Privacy Policy
Last updated: 2026-09-20
Your privacy is important to us. This policy explains how we handle your data.
Data controller
The JobCrawls website and related services are operated by TechTactics Oy (Finland), which acts as the controller for personal data described in this policy. For questions, data subject requests, and security reports, contact privacy@jobcrawls.com. See also the Contact page for response-time expectations.
Cookies and consent
We use essential first-party cookies and similar storage for sessions, security, and preferences (for example theme and saved jobs). We load Ahrefs Web Analytics for aggregated, privacy-oriented traffic measurement; it does not use cookies or collect identifiable personal data, so it does not require cookie consent. Analytics cookies and scripts (Google Analytics 4) load only if you accept them; you can change or withdraw consent anytime using Cookie settings in the site footer. Your choice is stored in a first-party cookie (jc_consent_v1). Separately, we use Sentry for error monitoring; optional session replay for diagnosing issues only loads once you accept analytics cookies, and is not used for advertising.
| Cookie | Purpose | Duration |
|---|---|---|
| jc_session | Essential — keeps you signed in | 90 days |
| jc_consent_v1 | Essential — remembers your cookie choice | 180 days |
| jc_account_created / jc_signed_in | Analytics signal — a one-time marker for account creation or sign-in | 10 minutes |
| jc_qa_exclude | Analytics exclusion — marks staff devices used for testing so internal traffic is not counted | 180 days |
Data Collection and Use
JobCrawls collects the information needed to operate the job-search service you use: your account and profile details (such as name, email, work history, education, and skills), the CV or documents you upload, and your activity on the site such as saved jobs, saved searches, and job applications. If you opt in to our optional AI features, we also process the CV and cover-letter content you provide to generate suggestions. Separately, and only with your consent, we use aggregated analytics to understand how visitors use our site so we can improve it. We only collect data that is necessary for these purposes.
Legal basis for processing
We rely on different legal bases depending on the purpose: providing your account, profile, and job-search features rests on performance of a contract with you (Art. 6(1)(b) GDPR); sending job-alert emails and other marketing communications rests on your consent (Art. 6(1)(a)), which you can withdraw at any time; security, fraud-prevention, and service-reliability logging rests on our legitimate interest (Art. 6(1)(f)); and analytics cookies load only once you give consent (Art. 6(1)(a)). Where we ask for consent, you are always free to withdraw it without affecting the lawfulness of processing carried out before withdrawal.
Analytics
We use Ahrefs Web Analytics for aggregated site usage statistics; it does not use cookies or collect identifiable personal data. When you opt in via our cookie banner, we also use Google Analytics 4 to collect additional information about how you use our website, including pages you visit and searches. That data is used solely for improving our services. If you do not opt in, Google Analytics is not loaded. Search on our site runs on our own, self-hosted search infrastructure (not a third-party search service), so searches are not shared with an external search-analytics vendor.
Other service providers
We use Auth0 for sign-in and authentication. In the profile’s optional AI features (for example CV tailoring, cover-letter drafting, profile suggestions), we send content from your profile to OpenAI to generate the response. Maps showing commute times use Mapbox and Digitransit based on the starting point you provide. Email notifications and job alerts are sent via Amazon SES from the same AWS account the rest of the service runs on. If you use our mobile app, push notifications and app updates are delivered via Expo’s infrastructure, which receives your device’s push token. Listing text and job ads submitted by employers may be machine-translated into English, Finnish, or Swedish; we use OpenAI to produce these translations, and the original-language version is authoritative where one exists. We also use Amazon Web Services for hosting, storage, and email delivery in the EU (eu-central-1); Sentry for error monitoring and, only with your analytics consent, session replay for diagnosing problems; Google Analytics 4 and Ahrefs Web Analytics for aggregated usage statistics; Google Fonts to serve web fonts; Discord, which receives internal notifications about product events that contain no names, email addresses, or message content; and, if you sign in with Google or Microsoft, the identity handshake is handled by that provider through our authentication provider. Some of these providers process personal data outside the European Economic Area: for example, Sentry (error monitoring) and Mapbox (maps) process data in the United States. Where personal data leaves the EEA, we rely on the Standard Contractual Clauses issued by the European Commission, and on the EU–U.S. Data Privacy Framework for providers that participate in it (for example Sentry). Our Amazon Web Services hosting is in the EU and is covered by the AWS data processing addendum. Service providers that process personal data on our behalf do so under data processing agreements and only on our instructions.
Employers and recruiters
We also provide services to employers and recruiters. If you use the employer portal, a hosted careers page, or contact us through an employer enquiry, we process your name, work email address, company, and role; the content you add or import (job ads, careers-page text, branding, and the link from your site to your careers page); your activity in the portal; and any message you send us. For employer accounts and the services you sign up for, the legal basis is performance of a contract (Art. 6(1)(b)). For inbound enquiries and for records of who we work with, it is our legitimate interest in answering you and running our business (Art. 6(1)(f)). Content you supply or import is your responsibility to keep accurate and lawful.
Job listings and third-party data
JobCrawls collects job listings from many sources — public APIs like Finland’s Työmarkkinatori (TE Services), and directly from employers’ own careers pages and applicant tracking systems. Any of these listings may include employer or recruiter contact details (such as a name, email address, or phone number) that the employer or recruiter published themselves as part of the listing. See our recruiter contact info page for why we show this and the legal basis we rely on. If you are a recruiter or employer contact and want a listing’s contact details corrected or removed, contact us at privacy@jobcrawls.com.
AI assistant (connector) access
JobCrawls also operates a public, read-only API (the "JobCrawls connector") that lets AI assistants such as Claude search and retrieve job listings on a user's behalf, for example when someone asks an assistant to find jobs in Finland. It requires no login and exposes four read-only actions: searching public listings, listing the available search filters, retrieving one listing's details, and estimating Finnish net pay from figures you supply. It receives only the search terms, filters, listing id, or salary-calculator inputs needed to answer the request and processes them in memory to serve it. It does not access an AI assistant's chat history, files, or memory beyond those parameters, and we do not sell this data or use it for advertising. Like the rest of our infrastructure, requests may be recorded in short-lived operational logs for reliability and abuse prevention only. The connector is intended for job seekers and is not directed at children.
Data Protection and Retention
We implement appropriate security measures to protect your data from unauthorized access, alteration, disclosure, or destruction. We keep personal data only as long as it is needed for the purposes described in this policy or as required by law. An account that has been inactive for 12 months is deleted, together with the data associated with it. When you delete your account yourself, the account and its data are deleted immediately, and our backup copies expire within 35 days, matching our database point-in-time-recovery window. See our account deletion page for details. We keep employer enquiries — your name, work email address, company, and message — for two years, and this period resets if you begin a new engagement with us.
Your Rights
As a user in the EU, you have the right to request access to your personal data, correction of it, and restriction of or objection to its processing. You can delete your account and its data yourself at any time — see our account deletion page. Access, correction, restriction, and objection requests are handled manually today, not through a self-service tool. You also have the right to lodge a complaint with a data protection supervisory authority — in Finland, the Office of the Data Protection Ombudsman (tietosuoja.fi) — or with the supervisory authority in your own EU member state of residence. To make any of these requests, please contact us at hello@jobcrawls.com.
Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page and become effective immediately upon posting. If you have any questions or concerns, please contact us at the email above.