Privacy Policy

This Privacy Policy explains how AiCodeJobs(“we”, “us”, “our”) collects, uses, shares, and protects personal information when you use aicodejobs.com and related services (the “Services”). It applies to everyone who uses the Services worldwide — builders creating profiles, employers posting work, and visitors browsing.

In short: we collect what we need to run a job board and talent directory, we use trusted providers to operate it, we never sell your personal information, and we never show your email address on public pages. You are always in control of your data and can export it or delete your account, subject to the limited records described in retention.

We collect the following categories of personal information:

Our usage analytics are first-party: measured by us, for us. We do not use third-party advertising trackers, cross-site tracking, or device fingerprinting.

The page interaction map records positions only, as counts for coarse regions of a page — we use it to see which parts of a layout people actually use. It does not record the order or path of your movements, anything you type, or any identifier, so it cannot be replayed as a recording of your visit or traced back to you.

We use personal information to:

• Provide the Services — display public profiles and listings, route applications, and enable messaging (legal basis: performance of a contract).
• Process employer payments through Stripe (contract).
• Send transactional email — application alerts, messages, receipts (contract).
• Send optional job-match and marketing email, only if you opt in (consent).
• Measure and improve the product with first-party analytics (consent, where required, otherwise legitimate interest).
• Keep the platform safe — prevent spam, fraud, and abuse (legitimate interest).
• Meet legal, tax, and accounting obligations (legal obligation).

You can withdraw consent at any time (see Your privacy rights).

Some of what we show is ordered automatically. When an employer searches the builder directory, or uses our AI search, we rank profiles by how well they match what was asked for. Part of that ranking uses a large language model. Ranking decides the order results appear in — it is not an assessment of you as a person, and it does not decide whether you are hired.

The profile information used for ranking is the professional information you chose to publish: your name, roles, country, years of experience, English level, other languages, industries, skills, AI tools, headline, bio, work history, and portfolio projects.

We deliberately do not supply age or date of birth, gender, race or ethnicity, religion, disability, veteran status, sexual orientation, marital status, pregnancy, your photo or avatar, or your email or phone number. That exclusion is implemented in the ranking code itself and is recorded on every ranking run, so it can be demonstrated rather than asserted.

We keep an audit record of each ranking run — which version of the model and prompt ran, which information was supplied, and the result — so a ranking can be explained after the fact. That record is retained under the schedule in retention.

Employers make their own hiring decisions. If you believe a ranking has treated you unfairly, or you want to know how a particular result was produced, email [email protected] and a person will look at it.

We use a small number of first-party cookies. Strictly necessary cookies keep you logged in; an analytics cookie is set only after you accept in our cookie banner. We use no third-party advertising or cross-site tracking cookies. For the full list and how to control them, see our Cookie Policy.

We do not sellyour personal information. We share it only with the service providers (“processors”) that operate the platform on our behalf, each bound by contract to protect it:

A few of those deserve a sentence, because what reaches them is not obvious from the name:

• LiveKit carries interview calls. Your camera and microphone reach it while a call is running, because that is what delivers the call. We do not record calls, and nothing from one is stored afterwards.
• OpenRouter receives the professional profile information listed under automated ranking— the published fields, and never the ones excluded there — together with the employer’s search. It passes them to the language model that produces the ordering.
• thum.io receives the address of a link you choose to add, so it can photograph that public page. It gets the URL, nothing about you.
• GitHub is involved only if you choose to connect your GitHub account, and only to read the public profile and repository information you are connecting.

Government tax registries.If you buy as a business outside the US, we send your VAT or GST registration number to the relevant public registry to confirm it before you pay — the European Commission’s VIES service for EU numbers, HM Revenue & Customs for UK numbers, the Australian Business Register for Australian ones, and Revenu Québec for Québec QST numbers. For Canadian GST/HST numbers, a member of our team looks the number up on the Canada Revenue Agency’s public GST/HST Registry, which also needs your business’s legal name and the date. These are public authorities operating their own services, not our processors. We send them only what their check needs, and we keep their reply as our record that we checked.

We also share information when required by law, to enforce our terms, or as part of a merger or acquisition. Public content you publish — your profile, portfolio, and listings — is visible to anyone. Your email address is never included in public content.

We keep personal information for as long as your account is active and as needed to provide the Services.

When you delete your account, we remove or deactivate your public profile, listings, account credentials, and other information that is no longer needed for the Service.

We may retain limited information where reasonably necessary to comply with legal, tax, accounting, or regulatory obligations; complete or document transactions and refunds; detect or prevent fraud, abuse, and security incidents; resolve disputes or establish, exercise, or defend legal claims; enforce our agreements; or preserve records that are shared with or belong to other users, such as messages and applications.

Where appropriate, we delete direct identifiers, deidentify or pseudonymize retained records, restrict their use to the reason they are retained, and delete them when the applicable retention period expires.

We keep financial, tax and transaction records for seven years after the end of the tax year they relate to. This is our own policy: US and Texas tax law require between three and six years for most of these records, and we keep them slightly longer so they exist for the full period an assessment can be made. Evidence of an EU reverse-charge sale is kept for ten years from the end of the year of the sale. Your messages and applications stay until you delete them or delete your account. When you delete your account, conversations and applications you took part in stay with the other people in them, with your name and contact details removed, until they delete their own accounts too. Files you send in messages, such as a resume, are deleted when you delete the message or your account. Records used only to stop a one-time offer being claimed twice are reduced to a one-way code and deleted after 24 months. Operational logs are deleted after thirteen months. Records under an active legal hold may be kept longer.

Operational logs — usage analytics, error reports and in-app notifications — are deleted automatically after 13 months. We chose thirteen rather than twelve so that year-on-year comparisons stay possible; nothing analytical needs them for longer, so nothing keeps them for longer. This happens on a daily schedule in our database, not on request.

We use encryption in transit (HTTPS), access controls, row-level database security, and reputable infrastructure providers. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security, but we work to protect your information and will notify you and regulators of a breach where the law requires.

No. The Services are intended for users who are at least 18 years old. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.

If you are in the EEA, UK, or a similar jurisdiction, you have the right to access, correct, delete, restrict, or object to our processing of your personal data, to data portability, and to withdraw consent at any time. You may also lodge a complaint with your local data protection authority.

Where we keep records after you delete your account, we rely on our legitimate interests (including meeting our US tax obligations and preventing fraud), the legitimate interests of the other party to a shared conversation, and the establishment, exercise or defence of legal claims. You may object to any of these; we will stop unless we have compelling grounds or need the data for a legal claim.

Most of these you can exercise yourself in Dashboard → Account. For anything else, email [email protected] and we will respond within the time the law requires.

Yes. If you are a resident of California, Virginia, Colorado, Connecticut, Utah, or another US state with a privacy law, you may have the right to know what personal information we collect, to access and delete it, to correct it, and to opt out of “sale” or “sharing” and targeted advertising.

We do not sell or share your personal informationas those terms are defined under the CCPA/CPRA, and we do not use it for cross-context behavioral advertising. California’s “Shine the Light” law: we do not disclose personal information to third parties for their own direct marketing. To exercise a right, contact [email protected]; we will not discriminate against you for doing so.

Most browsers offer a “Do-Not-Track” (DNT) setting. There is no finalized industry standard for how to respond to it. We do not track you across third-party sites in the first place, and we only set analytics cookies after you opt in — so choosing “Essential only” in our banner, or declining analytics, achieves the same result regardless of your DNT setting.

We operate globally and our providers may process data in the United States and other countries. Where personal data is transferred out of the EEA or UK, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses. By using the Services you understand your information may be processed in countries other than your own.

You can review and edit your profile, portfolio, company, and listings at any time from your dashboard, and permanently delete your account from Dashboard → Account. Your sign-in is destroyed and cannot be recovered. Your personal data is deleted, deidentified, or pseudonymized as described in retention. You can also request a copy of your data by emailing [email protected].

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, for material changes, provide additional notice. Continued use of the Services after an update means you accept the revised policy.

Questions about this policy or your personal information? Email us at [email protected]. We are the data controller for the personal information described here.