Privacy Policy

How KiwiQuest Jobs handles personal information. This is a draft for lawyer review.

Last updated: 26 April 2026. This policy describes how we collect, use, and share information when you use KiwiQuest Jobs (“the service”). It should be read together with our Terms of Service and Cookie Policy.

Who we are

The data controller for the service is the KiwiQuest entity operating this site (to be confirmed with your legal counsel and updated here with legal name and contact details).

Information we collect

Account and authentication. If you sign in, our authentication provider (Clerk) processes identifiers such as email address and session data to secure your account.

Profile and employer content. Information you add to your profile or submit with job listings (for example name, contact details, job descriptions, URLs, and location).

Applications. If you apply for roles through features we provide, we may process application content and related metadata as described when you apply.

Technical and usage data. Standard server and application logs, and analytics as described below.

Communications. Messages you send us and transactional emails related to the service.

How we use information

  • Provide, secure, and improve the service.
  • Process listings, applications, and account features.
  • Send service-related and, where permitted, operational messages (for example via email providers).
  • Comply with law and respond to lawful requests.
  • Enforce our terms and protect users and the platform.

Where GDPR or similar laws apply, we rely on appropriate legal bases (such as contract, legitimate interests, consent where required, or legal obligation) as determined for each processing activity by your counsel.

Analytics (Lite Analytics)

We use Lite Analytics for privacy-oriented, lightweight website analytics on production hosts. The integration loads a small script from Lite Analytics (lite.js) with a configured site host.

Lite Analytics describes its product as cookie-free and hosts data in the EU; for categories of data, retention, and subprocessors, see their published documentation and policies on liteanalytics.com. We do not use this integration on localhost during development.

Subprocessors and hosting

We use service providers to run the service, including for example:

  • Clerk — authentication and user management.
  • Supabase — database and related backend infrastructure for application data.
  • Resend (or comparable) — transactional email delivery.
  • Lite Analytics — website analytics as described above.
  • Hosting and infrastructure — e.g. deployment platform and DNS as applicable.

Providers may process data in countries other than your own. We use appropriate safeguards where required by law (for example standard contractual clauses), as determined with counsel.

Retention

We keep information only as long as needed for the purposes above, including legal, accounting, and dispute resolution requirements, unless a longer period is required by law.

Your rights

Depending on your location, you may have rights to access, correct, delete, or export personal data, to object to or restrict certain processing, and to withdraw consent where processing is based on consent. You may also have the right to complain to a supervisory authority. Contact us using the details you publish on the site to exercise these rights.

Children

The service is not directed at children. We do not knowingly collect personal information from children below the age required by applicable law.

Changes

We may update this policy from time to time. We will post the new version on this page and adjust the “Last updated” date.