Privacy Policy

Jobiba AI Labs, Attn: Bhagwati Suthar, Thana, Tehsil Kherwara, District Udaipur, Rajasthan 313804, India, runs Jobiba and decides how the data described here is used. Privacy requests and grievances go to Bhagwati Suthar, the Privacy and Grievance Officer.

Privacy and Grievance Officer

Bhagwati Suthar, bhagwati@jobiba.com. Grievance Officer under India's IT Rules 2021 and the DPDP Act 2023; privacy contact for data requests from every country.

Grievances

Acknowledged within 24 hours and resolved within 15 days of receipt.

Privacy requests

Answered within 30 days, wherever you live.

Everything else

info@jobiba.com

Candidates sign up with Google or LinkedIn, or with a name, email address and password; employers add a company name and work email. Depending on what you use, Jobiba also stores the profile details, resumes, applications, saved jobs, alerts, employer and job information and messages you choose to add. Jobiba never asks job seekers for an ID number (such as Aadhaar, PAN, Social Security or passport), bank or card details, or any payment to apply.

Jobiba processes technical and usage information needed to operate, secure and improve the service, such as request metadata, device or browser information, preferences and interaction events.

Employers and feed partners may provide job information such as titles, descriptions, locations, compensation, application URLs and external references. This information is processed to operate search, ingestion, quality, analytics and related platform features.

When you apply, the employer receives your application: your name, email address, phone number, resume, the city or region in your profile and any answers you gave. Your career profile has a visibility setting (Public, Employers only or Private) in your Career Profile; a Public profile can be opened by anyone with its link.

Employers with Talent Search can find your profile only when you turn on Open to work in your Career Profile and its visibility is Public or Employers only. They see your city, region or country, never your street address, phone number or email address. An employer can send you a message through Jobiba; if you choose “I'm interested”, Jobiba shares your email address with that employer only. You can report a message or block the company, and a blocked company cannot contact you through Jobiba again. Jobiba limits how many employer messages you can receive each week. Jobiba keeps a log of employer talent searches (the employer, who searched, the kind of filters used and the number of results, never what they typed) for 180 days, to limit and investigate misuse.

A job alert stores your email address, the role you asked for and its place. When an alert names no place, Jobiba sends jobs near you: it uses the first preferred city in your profile, otherwise the approximate city, region and country of the connection you created the alert from (Cloudflare's city-level estimate, never your precise location). The apply form has a box to email you new jobs for the role you are applying to, once a day. It starts ticked, except in the EEA, the United Kingdom, Switzerland and Canada, where it starts unticked and you tick it yourself; if the box is unticked when you apply, no alert is set up. Alerts are shared between the website and the app. Jobiba keeps a record of which jobs it has sent you, so no job is sent twice; that record is deleted after 90 days. To tailor an alert email, Jobiba checks whether your profile has a CV, a phone number, a short bio and at least three skills (to suggest what is missing), and whether you use the Jobiba app, that is, you signed in to it on a phone or set up the alert in it (then the email does not suggest installing it); neither check is shared with anyone. Every alert email has an unsubscribe link, and you can delete alerts in Alerts.

When you are signed in as a candidate, Jobiba records which jobs you are shown, open, read, search for or hide, and uses that history only to rank the jobs recommended to you. It is not shown to employers. Individual events are deleted after 120 days, and the ranking summary after 180 days without activity.

Our sign-up, sign-in, password reset and job alert forms use Cloudflare Turnstile to block automated abuse; Cloudflare processes the browser and device signals it checks under its Turnstile Privacy Addendum. How the site is protected is described on Security.

Anyone can ask Jobiba to show them the personal data it holds about them, correct it, delete it, give them a copy they can take elsewhere, or stop using it for a purpose they object to, including advertising. Jobiba answers privacy requests within 30 days, from every country.

• Do it yourself: signed-in job seekers can download their data and delete their account in Account settings. Employers can download their account data and request deletion there.
• Or write to us: bhagwati@jobiba.com (Bhagwati Suthar, Privacy and Grievance Officer). To protect your account, Jobiba acts on a request about an account when it comes from that account's email address, or after you confirm it from that address.
• Turn off ad personalisation and analytics: use “Your privacy choices” at the bottom of any page, or send Global Privacy Control from your browser.

Local laws describe these rights in their own words. Jobiba answers the same requests from everyone:

• European Union and United Kingdom (GDPR): access, correction, erasure, restriction, portability, objection, and withdrawing consent at any time. You can also complain to your data protection authority.
• India (Digital Personal Data Protection Act 2023 and IT Rules 2021): access, correction and erasure, grievance redressal and nominating someone to act for you. Bhagwati Suthar is the Grievance Officer: a grievance is acknowledged within 24 hours and resolved within 15 days of receipt. You can also approach the Data Protection Board of India.
• United States, including California (CCPA/CPRA): know, delete and correct your data, opt out of the sale or sharing of personal information, and limit the use of sensitive personal information, without being treated differently for asking. An authorised agent may ask for you. See “Selling and sharing” below.
• Singapore (PDPA): access, correction and withdrawing consent. The person who handles data requests is Bhagwati Suthar, bhagwati@jobiba.com.
• United Arab Emirates (PDPL): access, correction, erasure, restriction, objection and portability.
• Canada (PIPEDA): access and correction, and a complaint to the Office of the Privacy Commissioner of Canada.
• Australia (Privacy Act 1988): access and correction, and a complaint to the Office of the Australian Information Commissioner.

Job seekers delete their account themselves in Account settings, after typing a confirmation and entering their password (or signing in again). It takes effect at once:

Account and sign-in: Deleted

Your name, email address, password hash, linked Google or LinkedIn sign-in and every signed-in session. You are signed out on every device.

Career profile and files: Deleted

Your profile (phone, address, date of birth, pay, skills, experience, education), resumes built in Resume Studio with their saved versions, and every file you uploaded: resumes, photos and the application PDFs made for you.

Saved jobs, alerts and activity: Deleted

Saved jobs, job alerts sent to your address, app notifications and settings, saved searches, the job-recommendation history, salary watchlists, followed companies, and reviews, interview notes and salary notes you posted.

Applications you sent: Kept without your identity

Each application stays in the employer's list as "Deleted account" with its date and status, but your name, email address, resume link and screening answers are removed, and your message threads with employers are deleted. A copy an employer already downloaded or emailed outside Jobiba is held by that employer; ask them directly to delete it.

Job reports and salary contributions: Kept without your identity

Reports you made about job posts stay in the review queue without your name. Salary figures you contributed stay in the statistics with the link to your account removed.

Email delivery logs: Kept for a limited time

The record of emails sent to your address (address, subject, delivery status) is kept for 60 days after each email and then deleted automatically. If an email to you bounced or was marked as spam, your address stays on the do-not-email list so it is never emailed again.

Employer accounts are closed on request (Account settings, or info@jobiba.com). Jobiba deletes the account, its jobs and its company profile, and keeps invoices and payment records for the period tax and accounting law requires.

Jobiba does not sell personal data for money and does not give it to data brokers. Google AdSense may show ads based on your browsing (in the EEA, the United Kingdom and Switzerland only after you allow ads); under California law that can count as “sharing” personal information for advertising. Turn it off with “Your privacy choices” at the bottom of any page, or send Global Privacy Control: when your browser sends it, Jobiba tells Google not to personalise ads or use your data for advertising, on every visit.

In the EEA, the United Kingdom and Switzerland we ask first: Google Analytics does not load until you allow analytics, and Google AdSense does not load until you allow ads. Your browser checks your region with Cloudflare; if that check fails, we ask anyway. Elsewhere both services load after the page has finished loading, and you can still turn them off. Change your choice at any time, from any country, with “Your privacy choices” at the bottom of the page.

• jobiba_consent (Jobiba, 6 months): remembers your cookie and privacy choice. Only your browser reads it; it never changes the pages we send.
• jobiba_market, jobiba_candidate_market and jobiba_country_prompt (Jobiba): the job market you picked.
• Sign-in cookies (Jobiba): better-auth session cookies, jobiba_auth_return (where to return after sign-in) and admin_session (staff only).
• Google sign-in prompt (Google, signed-out visitors on public pages): Google's "Sign in with Google" prompt may appear after you start using a page; Google sets a g_state cookie to remember if you closed it. The same Google sign-in also backs the "Continue with Google" button in Smart Apply. Signing in through either sets the same Jobiba sign-in cookies.
• jobiba_mcp_consent (Jobiba, 10 minutes): protects the approval screen when you connect an AI assistant to Jobiba.
• recent_searches (Jobiba): your recent job searches, so the search box can offer them again.
• jobiba_client_runtime_repair (Jobiba, 30 days): records a one-time browser-cache repair after a faulty app update.
• cf_clearance (Cloudflare): set when Cloudflare shows a security check or when a Turnstile check on our sign-in, sign-up, password-reset or job-alert forms passes.
• Google Analytics (analytics): the gtag.js script and its _ga cookies count visits and pages viewed.
• Google AdSense (ads): the adsbygoogle.js script and Google's ad cookies show and measure ads. It does not load on sign-in, account, candidate, employer or admin pages.

Never send passwords, sign-in codes or API keys in an email to Jobiba. What Jobiba does to protect accounts and files, and how to report a vulnerability, is on Security.

When this policy changes, the date at the top of the page changes with it. The version published here is the current policy.