Legal

Privacy Policy

Last updated: May 1, 2025  ·  Applies globally with regional supplements

Table of Contents

  1. Who We Are
  2. Information We Collect
  3. How We Use Your Information
  4. Data Sharing
  5. Data Retention
  6. Your Rights — Global
  7. Security
  8. Changes to This Policy
  9. Regional Supplements

01 Who We Are

InstantJob is a real-time, location-based job matching platform operated by YAZAR.DEV. We connect job seekers and employers through a live map interface. Our company is registered in Estonia and operates globally.

Data Controller: YAZAR.DEV · privacy@instantjob.app
Jurisdiction: Republic of Estonia, European Union

02 Information We Collect

Information you provide

  • Account data: Name, email, password (hashed), profile photo
  • Professional data: Skills, certifications, work history, hourly rate, availability
  • Payment data: Processed via Stripe — we never store card details
  • Communications: Messages exchanged within the platform

Information collected automatically

  • Location data: GPS coordinates only when you enable map visibility (opt-in)
  • Device data: Browser type, OS, IP address, device identifiers
  • Usage data: Pages visited, features used, session duration
  • Cookies: See our Cookie Policy

03 How We Use Your Information

  • To provide and operate the InstantJob platform and matching services
  • To display your profile on the live map to relevant employers (with your consent)
  • To process payments and manage subscriptions
  • To send transactional notifications (matches, confirmations, receipts)
  • To improve platform performance through analytics
  • To detect and prevent fraud and abuse
  • To comply with legal obligations in all jurisdictions we operate
  • To generate fully anonymized labor market statistics for our Government API — no personal data is ever included

04 Data Sharing and Disclosure

We do not sell your personal data — to anyone, ever.

  • Other users: Your public profile is visible to employers when you enable map visibility
  • Service providers: Stripe (payments), AWS (hosting), Sentry (error tracking) — all under data processing agreements
  • Government agencies: Only anonymized, aggregated statistical data via Government API — never personal data
  • Legal requirements: When required by court order or applicable law

🔒 Private companies cannot access our Government API under any circumstances — even for a fee. This API is exclusively for verified national government agencies.

05 Data Retention

  • Active accounts: Retained for the duration of your account
  • Deleted accounts: Personal data removed within 30 days of deletion request
  • Financial records: 7 years (Estonian Accounting Act)
  • Messages: Deleted 90 days after associated job is closed
  • Anonymized analytics: Retained indefinitely (no personal data)

06 Your Rights — Global

Regardless of your location, all InstantJob users have the right to:

  • Access a copy of the personal data we hold about you
  • Correct inaccurate or incomplete data
  • Delete your account and associated personal data
  • Withdraw consent for optional data processing (e.g. location, marketing)
  • Receive your data in a portable format

To exercise any right: privacy@instantjob.app — we respond within 30 days.

See the Regional Supplements below for additional rights specific to your jurisdiction.

07 Security

We implement TLS 1.3 encryption in transit, AES-256 encryption at rest, role-based access controls, and regular third-party security audits. No system is 100% secure — we encourage strong passwords and two-factor authentication.

To report a security vulnerability: security@instantjob.app

08 Changes to This Policy

We will notify you of material changes via email or platform notice at least 30 days before they take effect. Continued use after changes constitutes acceptance.

Regional Supplements
🇪🇺 EU / EEA / Estonia — GDPR

EU European Union & Estonia

Processing is subject to Regulation (EU) 2016/679 (GDPR) and the Estonian Personal Data Protection Act.

Legal Bases (Art. 6 GDPR)

  • Consent (6(1)(a)): Location sharing, marketing, non-essential cookies
  • Contract (6(1)(b)): Account creation, matching, payments
  • Legal obligation (6(1)(c)): Tax and accounting records
  • Legitimate interest (6(1)(f)): Fraud prevention, security

Additional GDPR Rights

  • Right to restriction of processing (Art. 18)
  • Right to object to legitimate interest processing (Art. 21)
  • Right not to be subject to solely automated decision-making (Art. 22)

Supervisory Authority

Andmekaitse Inspektsioon (AKI) — aki.ee · info@aki.ee
EU residents may also contact their local data protection authority or use the EU ODR Platform.

International Transfers

Data is processed within the EEA (AWS Ireland). Transfers outside the EEA use Standard Contractual Clauses (SCCs) approved by the European Commission.

Data Breach Notification

We notify AKI within 72 hours of a breach posing risk to individuals, and notify affected users without undue delay for high-risk breaches.

🇺🇸 United States — CCPA / CPRA

US United States (California)

California residents have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).

Your California Rights

  • Right to Know: Request the categories and specific pieces of personal information we have collected about you in the past 12 months
  • Right to Delete: Request deletion of personal information we hold about you
  • Right to Correct: Request correction of inaccurate personal information
  • Right to Opt-Out of Sale/Sharing: We do not sell or share your personal information for cross-context behavioral advertising
  • Right to Limit Use of Sensitive Personal Information: You may limit our use of sensitive data (precise geolocation, account credentials) to what is necessary to provide the service
  • Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights

Categories of Personal Information Collected (CCPA)

  • Identifiers (name, email, IP address)
  • Professional or employment-related information
  • Geolocation data (when enabled)
  • Internet or network activity
  • Inferences drawn from the above

We do not sell personal information. We do not share personal information for cross-context behavioral advertising purposes.

To exercise California rights: privacy@instantjob.app with subject line "CCPA Request". We respond within 45 days.

For other US states with privacy laws (Virginia CDPA, Colorado CPA, etc.), contact us at privacy@instantjob.app.

🇦🇺 Australia — Privacy Act 1988

AU Australia

For Australian users, we comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Your Rights Under the APPs

  • Access (APP 12): Request access to personal information we hold about you
  • Correction (APP 13): Request correction of inaccurate, incomplete, or outdated information
  • Anonymity: Where practicable, you may interact with us anonymously or under a pseudonym
  • Complaint: Lodge a complaint with the Office of the Australian Information Commissioner (OAIC)

Cross-Border Disclosure

Your data may be transferred to servers in Ireland (AWS EU). We take reasonable steps to ensure overseas recipients handle your information in accordance with the APPs.

Supervisory Authority

Office of the Australian Information Commissioner (OAIC)
oaic.gov.au · 1300 363 992

To exercise Australian rights or lodge a complaint: privacy@instantjob.app — we respond within 30 days.

🇨🇦 Canada — PIPEDA / Law 25

CA Canada

For Canadian users, we comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and, for Quebec residents, Act 25 (Law 25).

Consent

We obtain meaningful consent before collecting, using, or disclosing personal information. You may withdraw consent at any time, subject to legal or contractual restrictions.

Your Rights Under PIPEDA

  • Access: Request access to personal information we hold
  • Correction: Challenge accuracy and completeness of your information
  • Withdrawal of consent: Withdraw consent for non-essential processing
  • Complaint: File a complaint with the Office of the Privacy Commissioner of Canada

Quebec Residents (Law 25)

  • Right to data portability for information provided by you
  • Right to de-indexation of certain information
  • Right to be informed of automated decision-making

Supervisory Authority

Office of the Privacy Commissioner of Canada: priv.gc.ca
Commission d'accès à l'information (Quebec): cai.gouv.qc.ca

Requests: privacy@instantjob.app

🇹🇷 Türkiye — KVKK

TR Türkiye

Türk kullanıcılar için 6698 Sayılı Kişisel Verilerin Korunması Kanunu (KVKK) kapsamındaki haklarınız aşağıda açıklanmıştır.

Veri Sorumlusu

YAZAR.DEV, InstantJob platformunun veri sorumlusudur. VERBİS kaydı, Türkiye'deki operasyonların büyümesiyle birlikte tamamlanacaktır.

KVKK Kapsamındaki Haklarınız (Madde 11)

  • Kişisel verilerinizin işlenip işlenmediğini öğrenme
  • Kişisel verileriniz işlenmişse buna ilişkin bilgi talep etme
  • Kişisel verilerinizin işlenme amacını ve bunların amacına uygun kullanılıp kullanılmadığını öğrenme
  • Yurt içinde veya yurt dışında kişisel verilerin aktarıldığı üçüncü kişileri bilme
  • Eksik veya yanlış işlenmiş olması hâlinde bunların düzeltilmesini isteme
  • Kişisel verilerin silinmesini veya yok edilmesini isteme
  • İşlenen verilerin münhasıran otomatik sistemler vasıtasıyla analiz edilmesi suretiyle aleyhinize bir sonucun ortaya çıkmasına itiraz etme
  • Kanuna aykırı olarak işlenmesi sebebiyle zarara uğramanız hâlinde zararın giderilmesini talep etme

Başvuru

KVKK kapsamındaki talepleriniz için: kvkk@instantjob.app — 30 gün içinde yanıt verilir.

Denetleyici Kurum

Kişisel Verileri Koruma Kurumu (KVKK): kvkk.gov.tr

Questions about this policy?

YAZAR.DEV — Operating company of InstantJob

General: legal@instantjob.app

Privacy / Data: privacy@instantjob.app

Security: security@instantjob.app

Website: instantjob.app