Privacy Policy
Unified version for candidates and companies. JobMatch is committed to protecting your privacy.
Last updated: May 2026
1. Introduction
JobMatch ('we', 'our', or 'the Platform') is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web platform designed to connect candidates with job opportunities.
This policy applies to candidates and individual users seeking employment through JobMatch. If you are a company posting job offers, please see Part 2 of this document.
Please read this Privacy Policy carefully. If you do not agree with our policies and practices, we ask that you do not use our Platform. By accessing and using JobMatch, you agree to be bound by this Privacy Policy.
2. Information We Collect
The following describes the data we collect to provide our services:
Information you provide directly:
• Registration Information: name, email, phone number, and access credentials.
• Profile Information: profile photo, professional summary, education, work experience, technical and transversal skills, languages, certifications, and awards.
• Documents: CV in PDF format, portfolio, and other documents you choose to upload.
• Application Information: responses to employer questions during selection processes.
• Communication Information: messages between candidates and employers within the platform.
• Identity Verification: ID document (DNI) for profile verification, or verification via LinkedIn.
Automatically collected information:
• Device Data: device type, operating system, and browser used.
• Usage Data: pages visited, time on platform, searches performed, and jobs viewed.
• Location Data: general location based on IP address (to show relevant job offers).
• Cookies and Session: session identifiers and user preferences.
Information from third parties (only when you link your account):
• Google: name, email, and profile photo (if you sign in with Google).
• LinkedIn: name, email, profile photo, and public professional data (if you sign in with LinkedIn or verify your profile).
We only process third-party information when you choose to link your account.
3. How We Use Your Information
We use your information for the following purposes:
Provide Services: create and maintain your account, show you job offers, process your applications, facilitate communication between candidates and employers through our messaging system.
Matching: calculate compatibility between your profile and job offers using our matching algorithm based on skills, experience, and preferences.
Kuska Assistant: process your information to help you create and improve your professional profile using our AI assistant.
Communication: send you updates about your applications, notifications of messages from employers, and communications related to active selection processes.
Verification: validate your identity through LinkedIn or ID document to build trust with employers.
Marketing (only with your consent): send newsletters with relevant offers, platform news, and new features. You can revoke this consent at any time.
Security: protect your account with optional two-factor authentication (2FA), detect suspicious activity, and prevent unauthorized access.
4. Legal Bases for Processing
We process your information based on one of the following legal bases:
• Contract Performance: necessary to provide you with JobMatch services (create account, apply for jobs, communicate with employers).
• Consent: for sending marketing communications and sharing your data with third parties (such as when you authorize a specific company to view your profile).
• Legitimate Interests: to improve our services, maintain platform security, and prevent fraud.
• Legal Obligation: when we are required by law to process or retain certain data.
5. Profile Visibility and Job Search Status
You can control your visibility on the platform through your Job Search Status:
Actively looking:
Companies can find and contact you for opportunities that match your profile. You will appear in recruiter search results.
Open to offers:
Your profile is visible but you indicate you are not actively searching. Companies may still contact you.
Not available:
Your profile does not appear in company searches. Your information is only shared when you actively apply to a specific job.
How to change your status:
Go to Profile Settings > Search Preferences to update your status at any time. Changes are effective immediately.
Important: When you apply to a specific job, that company receives access to your profile, CV, and responses to evaluate your application.
6. Sharing Your Information
Your information may be shared in the following circumstances:
With employers:
• When you apply to a job: the company receives your profile, CV, and responses to evaluate your application.
• According to your search status: if you are 'actively looking' or 'open to offers', companies can find your profile and contact you.
• Employers are responsible for protecting your information according to their own policies once received.
With service providers:
• Storage: we use Supabase to securely store your data.
• Authentication: we use OAuth providers (Google, LinkedIn) when you choose to sign in with them.
• AI Assistant: we use natural language processing services for the Kuska assistant (only when you interact with it).
• These providers only access data necessary for their specific function and cannot use your information for other purposes.
For legal compliance:
We may disclose information if required by law, court order, or competent authority. We will notify when legally possible.
7. Use of Artificial Intelligence
JobMatch uses AI for the following functions:
Candidate-Job Matching:
Our system calculates a compatibility percentage between your profile and job offers based on: skills, experience, location, work modality, and salary expectations. This helps prioritize the most relevant offers for you.
Kuska Assistant:
When you interact with Kuska, our AI assistant processes your messages to:
• Help you create and complete your professional profile.
• Suggest improvements to your CV and experience descriptions.
• Answer questions about using the platform.
• Prepare you for interviews by simulating common questions.
Important about Kuska: information you share with Kuska is used only to assist you in creating your profile. We do not share these conversations with employers or third parties.
Your rights regarding AI:
• You decide whether to use the Kuska assistant. It is completely optional.
• You can create your profile manually without interacting with AI.
• Matching is a recommendation tool. The final application decision is always yours.
8. Data Retention
While your account is active:
• Profile: as long as you maintain the account.
• Applications: while relevant.
• Messages: while the conversation is open.
After you cancel your account:
• Profile: deleted in 30 days.
• Applications: retained 3 years for labor law.
• Messages: deleted in 30 days.
• Support data: deleted in 90 days.
• Search history: 12 months, then anonymized.
• Verification data: 7 years for labor law.
• Security logs: 6 months.
Exceptions:
We retain data if required by law, there is a pending dispute or claim, it is necessary to enforce our rights, or it was anonymized. To request deletion: contacto@jmperu.com
9. Data Security
We implement the following measures to protect your information:
Technical Measures:
• SSL/TLS Encryption: all communications between your browser and JobMatch are encrypted.
• Authentication: we offer optional two-factor authentication (2FA) for added account security.
• Secure storage: your information is stored in Supabase with strict access controls.
• Signed URLs: documents you upload (CV, certificates) are only accessible through temporary signed URLs.
Access Measures:
• Only authorized JobMatch staff can access user data, and only when necessary for support or maintenance.
• Employers only see information you choose to share through your application or visibility settings.
Security recommendations:
If you believe your account has been compromised:
1. Contact immediately at contacto@jmperu.com
2. Change your password from Settings > Security
3. Review your recent applications and messages
4. Enable two-factor authentication if you haven't already
10. Your Rights Over Personal Data
You have the following rights over your personal data:
Available rights:
• Access: request a copy of all data we have about you.
• Rectification: correct inaccurate or incomplete information directly from your profile.
• Erasure: request deletion of your account and all your data.
• Objection to marketing: revoke your consent to receive marketing communications at any time.
• Portability: receive your data in a readable format (JSON).
How to exercise your rights:
Option 1 - On your own:
• Access Profile Settings to edit or delete information.
• Go to Notification Preferences to manage marketing communications.
• From Security you can permanently delete your account.
Option 2 - Contacting support:
Send an email to contacto@jmperu.com with:
• Subject: Exercise right of [access/rectification/erasure]
• Your full name and account email
• Detailed description of your request
Response timeline: 30 business days.
If you are not satisfied with our response, you can file a complaint with the APDP (Peruvian Personal Data Protection Authority) at www.apdp.gob.pe.
11. Cookies and Local Storage
We use the following technologies for platform operation:
Essential cookies:
• Authentication session: maintain your session while using JobMatch.
• Language preferences: remember your language selection (Spanish or English).
• Security: protection against CSRF attacks.
These cookies are necessary for platform operation and cannot be disabled.
Local storage:
• We temporarily store form data in your browser to prevent loss of information if you accidentally close the page.
• Display preferences and interface settings.
How to manage:
You can clear local storage from your browser settings. Note that this may log you out and clear saved preferences.
12. Relationship with Employers
It is important that you understand:
Limits of our responsibility:
• JobMatch is a connection platform. We are not responsible for how a company uses your information after receiving it.
• Hiring decisions are exclusively the employers'.
• Each company has its own privacy policy for handling applicant data.
Commitments we require from companies:
When using JobMatch, companies agree to:
• Use candidate information only to evaluate applications.
• Not share candidate data with third parties without authorization.
• Comply with applicable labor and data protection legislation.
Report problems:
If a company makes inappropriate use of your data or you have a negative experience, report it to contacto@jmperu.com. We will investigate and take necessary measures, including suspending the company's access to the platform.
13. Minimum Age
JobMatch is exclusively for people over 18 years old.
If we detect that a minor has created an account:
• We will delete the account and all associated data.
• We will notify parents or guardians if we have a way to contact them.
If you suspect a user is underage, report it to contacto@jmperu.com.
14. Changes to This Policy
We may update this policy periodically:
• Minor changes: clarifications or wording adjustments are published without prior notification.
• Significant changes: if we substantially modify how we use your data, we will notify you by email at least 15 days in advance.
• Continuing to use JobMatch after changes implies accepting the updated policy.
• If you do not agree with the changes, you can delete your account before they take effect.
15. Contact
For any privacy inquiries:
Email: contacto@jmperu.com
Business hours: Monday to Friday, 9:00 a.m. - 6:00 p.m. (Peru time)
Response timeline: 30 business days for formal requests
Include in your message:
• Your full name
• Your JobMatch account email
• Detailed description of your inquiry or request
For security emergencies (compromised account):
Indicate 'URGENT - Security' in the subject. We will respond within 24 hours.
PART 2 — POLICY FOR COMPANIES AND PROFESSIONAL USERS
This section applies to companies, recruiters, employment agencies, and other professional users who post jobs and access candidate profiles on JobMatch.
By accessing and using JobMatch as a professional user, you agree to be bound by this Privacy Policy.
2.1 Information We Collect from Companies
Registration data:
• Company information: legal name, RUC, sector, approximate size.
• Contact data: corporate email, phone, location.
• Recruiter profile: name, position, personal contact details for the account.
• Access credentials: email and password or sign-in via Google/LinkedIn.
Operational information:
• Job postings: description, requirements, salary, location, work modality.
• Selection processes: configured stages, candidate evaluations, messages exchanged.
• Searches performed: filters used to find candidates.
• Interactions: candidates contacted, applications received and managed.
2.2 Candidate Information You Access
As a recruiting company, you can view:
When a candidate applies to your job:
• Complete profile: name, photo (if available), professional summary.
• Detailed work experience: positions, companies, duration, descriptions.
• Education: institutions, degrees, certifications.
• Skills: technical and transversal with proficiency level.
• Languages and availability.
• Attached CV in PDF.
• Salary expectations (if the candidate provided them).
When searching for candidates:
You will only see profiles of candidates with status set to 'actively looking' or 'open to offers'.
Limitations:
• You cannot see direct contact information (email/phone) until the candidate applies or accepts your contact.
• Candidates may have multiple profiles for different roles.
2.3 How We Use Company Information
We use your company data to:
• Manage your account and allow you to post jobs.
• Facilitate connection with candidates matching your requirements.
• Calculate compatibility (matching) between your job postings and candidate profiles.
• Enable communication through our messaging platform.
• Send notifications about applications, messages, and relevant activity.
• Improve our recommendation algorithms.
2.4 Company Responsibilities
By using JobMatch, you commit to:
Use data only for selection:
• Candidate information may only be used to evaluate applications to your job postings.
• You may not use the data for other purposes such as marketing, sales, or market research.
• You may not transfer candidate data to third parties without authorization.
Protect confidentiality:
• Maintain candidate information securely.
• Limit access within your company to personnel involved in the selection process only.
Comply with the law:
• Respect applicable labor and data protection legislation in Peru.
• Do not discriminate based on gender, age, race, religion, sexual orientation, disability, or other protected characteristics.
Penalties for non-compliance:
• JobMatch may suspend or cancel your account if detected inappropriate use of candidate data.
• We may report illegal conduct to the corresponding authorities.
2.5 Matching and Algorithms
Our matching system:
• Calculates a compatibility percentage based on skills, experience, location, and preferences.
• Shows you candidates ordered by relevance for your job postings.
• Matching is a support tool. The final decision to contact or hire is yours.
Transparency:
• Candidates also see their compatibility with your job postings.
• We do not use discriminatory criteria in our algorithms (gender, age, race, etc.).
2.6 Data Retention for Companies
Your company data:
• We maintain information while your account is active.
• If you cancel your account: basic data is retained for 1 year to comply with legal obligations.
Candidate data:
• Applicant information: maintained during the selection process and 1 year afterward for possible labor claims.
• Messages: retained for 2 years to resolve disputes if necessary.
2.7 Security
We protect your company information through:
• SSL encryption on all communications.
• Secure storage in Supabase with access controls.
• Optional two-factor authentication (2FA) for your account.
• Signed URLs for documents, accessible only temporarily.
• Activity logging to detect suspicious access.
Recommendations:
• Enable 2FA on your account.
• Do not share credentials among team members. Each user should have their own account.
2.8 Company Rights
You have the right to:
• Access the data we have about your company.
• Rectify inaccurate information from your settings panel.
• Request deletion of your account (with the legal retention limitations mentioned).
To exercise these rights, contact contacto@jmperu.com.
Final Note
This policy reflects JobMatch's current practices.
If you have specific questions about how we handle data, write to contacto@jmperu.com
© 2026 JobMatch - jmperu.com
