Privacy Policy

This privacy policy describes how Everyjob ("we", "us") collects, uses, and protects personal data in connection with our web application and Chrome extension ("Everyjob — People Sourcing Copilot").

• Account data: name, email address, and password upon registration.
• LinkedIn profile data: when you use our Chrome extension on LinkedIn, we process the URL and publicly available profile information of the candidates you view. We do not read private messages and do not have access to your LinkedIn credentials.
• Authentication cookies: session cookies to keep you logged in. These are used exclusively for authentication with our own servers.
• LinkedIn session cookies: our Chrome extension reads your LinkedIn session cookies (li_at, li_a) solely to maintain your LinkedIn connection through Unipile. These cookies are transmitted securely (HTTPS) to our backend and are used exclusively for keeping your account connected — they are never shared with third parties beyond Unipile.
• Outreach and pipeline data: information about candidates, vacancies, messages, and templates you create within the platform.
• ATS integration data: if you connect an ATS system, we process the necessary data to synchronize candidate profiles.

• Managing your account and delivering our services.
• Displaying candidate status and outreach progress in the Chrome extension.
• Generating personalized messages and AI-powered suggestions.
• Synchronizing candidate data with your connected ATS system.
• Maintaining your LinkedIn connection by periodically synchronizing session cookies.
• Improving and securing our services.

We do not sell your data to third parties. Data is only shared with:

• Supabase: secure data storage and authentication (EU-hosted).
• OpenAI: for AI-powered message suggestions. Personal data of candidates is not stored by OpenAI.
• Unipile: for sending/receiving LinkedIn messages.
• Your ATS system: when you explicitly choose to push a candidate.

A complete and up-to-date overview of the third parties ("sub-processors") that process data on our behalf is available on our sub-processors page.

We take appropriate technical and organizational measures to protect your data, including encrypted connections (HTTPS), secure authentication via Supabase Auth, and strict access control through Row Level Security (RLS) at the database level.

Under the GDPR you have the right to:

• Request access to your personal data.
• Request rectification or deletion of your data.
• Object to the processing of your data.
• Request data portability.

Contact us at the email address below to exercise your rights.

We retain your data for as long as your account is active. After account deletion, all personal data will be permanently removed within 30 days.

The data controller for this platform is LVDP, Klinkkouterstraat 59, 9040 Sint-Amandsberg, Belgium (company number BE 1008.270.260).
For questions about this privacy policy or your data, please contact us at:
Email: [email protected]