with PIPEDA requirements.

Our Service is not intended for individuals under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected such information, we will take steps to delete it promptly.

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. If we make material changes, we will notify you by email or through a prominent notice on our Service. We encourage you to review this Privacy Policy periodically.

If you have questions or concerns about this Privacy Policy or our data practices, please contact our Privacy Officer:

You may also contact the Office of the Privacy Commissioner of Canada at www.priv.gc.ca if you have concerns about how your personal information is being handled.