SGJobseeker Privacy Policy

SGJobseeker operates this hiring marketplace from Singapore for candidates and employers in Singapore.

For privacy and PDPA-related requests, use the Contact form and select the privacy category. We aim to respond within 1–2 business days.

This policy applies to personal data we process when you use SGJobseeker’s websites and related services — including browsing jobs, creating an account, building a profile, applying for roles, posting jobs, or contacting support.

It does not cover employer websites, third-party job boards, or other services you may reach through external links.

Depending on how you use the product, we may collect:

Account and identity data — such as name, email address, password credentials (stored by our auth provider), and role (candidate, employer, or admin).

Profile and career data you submit — such as work history, education, skills, certifications, languages, résumé files, and other content you add to your profile.

Application and hiring activity — such as jobs you apply to, application status, and related messages or notes needed to run hiring workflows.

Employer and company data — such as company profile details, membership, and job postings.

Technical and security data — such as device/browser information, IP-related signals used for security and rate limiting, approximate logs needed to operate the service, and product analytics events (configured to avoid attaching email to analytics identify calls).

Support communications — such as messages you send through Contact, including privacy requests.

We use personal data to:

Provide the marketplace — account creation, job search, applications, employer posting, and hiring operations.

Match and surface relevant opportunities — based on profile and activity signals available in the product.

Secure the platform — authentication, email confirmation, abuse prevention, rate limiting, and fraud/scam risk reduction.

Communicate about the service — transactional messages such as account, security, and application-related notices.

Improve the product — aggregated or privacy-hardened analytics and diagnostics.

Meet legal and compliance needs — including responding to lawful requests and keeping records needed under Singapore law and the PDPA where applicable.

We aim to collect only what is needed for these purposes.

We do not sell personal data.

We share personal data only as needed to operate the marketplace:

With employers you interact with — for example, when you apply for a job, relevant application and profile/résumé information is made available to that employer’s authorised users for hiring.

With service providers (subprocessors) — companies that host or help us run the product under their own security programmes (see Subprocessors).

With advisers or authorities when required — if needed to comply with law, enforce our terms, or protect users and the platform.

If we reorganise the business in future, personal data may transfer to a successor operator under comparable protections, with notice where required.

We use carefully selected providers to operate SGJobseeker. The main ones that may process personal data for the product are:

Supabase — database, authentication, and file storage.

Vercel — application hosting and delivery.

Upstash — rate limiting and background job queueing.

Resend — transactional email delivery.

Sentry — error monitoring (with sensitive input masking).

PostHog — product analytics (privacy-hardened configuration).

These providers are engaged to process data for us as needed to deliver the service. Their independent certifications (where published) are held by the providers, not by SGJobseeker as a separate SOC 2 / ISO certification.

Application data for the marketplace is stored with Supabase in the Singapore region (ap-southeast-1), with encryption in transit (TLS) and provider-managed encryption at rest.

Some subprocessors may process limited data in other regions as part of delivering hosting, email, analytics, or monitoring. We limit what we send and configure those tools with privacy in mind.

We keep personal data only as long as needed for the purposes above, including security and dispute-handling needs.

Candidate accounts: if you delete your account, we promptly anonymise personal fields and remove résumé files. Remaining account records are hard-deleted after about two years through our PDPA retention sweep. Inactive candidate accounts may also be removed on a similar two-year schedule. Accounts with active employer/hiring memberships, and accounts that previously enabled jobseeker access from an employer account, are excluded from that candidate hard-delete sweep.

Applications: retained while needed for the employer’s hiring records; when a candidate is hard-deleted, identifying links are removed by design.

Employer and company records: retained while the company remains active on the platform; off-boarding deletion may be handled manually or through future product flows.

Consent and key operational records: retained as needed to demonstrate compliance and then removed in line with account deletion timelines.

Backups held by infrastructure providers may persist for a limited period under provider backup cycles.

Subject to the PDPA and applicable exceptions, you may request to:

Access personal data we hold about you.

Correct personal data that is inaccurate or incomplete.

Withdraw consent where processing is based on consent (this may affect whether we can keep providing related features).

Delete your candidate account in product settings, which triggers anonymisation and résumé removal as described above.

To make a request, use Contact and choose the privacy category, or manage available controls in your account. We may need to verify your identity before fulfilling a request.

We apply layered controls, including authentication with email confirmation, role checks, database row-level security, private résumé storage with ownership-checked access, rate limiting, and security monitoring.

No method of transmission or storage is perfectly secure. Please keep your login details confidential and tell us promptly if you suspect unauthorised access.

We use cookies and similar technologies that are needed for login sessions, locale preferences, security, and measuring product usage.

Analytics tools are configured to reduce unnecessary personal identifiers. You can control cookies through your browser settings; disabling some cookies may affect sign-in or core features.

SGJobseeker is intended for people who can enter a binding contract in Singapore. We do not knowingly collect personal data from children for marketplace accounts. If you believe we have collected such data in error, contact us and we will take appropriate steps.

We may update this policy as the product or legal requirements change. The “Last updated” date at the top will change when we do.

For material changes, we will provide additional notice on the site or by email where appropriate. Continued use of the service after an update means you should review the revised policy.