Your hiring plans stay private.

What you save

Joboy stores your account details so you can sign in, with passwords stored as hashes. Your employer profile can include your company name, description, website, logo link, industry, headquarters, and company size. We save your logo link without loading the image.

Agencies can manage client-company profiles, job drafts, and image libraries within their own account. Client-company profiles do not provide separate client logins.

When image uploads are enabled, your browser sends images to private staging storage for FiVal validation. Joboy retains approved, sanitized images in private storage. Selecting an image for a draft does not publish it; publishing the listing makes its selected image publicly accessible.

Your workspace stores the job details you enter, including role descriptions, requirements, location, compensation, and review choices. Only add information you have permission to use, and leave out unnecessary personal or confidential information about other people.

Pasted descriptions and your review

Saving a pasted job description requires your consent to temporary storage. Source text expires after 24 hours and is then unavailable for review. Remaining expired text is cleared when the import is opened or by scheduled cleanup. Accepting a review or discarding the import clears the source text immediately.

Proposed fields stay separate from your job draft until you accept them. Saving or reviewing a draft does not publish it.

Private drafts and candidate information

Your employer drafts are private to your account. Publishing requires a separate confirmation and makes the reviewed listing and selected image public. An employer account does not provide access to private career profiles.

A job seeker’s private reflections, ambitions, and preferences remain separate from employer-facing application claims. Having an employer account does not give you access to those answers.

Keeping and deleting your work

Saved job drafts and review records can remain after temporary source text is cleared. Archiving a job keeps it in your account. Deleting a job removes its local sources and proposals; it does not delete other jobs in the same batch.

Images belong to the company library and can be reused across listings. Deleting a library image removes draft selections and stops Joboy serving it on published listings. Storage cleanup can remain pending and be retried. Copies already downloaded by other people cannot be recalled.

The Nuclear option in Settings → Account lets you download an encrypted copy of your data, including employer job drafts, before permanently closing your account. Closing your account deletes its data from our live database. Backups, earlier contact messages not linked to your account, and copies outside Joboy are not erased by this action. Downloaded copies remain under your control.

You can cancel linked Stripe subscriptions without a refund or choose to keep them running after account closure. We retain Stripe references for ongoing subscriptions until they end. Stripe may retain its own payment records.

Cookies, browser storage, and external services

Joboy uses session cookies for sign-in and security cookies to protect form submissions. Your theme and Job Seeker or Employer preference are saved in local storage in this browser. The audience switch changes that browser preference; it does not change your account type.

The image uploader uses this tab’s session storage to remember filenames, file sizes, and upload progress for recovery. It does not save image bytes or signed upload credentials there. Clear Joboy’s site data to remove this recovery information.

Joboy also remembers your most recent menu or workspace choice and selected tabs in this browser, separately for each account. These preferences contain page and tab identifiers, not your saved content. They remain after sign-out with no automatic expiry. We do not send these preferences to an analytics service. Clear Joboy’s site data in your browser to reset them. On a shared browser, the audience preference applies to anyone using that browser profile.

Contact, registration, and sign-in forms use Cloudflare Turnstile to help prevent automated abuse. Your browser connects to Cloudflare for a security check, and Joboy sends the resulting token to Cloudflare for verification. Pages load fonts from Google Fonts. These external requests expose connection information such as your IP address to the receiving service.