Privacy Policy

Your email address, the answers you give in the profile questionnaire (role, experience, languages, visa needs, target locations), your interactions with delivered jobs (viewed, applied, hidden) and basic product analytics events.

For security we also record your IP address (and the country derived from it) and basic device information — see “Security & fraud prevention” below.

To match job postings to your profile, deliver your digests, show your application statistics, and improve the product. We never sell your data and we run no third-party advertising.

We share data only with the processors that run the service:

• Supabase — database & authentication
• Vercel — hosting
• Stripe — subscription payments (card details go to Stripe, never to us)
• Resend — transactional & digest email delivery
• Apify — running the public-job-board scrapers
• PostHog — product analytics (only after you consent; see below)

PostHog is hosted in the United States, so accepting analytics involves a transfer of usage data to the US under the appropriate safeguards. Job postings themselves come from publicly available listings on job boards.

We use no advertising or tracking cookies. Product analytics (PostHog) is off by default and loads only after you click “Accept” on the cookie banner — nothing is stored or sent before then. Decline, and no analytics cookie is ever set. You can change your choice any time via “Cookie settings” in the footer.

We do set two strictly-necessary cookies that need no consent: your login session, and a random device identifier used only for fraud prevention (see below). Neither is used for advertising or cross-site tracking.

To keep the free service sustainable we prevent abuse — chiefly people creating many accounts to exhaust our job-scraping budget. For this legitimate interest we record, when you sign up and when you access the app: your IP address and the country we derive from it, a random device identifier (the cookie above), and a basic device fingerprint computed from your browser and hardware characteristics.

We use these signals solely to detect and block duplicate or automated sign-ups — never for advertising, profiling or building an ad identity. Short-lived sign-up-attempt logs are deleted within 7 days; the remaining signals are kept while your account exists and are removed when you delete your account.

Access, export, correction and deletion — any time. You can download all your data as JSON and delete your account from settings; deletion removes your profile and delivery history within 30 days. For anything else, email hello@relocantly.com.

Relocantly · hello@relocantly.com