Privacy Policy

The Short Version

We collect only the information we need to run TrueJob: your account details, the data you choose to share, and basic usage signals that help us improve the product. We don't sell your personal data, and we use a small number of well-known third-party services to handle things like payments, email, hosting, and analytics. Each one is listed in detail below.

You have full rights over your data under GDPR, CCPA, and similar laws — including the right to access, correct, export, or delete what we hold. The contact details for those requests are at the bottom of this page.

Who's Responsible (Data Controller)

TrueJob, Inc. — 200 South 1st Street, Ann Arbor, MI 48104, United States.

Owner contact email: contact@truejob.com

What We Collect

Across all services and features, the categories of personal data we may collect are:

• all user data at rest and in flight
• approximate geographic position
• basic request metadata
• billing address
• browser fingerprint
• browser info
• browser/device info
• clicks
• conversion events
• data on the services still running there
• domain queried (not user data)
• email
• email address
• error context
• error rates
• form submissions
• github profile basics
• ip address
• ip address; only shares the url the user clicked to share
• linkedin profile basics
• message content
• mouse movement
• name
• page url
• page view
• page views
• payment card (tokenized)
• request metadata
• request paths
• response status
• response time
• scroll
• timing
• uploaded files
• usage signals
• user id (not personal data)

Why We Use Third Parties

We don't reinvent everything — we use established service providers for things like payments, hosting, and email. Each provider only receives the data they need to do their job, and each is bound by their own privacy and security commitments. The full list is below, grouped by what role they play.

Essential

Required for the site to function. These cannot be disabled.

• Stripe Server + browser

  Payment processing for per-job posting charges and portal subscriptions. Stores tokenized card data only; raw card details never reach TrueJob servers.

  Personal data: name, billing address, email, payment card (tokenized)

• Google reCAPTCHA Browser

  Spam and abuse prevention on the contact form and account registration. Without it, the site would be overrun by bot signups.

  Personal data: usage signals, IP address, browser fingerprint

• SendGrid (Twilio) Server-side

  Outbound transactional email — account confirmation, password reset, job application notifications, and similar.

  Personal data: email address, message content

• Amazon S3 Server-side

  Storage for user-uploaded files — company logos, resume images, and other attachments.

  Personal data: uploaded files

• DigitalOcean Server-side

  Primary cloud hosting provider. TrueJob's application servers and databases run on DigitalOcean infrastructure.

  Personal data: all user data at rest and in flight

• Heroku (Salesforce) Server-side

  Legacy hosting platform; historically a primary host, currently used for a small subset of services.

  Personal data: data on the services still running there

Functional

Improve usability — maps, logos, social sign-in, and similar conveniences.

• Google Maps Browser

  Static map previews shown in location tooltips when hovering over a city or company location.

  Personal data: approximate geographic position, IP address

• Clearbit Logo API Browser

  Fetches company logos by domain when a company hasn't uploaded their own. Provides a visual identity for company cards.

  Personal data: domain queried (not user data)

• Cloudflare Browser

  CDN-hosted iframe-resizer script used by the embed widget so partner sites can host the TrueJob job board at the right height.

  Personal data: IP address, basic request metadata

• LinkedIn (Sign in with LinkedIn) Browser

  Lets users sign up or sign in using their LinkedIn account. Only triggered when the user clicks "Sign in with LinkedIn"; not loaded preemptively.

  Personal data: LinkedIn profile basics, email

• GitHub (Sign in with GitHub) Browser

  Lets users sign up or sign in using their GitHub account.

  Personal data: GitHub profile basics, email

Analytics

Help us understand how the site is used so we can improve it.

• Facebook Pixel (Meta) Browser

  Conversion tracking — measures whether visitors who arrived from a Facebook ad completed signup or applied to a job.

  Personal data: page views, conversion events, IP address, browser info

• LinkedIn Insight Tag Browser

  Conversion tracking for LinkedIn campaigns — same purpose as the Facebook Pixel, scoped to LinkedIn traffic.

  Personal data: page views, conversion events, IP address

• FullStory Browser

  Anonymized session replay used to debug UX problems. Recording is disabled for sensitive form fields and bots.

  Personal data: mouse movement, clicks, scroll, page view, browser/device info

• AgileCRM Browser

  Lead management — tracks contact-form submissions and identifies prospects for sales outreach.

  Personal data: name, email, page views, form submissions

Marketing

Power social-network share buttons and similar marketing tools.

• Facebook SDK Browser

  Powers the "Share to Facebook" dialog on job posts and company pages.

  Personal data: IP address; only shares the URL the user clicked to share

• Twitter / X Widgets Browser

  Embedded tweets on testimonial pages and the "Share to Twitter" button on job posts and company pages.

  Personal data: IP address, page URL

Infrastructure

Servers, monitoring, and email delivery — operate in the background.

• Rollbar Server-side

  Error tracking. Captures exceptions raised in the application so engineers can fix bugs.

  Personal data: error context, request metadata, user ID (not personal data)

• New Relic Server-side

  Application performance monitoring. Tracks request latency, database query times, and server health.

  Personal data: request paths, timing, error rates

• Pingify Server-side

  Uptime monitoring — checks the site is up from multiple geographic locations and pages on-call when it's not.

  Personal data: response status, response time

• Pulsetic Server-side

  Secondary uptime monitoring — same purpose as Pingify, used as redundancy.

  Personal data: response status, response time

Your Rights

Under GDPR, CCPA, and similar privacy laws, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Export your data in a portable format
• Request deletion of your data
• Object to or restrict how we process your data
• Withdraw consent at any time (where consent is the legal basis for processing)
• Lodge a complaint with your local data protection authority

To exercise any of these rights, email contact@truejob.com and we'll respond within 30 days.

Data Retention

We keep personal data only as long as we need it to provide the service or to meet a legal obligation. If you delete your account, we remove your personal data from active systems within a reasonable timeframe, retaining only what we're legally required to keep (e.g., transactional records for tax purposes).

Children

TrueJob isn't directed at children under 13. We don't knowingly collect personal data from anyone in that age group. If you believe a child has provided us with personal data, contact us and we'll remove it.

International Transfers

Our servers are operated in the United States by DigitalOcean and (historically) Heroku. If you're accessing TrueJob from outside the U.S., your data will be transferred to and processed there. Where required by EU or UK law, transfers are covered by standard contractual clauses with the relevant providers.

Changes to This Policy

We may update this policy from time to time. The "last updated" date at the bottom of this page reflects the most recent change. For material changes, we'll notify users via email or an in-app notice.

Contact Us

Questions about this policy, or wanting to exercise any of the rights above? Reach us at contact@truejob.com , or by mail at the company address above.

Last updated: June 2026.