Privacy Policy
Last updated: 6/10/2026
1. Introduction
Jobzy Oy ("we", "our", or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, share, and protect your information when you use our Jobzy platform and services.
We are the data controller for the personal data we process about you. This policy complies with the EU General Data Protection Regulation (GDPR) and other applicable privacy laws.
2. Information We Collect
2.1 Information You Provide
- Account information (name, email, phone number)
- Profile information and preferences
- Service requests and communications
- Payment and billing information
- Reviews and feedback
2.2 Information Automatically Collected
- Device and browser information
- IP address and location data
- Usage patterns and interactions
- Cookies and similar technologies
3. How We Use Your Information
We process your personal data for the following purposes:
- Service Provision: To provide, maintain, and improve our platform
- Communication: To communicate with you about our services
- Safety and Security: To ensure platform safety and prevent fraud
- Legal Compliance: To comply with legal obligations
- Marketing: To send promotional materials (with your consent)
4. Legal Basis for Processing
Under GDPR, we process your personal data based on:
- Contract: To fulfill our contractual obligations to you
- Legitimate Interest: To improve our services and ensure security
- Consent: For marketing communications and optional features
- Legal Obligation: To comply with applicable laws
5. Information Sharing
We may share your information with:
We never sell your personal data to third parties.
- Service providers who help operate our platform (see Section 6, Data Processors)
- Other users as necessary to facilitate services
- Legal authorities when required by law
- Business partners with your consent
6. Data Processors
We use the following service providers as data processors. They process personal data on our behalf and only for the purposes described below:
- Supabase — database and user authentication; data is hosted by Supabase. Data shared: waitlist signup and account data such as name, email address, and phone number. Supabase privacy policy
- Google Cloud Platform (Cloud Run) — hosting of our application in the europe-north1 region (Finland). Data shared: all data processed by the platform, including IP addresses and request data. Google Cloud privacy notice
- Upstash — rate limiting and caching (Redis). Data shared: technical request identifiers, such as rate-limit keys derived from IP addresses, and temporarily cached signup data. Upstash privacy policy
- Sentry (Functional Software, Inc.) — error monitoring. Data shared: technical error reports; we remove personal data such as email addresses and phone numbers before transmission. Sentry privacy policy
- Google reCAPTCHA — protection of the signup form against bots and abuse. Data shared: device and interaction data processed by Google. Google privacy policy
- Google Analytics 4 — usage analytics. Data shared: usage data such as pages visited, and device and browser information. Google privacy policy
Where a processor handles personal data outside the European Economic Area, the transfer is protected by the safeguards described in Section 11 (International Data Transfers).
7. Your Privacy Rights
Under GDPR, you have the following rights:
To exercise these rights, contact us at privacy@jobzy.fi.
- Access: Request access to your personal data
- Rectification: Correct inaccurate personal data
- Erasure: Request deletion of your personal data
- Portability: Receive your data in a structured format
- Restriction: Limit how we process your data
- Objection: Object to processing based on legitimate interests
- Withdraw Consent: Withdraw consent for processing
8. Data Retention
We retain your personal data only as long as necessary for the purposes outlined in this policy or as required by law. Account data is typically retained for 7 years after account closure for legal and regulatory compliance.
9. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encryption, access controls, and regular security assessments.
10. Cookies and Tracking
We use cookies and similar technologies in three categories. When you first visit, a consent banner asks which categories you allow:
- Necessary: a first-party cookie named cookie_consent that stores your consent choices so the site remembers your decision. It is kept for approximately 6 months and is required for the consent mechanism to work.
- Analytics (Google Analytics 4): usage analytics. Off by default and loaded only after you opt in.
- Fraud prevention (Google reCAPTCHA): protects the signup form against bots and abuse. Off by default and loaded only after you opt in.
You can change your choices at any time via the "Cookie settings" link in the footer. You can also manage or delete cookies through your browser preferences.
11. International Data Transfers
Your data is primarily processed within the European Economic Area (EEA). Any transfers outside the EEA are protected by appropriate safeguards such as adequacy decisions or standard contractual clauses.
12. Policy Updates
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through our platform. Continued use of our services after changes constitutes acceptance of the updated policy.
13. Contact Information
For questions about this Privacy Policy or to exercise your rights, contact us:
Jobzy Oy
Data Protection Officer
Email: privacy@jobzy.fi
You also have the right to lodge a complaint with the Finnish Data Protection Authority if you believe we have violated your privacy rights.