Privacy Policy

1. Introduction

JobCast (“JobCast,” “we,” “us,” or “our”) is committed to protecting the privacy of job seekers, employers, and visitors. This Privacy Policy describes the types of personal information we collect, how we process it, and the rights available to you under applicable laws, including the General Data Protection Regulation (GDPR) and the Pakistan Personal Data Protection Bill (PDPA 2023 draft).

2. Information We Collect

We collect personal information in the following ways:

• Information you provide directly: Account details, profile information, CVs/resumes, professional history, skills, job preferences, verification documents, billing details for premium services, and communications with our support teams.
• Employer-provided data: Company profiles, job listings, recruiter contact details, billing contacts, and feedback about candidates.
• Automatically collected data: IP address, device identifiers, browser type, operating system, pages viewed, referring URLs, session duration, and interactions with Platform features.
• Approximate location data: Country, city, or region inferred from IP address (for localisation, fraud prevention, and analytics).
• Information from third parties: Background check providers (where permitted), public professional profiles, or referrals from other users.

3. How We Use Information

We use personal information to:

• Deliver core services such as job search, job posting, messaging, interview scheduling, and notifications;
• Match candidates with relevant roles and surface suitable candidates to employers;
• Maintain and enhance account security, including fraud prevention and suspicious activity monitoring;
• Personalise content, job recommendations, and onboarding flows;
• Provide customer support, respond to requests, and resolve disputes;
• Analyse usage trends to improve Platform performance, accessibility, and new features;
• Comply with contractual and legal obligations, including employment, taxation, and anti-money laundering requirements;
• Send marketing communications where permitted by law. You may opt out at any time.

4. Legal Basis

Our processing activities rely on one or more of the following legal bases:

• Contractual necessity: Processing required to provide services under our Terms and any employer agreements.
• Legitimate interests: Improving Platform security, preventing fraud, conducting analytics, and tailoring the user experience when these activities do not override your privacy rights.
• Consent: Sending marketing updates, processing optional profile details, or enabling optional cookies and integrations. You can withdraw consent at any time through account settings or by emailing privacy@jobcast.pro.
• Legal obligation: Retaining certain records for regulatory, tax, or employment compliance, and responding to lawful requests from authorities.

5. Sharing & Disclosure

We share personal information only as necessary:

• Employers and job seekers: Candidate profiles, CVs, and application details shared with employers; job listing information displayed to job seekers.
• Service providers: Trusted processors supporting hosting, analytics, communications, storage, payments, background checks, and customer success. All suppliers sign data processing agreements.
• Corporate transactions: Information may transfer during mergers, acquisitions, or asset sales subject to confidentiality safeguards.
• Legal requests: We may disclose data to comply with applicable law, court orders, or to protect the rights, property, or safety of JobCast users.

We never sell personal data.

6. Cookies & Tracking Technologies

We use cookies, pixels, and similar technologies to operate and improve the Platform. Essential cookies maintain sessions and security; functionality cookies remember preferences; analytics cookies help us understand usage; and marketing cookies power optional audience insights. You can adjust preferences through browser controls, your JobCast account privacy settings, or by contacting us. See our Cookies Policy for detailed information.

7. Data Security

We employ administrative, technical, and organisational safeguards, including:

• TLS encryption in transit and encryption-at-rest for sensitive datasets;
• Role-based access controls, audit logging, and regular access reviews;
• Secure software development lifecycle, code reviews, and automated vulnerability scanning;
• Periodic penetration testing by independent assessors;
• Incident response runbooks, including a 72-hour notification target for notifiable breaches.

No system is completely secure. If we learn of a breach affecting your personal information, we will notify you in accordance with applicable law and describe remediation steps taken.

8. Data Retention

We retain personal information only for as long as necessary. Typical retention periods include:

• Active account data: Retained while your account remains open. Upon closure, core records are deleted or anonymised within 24 months unless legal obligations require longer retention.
• Job applications and hiring workflow data: Retained for 36 months to support ongoing recruitment and dispute resolution.
• Marketing preferences: Maintained until you opt out.
• Analytics data: Aggregated and anonymised within 24 months.
• Security logs: Retained for up to 18 months for fraud detection and compliance.

We may retain limited information to comply with legal obligations, resolve disputes, or enforce agreements.

9. Your Rights & Choices

Depending on your location, you may have the right to access, rectify, delete, restrict, or object to processing of personal data, as well as the right to data portability and to withdraw consent.

To submit a privacy request:

• Sign in and visit Account Settings > Privacy Controls to review or update preferences;
• Email privacy@jobcast.pro or info@jobcast.pro from the address linked to your account;
• Include the type of request, the data in question, and proof of identity if requested.

We acknowledge requests within 5 business days and aim to respond within 15 business days (or 30 days where law permits an extension). If we cannot fulfil a request, we will explain why.

10. Automated Decision-Making

JobCast uses automated systems to recommend jobs to candidates, suggest suitable candidates to employers, and detect fraudulent activity. These systems are regularly evaluated for accuracy and fairness. You may request information about the logic involved and demand human review of decisions that significantly affect you by contacting us.

11. International Transfers

Your information may be stored or processed outside your home country, including in Pakistan, the European Economic Area, or other jurisdictions where our service providers operate. When we transfer data internationally, we implement safeguards such as Standard Contractual Clauses, intra-group agreements, and risk assessments to ensure adequate protection.

12. Pakistan Data Protection Compliance

JobCast aligns with the Pakistan Personal Data Protection Bill (PDPA 2023 draft) and guidance issued by the National Commission for Personal Data Protection. We maintain records of processing activities, obtain consent where required, localise sensitive data when mandated, and appoint internal data protection leads responsible for compliance. Pakistani users may lodge complaints with the Commission once operational.

13. Third-Party Services & Vendors

We engage a limited number of subprocessors. Core categories include:

• Analytics: Google Analytics (usage insights) – data retained for 26 months with IP anonymisation features enabled.
• Communications: Transactional email and SMS providers used to send verification codes and alerts.
• Hosting & Infrastructure: Secure cloud hosting partners operating ISO 27001-certified data centres.
• Support tooling: Helpdesk and incident management systems that store ticket metadata.

Google AdSense & Advertising: We display advertisements through Google AdSense. Google may use cookies or device identifiers to serve personalised ads based on your visits to this and other sites. You can manage your preferences or opt out of personalised advertising at Google Ads Settings and review Google’s advertising policies at policies.google.com. Where required by law, we request your consent before loading AdSense scripts or marketing cookies.

A current list of vendors is available upon request. We vet each provider for security, privacy, and regulatory alignment.

14. Policy Updates

We review this Privacy Policy at least annually and whenever we introduce material changes to our processing activities. Updates will be posted on this page with a new “Last Updated” date. For significant changes, we will also notify registered users via email or dashboard alerts.

15. Contact & Complaints