Privacy Policy

This policy explains what personal information Jobily collects when you use jobily.ca, why we collect it, how long we keep it, and the rights you have over it.

We have tried to write it to be read rather than skimmed. If anything is unclear, our Privacy Officer will explain it — see section 13.

Jobily is an AI-assisted Canadian job platform, operated by Haulor Inc., which is the organisation accountable for the personal information described in this policy.

Our Privacy Officer can be reached at privacy@jobily.ca.

Your account. Your name, email address, and password. Passwords are stored hashed and are never readable by us.

What you add. Your resume and its contents, work history, education, skills, job preferences, and anything else you enter in your profile or send with an application.

Employer accounts. Company details and the contact information of the person who administers the account.

How you use the service. Pages viewed, searches run, jobs opened and saved, and standard technical information such as IP address, browser, and device type.

Billing. Your billing name and address. Card numbers are entered directly with our payment processor and never reach our systems.

Messages to us. Support requests and any correspondence you send.

• To create and run your account
• To match you with relevant jobs and explain why they fit
• To show your profile to employers when you have chosen to be visible
• To send job alerts, application updates, and service notices
• To take payment and issue receipts
• To answer your support requests
• To detect and prevent fraud, abuse, and unauthorised access
• To meet our legal obligations
• To improve the product, using aggregated information that does not identify you

We do not use your personal information for targeted advertising, and we do not sell or rent it.

Several features — resume scanning and scoring, resume and cover letter generation, career coaching, and job match scoring — work by sending the relevant content, such as your resume text and a job description, to a third-party AI provider that processes it in the United States.

That provider generates the response and nothing more. Personal information submitted through these features is not used to train AI models, and our agreement with the provider requires it to be used only to answer the request.

AI output is a suggestion. Match scores and resume feedback are recommendations only, and hiring decisions rest with employers. You can use Jobily without AI features — job search and browsing work without them.

We do not sell your personal information. We share it only as described here.

Service providers. We use third-party providers to run the platform — hosting and infrastructure, payment processing, email delivery, AI processing, and job listing data. They process personal information on our behalf under written data processing agreements, and may use it only to provide those services to us. Most operate in the United States, so your information is processed there; see section 12.

You can ask our Privacy Officer for the categories of providers we use and the countries your information is processed in.

Employers. If you apply to a job posted directly on Jobily by an employer, that employer can see your name, resume, and application status, and may see your match score for their role. You are told before you apply to an employer-direct posting.

Legal requirements. We may disclose information when required by law, court order, or a lawful request from a Canadian government authority. We will tell you where we are legally permitted to.

Business transfers. If the business is acquired or merged, your personal information may transfer as part of that transaction. You will be told, and you can delete your account before the transfer takes effect.

We keep your information for as long as your account is open. When you delete your account, your personal information is anonymised or removed within 30 days.

Some records outlive that because they have to: payment records, which Canadian tax law requires us to keep for seven years; security logs, kept for a limited period so unauthorised access can be investigated; and support correspondence, kept for two years.

We use technical and organisational safeguards appropriate to the sensitivity of the information:

• Encryption in transit: everything between your browser and our servers is encrypted
• Encryption at rest: personal data stored in our databases is encrypted
• Access controls: access is limited to the people who need it, and administrative access requires additional authentication
• Monitoring: access to personal data is logged, and unusual access is investigated
• Abuse protection: sign-in attempts are rate-limited, and repeated failures lock the account

No security measure is perfect. If a breach ever created a real risk of significant harm, we would notify you and the Office of the Privacy Commissioner of Canada, as PIPEDA requires.

Under PIPEDA you may ask us to:

• Give you a copy of the personal information we hold about you
• Correct anything inaccurate or incomplete
• Delete your account and the personal information attached to it
• Withdraw consent for a particular use, which may limit some features

Email privacy@jobily.ca and we will respond within 30 days. We may need to verify your identity first.

We use cookies to keep you signed in, remember your preferences, and understand in aggregate how the site is used. We do not use advertising cookies or social media tracking pixels, and we do not allow third parties to track you across other sites.

You can clear or block cookies in your browser. Signing in will not work without the essential ones.

Jobily is not intended for anyone under 18, and we do not knowingly collect their personal information. If you believe we have, tell us and we will remove it.

As described in section 6, some of your personal information is processed in the United States by our service providers. Privacy law there differs from Canadian law and may offer different protection.

Where information is transferred internationally, we rely on data processing agreements requiring protection comparable to that required under PIPEDA. By using Jobily you consent to that transfer for the purposes described in this policy.

If we make a material change to this policy, we will email you and post a notice on the site before it takes effect. The dates at the top show when it last changed.

If you are unhappy with how we have handled your information, contact our Privacy Officer first — most things are resolved that way. You can also complain to the Office of the Privacy Commissioner of Canada, or to your provincial privacy commissioner.