Privacy Policy
1. Data We Collect
Marketing site: email addresses (newsletter, waitlist, contact, ROI submissions), contact form submissions, ROI calculator inputs, browser analytics (Plausible — cookieless). Digital store: buyer name, email, billing address (processed by Stripe — we do not store payment card data). SaaS application: organization name, user email, job architecture data (families, levels, bands), benchmark selections, audit log entries, and if Business tier — employee names and compa-ratios.
2. How We Use Your Data
Marketing data: send newsletters and compliance updates (with unsubscribe); notify you of product launches; analyze site usage via Plausible. SaaS data: deliver the service; provide customer support; improve product features. We do not sell your data to any third party.
3. Third-Party Services
Supabase (database + auth, servers in AWS us-east-1); Vercel (hosting); Stripe (payments — PCI-DSS Level 1 certified); Resend (transactional email); Plausible (cookieless analytics, servers in EU); Sentry (error tracking — anonymized stack traces only). Each third party has its own privacy policy.
4. Cookies
jobbands.com uses no tracking cookies. Plausible analytics runs cookieless. The SaaS app (app.jobbands.com) uses Supabase Auth session cookies (essential, first-party, no tracking) and a rv_admin_mfa admin verification cookie (essential, first-party, 1-hour expiry). If Google Analytics 4 is enabled (NEXT_PUBLIC_GA_MEASUREMENT_ID set), see the Cookie Policy for the full cookie inventory.
5. Your Rights
Under PIPEDA (Canada) and applicable U.S. state privacy laws: you have the right to access your data, request correction, and request deletion. Email eddy@jobbands.com with "Privacy Request" in the subject line. We respond within 30 days.
6. Data Retention
SaaS data retained for the subscription term plus 90 days post-cancellation. Audit log records retained for 3 years to support compliance documentation. Email data retained until you unsubscribe or request deletion.
7. Contact
eddy@jobbands.com