Privacy Policy

We collect information you provide directly to us when you create an account, post a job, submit an application, or communicate with us. This may include your name, email address, phone number, professional information, resume data, and payment details.

We also automatically collect certain information when you use our platform, including your IP address, browser type, operating system, referral URLs, device information, pages viewed, links clicked, and the date and time of your visit.

Information we collect includes:

• Account Data: Name, email, password, profile photo, and role (employer/candidate).
• Profile Data: Resume, skills, work history, education, portfolio links, and preferences.
• Job Data: Job postings, applications, saved jobs, and search history.
• Payment Data: Billing address, payment method details (processed securely via Stripe).
• Usage Data: Log files, analytics data, and interaction patterns on our platform.

We process your personal data based on the following legal bases under the General Data Protection Regulation (GDPR):

• Contractual Necessity: Processing needed to provide our services (account management, job matching, application processing).
• Legitimate Interest: Platform improvement, fraud prevention, and marketing of relevant services.
• Consent: Email newsletters, marketing communications, and optional analytics cookies.
• Legal Obligation: Compliance with tax, employment, and data protection laws.

We use your personal data to operate and improve our platform, match candidates with job opportunities, process payments, send notifications, and provide customer support. We do not sell your personal data to third parties.

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including encryption of data in transit (TLS/SSL) and at rest, regular security assessments, access controls, and employee training.

Specific security measures include:

• All data transmitted between your browser and our servers is encrypted using TLS 1.3.
• Passwords are hashed using industry-standard bcrypt algorithms and are never stored in plain text.
• Payment information is processed through PCI-DSS compliant payment processors (Stripe).
• Regular penetration testing and vulnerability assessments are conducted.
• Access to personal data is restricted to authorized personnel on a need-to-know basis.

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements.

Cookies are small text files stored on your device when you visit our website. We use cookies to enhance your experience, analyze site traffic, and personalize content.

You can control cookies through your browser settings. Disabling certain cookies may limit your ability to use some features of our platform.

We may share your information with third-party service providers who perform services on our behalf. These providers are contractually required to protect your data and may only use it for the purposes we specify.

• Payment Processing: Stripe processes all payment transactions securely.
• Email Services: We use trusted email service providers for transactional and marketing emails.
• Cloud Hosting: Our platform is hosted on secure, certified cloud infrastructure.
• Analytics: We use analytics tools to understand usage patterns and improve our services.

We will never sell your personal data to third parties for their own marketing purposes. We may disclose your information if required by law or in response to valid legal processes.

Under the General Data Protection Regulation (GDPR) and other applicable data protection laws, you have the following rights regarding your personal data:

To exercise any of these rights, please contact us at privacy@flexes.work. We will respond to your request within 30 days.

If you have any questions about this Privacy Policy or our data practices, please contact our Data Protection Officer: