bestjobs.fyi

Privacy Policy

Last updated: June 10, 2026

This Privacy Policy explains what we collect, why we collect it, and how we handle it when you use bestjobs.fyi (the "Service"). We try to collect as little as possible and never sell your data to third parties.

1. What we collect

We collect the following:

• Email address — only when you choose to sign in. This is used to send the magic-link sign-in email and to contact you about your account.
• Search queries — the text you type into the search box, plus parser/sort/view preferences. Stored so we can cache results, restore them on browser back-button, and let you re-run saved searches.
• Saved jobs, applied jobs, hidden jobs — when you click the corresponding buttons on a result.
• IP address — recorded with each request for rate-limiting and abuse detection. We don't link IPs to your long-term profile.
• Browser session cookie — a single HttpOnly cookie called bestjobs_sid, set after sign-in, that lets us recognize you across requests. It contains only an opaque session id; no tracking, no analytics.
• Subscription state (Pro users) — your Stripe customer id, subscription id, plan, status, and billing period. Payment-card details are NEVER stored by us; they live with Stripe.
• Search and click activity — we log queries you search, jobs you click in the results, and jobs you click "Apply" on, together with your IP address (see retention), browser family (e.g. "Chrome"), and country (inferred from your IP via our CDN's geolocation header). We use these to improve search ranking and to spot abuse. Signed-in users' activity is linked to their account; anonymous visitors are linked only to a random session id with no other PII.

We do NOT collect:

• Resumes, CVs, or work history.
• Personal browsing history outside our site.
• Marketing identifiers, third-party trackers, or ad cookies.
• Location data beyond what's inferred from your IP.

2. Why we collect it

• To run the Service — auth, search results, saved-state.
• To bill Pro subscribers (Stripe processes the payment).
• To prevent abuse (rate-limit attackers, block scrapers).
• To debug and improve the Service.

3. Who we share it with

We rely on a few third-party services to run bestjobs.fyi:

• Amazon Web Services (AWS) — hosting, database storage, email delivery, and LLM inference (Amazon Bedrock). Your queries may pass through Bedrock when you use the LLM parser. Searches are not retained by Bedrock per their service terms.
• Stripe, Inc. — payment processing for Pro subscriptions. Stripe receives your email, name, and payment-card details directly (we never see your card data). See stripe.com/privacy.
• Logo.dev — company logos shown on the homepage are fetched once by us and self-hosted; Logo.dev does not receive your traffic.
• Cloudflare — used for DNS resolution; routes requests to our infrastructure.
• Law enforcement — only if compelled by a valid legal process (e.g. subpoena, court order) and only the minimum data required.

We never sell your personal data. We never share it with employers, recruiters, or advertisers.

4. How long we keep it

• Account data (email, saved-state) — kept while your account is active, plus up to 30 days after deletion to handle restoration requests.
• Server logs (IP, request paths, user agents) — rotated within 30 days.
• Search and click activity — raw event rows are kept for 90 days, after which we keep only aggregate counts (e.g. "this query was searched N times") with no personal link. Your IP address is stored for 7 days then truncated to a /24 network prefix; your full user-agent is dropped on the same schedule. We don't share this data with third parties.
• Subscription records — kept for 7 years for tax / accounting compliance after the subscription ends.

5. Your rights

You can, at any time:

• Access — see what we have. Your account page already shows saved jobs and saved searches; for anything else, email legal@bestjobs.fyi.
• Export — request a copy of your data in JSON via the same email. We'll respond within 30 days.
• Delete — request permanent deletion via the same email. We'll process the request within 30 days, except for records we must retain for tax/legal reasons (subscription history).
• Object — if you're in a jurisdiction that grants additional rights (GDPR, CCPA, etc.), you have the right to object to processing, withdraw consent, or lodge a complaint with your local data-protection authority.

6. Cookies

We use the following cookies:

• bestjobs_sid — set after sign-in. HttpOnly (not readable by JavaScript), Secure (HTTPS only), SameSite=Lax (not sent on cross-site requests). Opaque session id with no personal data, expires 30 days after creation.
• bestjobs_anon — set on first visit. HttpOnly, Secure, SameSite=Lax. A random session id (no personal data, no link to your account) that lets us stitch your anonymous search and click events into a single funnel for search-quality analysis. Expires 1 year after creation.

We don't use tracking, advertising, or analytics cookies from third parties.

7. Security

We protect your data with industry-standard measures: TLS-encrypted connections, hashed session tokens, isolated AWS infrastructure, and least-privilege access for all internal tooling. No system is perfectly secure; we'll notify affected users within 72 hours of any breach we become aware of.

8. Children

bestjobs.fyi is not directed at children under 16. We don't knowingly collect data from children under 16. If you believe a child has provided us data, contact legal@bestjobs.fyi and we'll delete it.

9. International users

Our servers are in the United States. By using the Service from outside the United States, you consent to your data being transferred to and processed in the United States. For users in the European Economic Area or the United Kingdom, we rely on legitimate interest (running the Service you signed up for) and consent (for any optional data collection) as our legal bases.

10. Changes to this Policy

We may update this Privacy Policy from time to time. For material changes, we'll notify signed-in users by email at least 14 days before the change takes effect. The "Last updated" date at the top reflects the current version.

11. Contact

Questions, requests, complaints? legal@bestjobs.fyi. We aim to respond within 5 business days.

This Privacy Policy is a starting point, not legal advice. For full compliance with GDPR, CCPA, or other regional requirements, we recommend consulting a privacy professional.