Privacy policy

1.Who we are

• jobs.ly is a job portal for Libya, a product of Libyan Spider (شركة العنكبوت الليبي), which runs it and is responsible for your information on jobs.ly. In this policy, "we" means Libyan Spider.
• When you apply for a job, your application reaches the organization that posted it (the employer or recruitment agency), which is also responsible for how it uses it. Our Terms of use allow it to use applications only for hiring.
• This policy explains what we collect and why, who can see it, how long we keep it, and your rights. jobs.ly is for people aged 18 and over.

2.What we collect

• Account: your mobile number or email address (to send you sign-in codes), your name in Arabic and English letters, your language, and the date and version of the Terms you accepted.
• Job seekers: the CV you create or upload (name, contact details, experience, education, skills and anything else you add), the jobs you apply to, your note to the employer and your answers to its questions, your saved jobs and your job alerts.
• Uploaded CV files: employers you apply to see the file as it is. If it shows a photo, date of birth, nationality, marital status, ID number or other personal details, they will see them, so include only what you want employers to know.
• Employers and agencies: organization details, the jobs you post and your team. If you buy a plan: its invoices (plan, amount, date, payment method, transfer reference, and the billed organization's name, city and phone). We never receive card or wallet details.
• Organization verification: the official document you send (for example a commercial registration, registration certificate, founding decision or authorization; for agencies, the licence) and, for recruitment agencies, the licence number. Only your organization's owner and jobs.ly staff see the document. An agency's licence number appears on its page once it is verified.
• Hiring records: what employers record about an application: private notes, the team's ratings, interview times, your replies and whether you attended, the reasons recorded for hiring steps, and offers and offer letters (start date, salary, probation, reply date, terms and signer) with your reply. At agencies also: client reviewers' answers and comments, and placement details (start date, fee, and whether you left during the guarantee period).
• Saved candidates: if you allow an employer or agency to contact you about other jobs, the notes and tags it keeps about you.
• Messages: messages between employers and applicants on jobs.ly, and messages you send us from the site (the Contact page, a walkthrough request or a feature suggestion).
• Staff records: notes and documents our staff keep when checking organizations and page, join or account-type requests; the reports people send, including who sent them; and a log of staff actions, including each time an administrator opens a person's CV, contact details or file.
• Browser notifications, only if you turn them on: a technical address for that device from your browser's notification service.
• Technical data: your IP address and browser details, to keep the site secure and working. The server's access log keeps them for at most 14 days, without cookies or sign-in details. When you sign in, we also save them with your sign-in session to protect your account, and remove them after 7 days.
• Error reports: technical messages about a failure, the kind of page and how often it happened, so our team can fix it. Links, contact details and form values are removed before saving.
• People who aren't users: a phone number or email an organization invites to its team, and the contact people at an agency's or group's client organizations (name, email, phone, language, and when they open their client page).

3.How we use it

• To run the service: show jobs, send your applications to employers, let employers contact you, and keep your account working.
• To send you messages: sign-in codes, updates about your applications or new applicants, job alerts you created, jobs that fit your CV, and invitations to apply. Job-fit alerts start when you create your CV; for a CV made from a file you upload while applying or checking a job's fit, they start only if you agree. You can stop each optional kind at any time on your CV page, under My jobs → Alerts, or with the link in each email.
• To suggest jobs and candidates: we compare your CV with new jobs (field, city, experience and, with AI, the content) to find the ones that fit you.
• To keep jobs.ly safe: check jobs before and after they are published, find scams and abuse, and handle reports. When someone signs in to a jobs.ly staff account, or when you change the phone or email you sign in with, we tell the account (or the old address) so that a stranger can't use it unnoticed.
• To improve jobs.ly: when a job search finds nothing, we keep the search words for 1 year (never who searched, and never anything that looks like an email or phone number), to know which jobs people look for.
• To describe the job market: every month we count jobs, job seekers, applications and hires by city, field, occupation and experience level. These anonymous totals never include names or contact details, and small numbers are hidden or rounded so that nobody can be identified from them. If you answer “Did you get this job?” under My jobs → Applied, your answer is only counted in these totals; the employer doesn't see it. We may publish these totals or share them with public bodies and researchers.
• We don't sell your personal information, and we don't use it for advertising.

4.How we use AI

• We use Google Gemini, an AI service, for the tasks below. AI suggests, writes and sorts; people make the decisions. AI never rejects an applicant or removes a job by itself.
• Writing and translating: drafting job posts and CVs, translating jobs, CVs and organization descriptions, and suggesting screening questions. AI text is a suggestion that you review.
• Reading an uploaded CV: a PDF or photo is sent whole, including any contact details in it (we first remove the details a phone adds to a photo, such as where it was taken). From a Word file or typed answers, we remove emails and phone numbers before sending the text.
• Sorting applicants: when you apply, your CV without your name, your city, your note to the employer and your answers to its questions are sent to Gemini. On jobs marked “Fair review”, your schools, dates and city are removed too. Gemini returns a match score with short reasons, strengths and gaps. The employer's team sees them, and they set the default order of its applicant list. The score helps the employer read applications; the employer decides. You can see your scores in “Download my data”.
• Suggestions: an anonymous version of your CV (without your name, contact details, company and school names, dates or city) is compared with jobs, for “Jobs for you”, job-fit alerts and, if you allow it, employers' suggested candidates.
• Your own tools: “Does this job fit me?”, “Tailor my CV for this job” and interview practice send your CV without your name, and the job. Contact details you wrote inside your CV text are not removed. The fit result and practice answers stay on our server for up to 12 hours and are not saved with your account. A tailored CV is saved with that application and shown only to that employer's team.
• Notes about applicants: an employer may ask AI for a short note about applicants it sends to a manager or client. Names and contact details are removed first, and the employer reads the note before sending it.
• Checking jobs: every job an employer publishes, with its screening questions, is checked by our rules and by AI for signs of fraud, fees, false information or discrimination. For a job shown as “Undisclosed employer”, the organization's name is not sent. A job with signs of fraud or fees may then be held for our staff to review; possible discrimination is marked for our staff to check, and the job stays published until they decide.
• Imported jobs: jobs we copy from other websites are rewritten by AI, and may include the contact details the original poster published.
• Names: so that names appear in both Arabic and English, we send the name you type to Gemini to suggest the other spelling. You see the suggestion while you type and can change it. If you save your name without the other spelling, and for older accounts and imported organizations with one spelling only, we add the other automatically and mark it as added automatically; you can change it at any time on your CV or account page.
• Search by meaning: when it is switched on, the text of jobs and CVs (without names, phone numbers or emails) and the words typed in job searches are sent to Voyage AI to build search data.
• Google processes what we send under the Gemini API terms, and Voyage AI under its own terms.

5.Who can see your information

• Your contact details: your phone number, email and uploaded CV file are visible only to you; to the owner and recruiters of each employer or agency you applied to (its whole hiring team, not only the person handling the job); and to jobs.ly administrators. Administrators open them only to keep the site safe or to answer a request, for example when checking a report, and each time they do it is recorded. Moderators never see them.
• After 12 months: an employer sees your phone number, email and uploaded file until 12 months after the last job you applied to there has closed. Your CV and the hiring records stay with the application.
• Withdrawing: before you are hired, you can withdraw an application under My jobs → Applied. The employer then no longer sees your CV or contact details through that application; its team keeps a short, read-only record (its notes, ratings and past interviews).
• First review without names: on jobs marked “Fair review”, the employer's team and its review links first see an anonymous applicant, without your name, contact details, city, uploaded file, school names or dates (your name is also removed from your own texts). Your identity is shown when you are moved forward, and stays shown if you are moved back. If you are declined or withdraw while anonymous, you stay anonymous, even if the employer later turns this review off.
• Public CV link: if you turn it on, anyone with the link can see your CV. Your phone number, email and uploaded file are not shown, and contact details you write in the CV text are hidden too. Search engines don't show this page.
• Suggestions to organizations: only if you turn on “Let organizations suggest me for matching jobs”, employers with a matching job, and employers on a paid plan who search the CV database, see an anonymous summary: your professional title, city, field, experience level and skills, and how well you match, with a short reason written by AI. They never see your name, phone number, email or CV file, and see your full CV only if you apply. It is off by default.
• Hiring managers and reviewers: an organization may add a hiring manager to a job, or send your CV to the person who decides (for example a manager) through a private link that expires. They see your CV to give their opinion, and a hiring manager also sees your note and your answers to the job's questions, without your phone number, email or uploaded file; contact details written in these texts are hidden. A hiring manager sees only the jobs they are added to.
• Ratings and offer letters: the account owner and recruiters see the team's ratings and saved offer letters. A hiring manager rates applicants only for their own jobs and sees only their own ratings. None of this is shown publicly or to other applicants.
• Messages and interviews: employers you applied to see your answers to their questions, may keep a private note that only their team sees, and can write to you about that job (by email and under My jobs → Applied). If you reply to that email, they see your email address. When they book an interview, you get the time and place with a calendar invite and a reminder, and their team sees your answer (“I'll attend” or “Another time”) and your note.
• Recruitment agencies: when you apply to a job an agency posts for a client organization, the agency may send your CV, without your phone number or email, to that client through a private link that expires. If you agreed when applying that your CV goes to that client, the agency has already shared it with them, you are not anonymous in a first review without names, and the agency turned on interview emails for that client, the client's main contact is also told your name and the interview's date, time and place, with a calendar invite; otherwise the email says only “an applicant”. They never receive your phone number or email.
• Saved candidates: if you tick “The agency may contact me about other jobs” or “Keep me in mind for other jobs at this organization”, that agency or organization may keep you among its saved candidates and invite you to its other jobs. You can stop this at any time under My jobs → Applied. Nobody gets more than one invitation a day through jobs.ly.
• Groups of companies: when you apply to a group's job for one of its companies, the group may share your CV with that company through a private link that expires, without your phone number or email. A separate permission lets the group keep you among its saved candidates; you can withdraw it from the application.
• Client pages: an agency or group can give each contact person at a client a private page. A contact with review access sees only the applicants shared with them or with all of that client's reviewers: their CVs (without phone number, email or uploaded file), name, city, hiring step and interviews, only while the shared link is active; once it ends or is stopped, they no longer appear on the page. A contact with billing access sees that client's invoices, which name the hired candidate. Answers and suggested interview times are saved with the name of the person who answered and a history, and their colleagues with access can see them. Anyone with a page's link can use it, so forwarding it shares this access. Monthly reports emailed to a client's contact contain totals, never candidates' names, and are sent only after that person agrees.
• Undisclosed employers and confidential clients: for a job shown as “Undisclosed employer”, the organization's name is hidden from visitors, and an applicant learns it when the organization first messages them, books an interview, invites them to choose an interview time or sends them an offer. A recruitment agency may hide a client's name (“Confidential client”); the agency itself is always named.
• Public pages: jobs and organization pages are public. Job posts (never applicants' details) are also shared with search engines and job-search websites, as our Terms of use describe.

6.Cookies and storage on your device

jobs.ly uses only the cookies below. Its own visit statistics use no cookies.

• On your device: your browser also keeps your analytics choice, your last 5 job searches, unsent drafts (a CV, organization details or a job, for up to 7 days), your last interview settings, and small reminders you closed. Searches and drafts are cleared when you sign out. In the open tab only: where your visit came from, unsent messages, and a task code that expires after 24 hours.
• Our staff also get a short cookie when signing in with a passkey (5 minutes), and a language cookie in the content editor.
• You can delete cookies and stored data at any time in your browser settings; you will then be signed out.

7.Counting visits

• Our own statistics: we count which pages are visited, in which language, and which website sent the visitor (for example Google or Facebook). For a job you apply to outside jobs.ly (by WhatsApp, phone, email or the employer's website), we also count presses on its apply button; the employer and our staff see only how many people pressed it. Visit records are deleted after 13 months.
• How we keep them anonymous: we use no cookies for this and don't store your network address. Addresses of private pages are saved without names, account numbers or private link codes. Visits are told apart with a code made from a random value that changes every day and is never saved in our database or backups, so nobody can follow you from one day to the next. If your browser sends “Do Not Track”, you aren't counted.
• Usability measurements: we measure whether a search leads to a job, and whether setting up an account, a CV, an organization, an application or a job post is finished, with a random code for each task that is kept in the open tab and expires after 24 hours. We also measure loading speed, responsiveness and layout stability with only the kind of page, the language and a screen-size group. We collect no form content, search words, contact details or full page addresses for this, and delete the records after 30 days.
• Google Analytics: on your first visit we ask whether you allow analytics, and saying no is as easy as saying yes. Google Analytics loads only after you choose “Allow”: until then, nothing is sent to Google and no Google Analytics cookie is set. With your permission, Google receives public page addresses without search details, browser and device information and a cookie identifier, and uses your network address to estimate your approximate location. Sign-in, account, CV and application pages are never measured, and advertising features and the automatic measurement of clicks and forms are off.
• Your choice: you can change it at any time in Display settings or with the analytics choice at the end of this page. Saying no to analytics, “Do Not Track” or “Global Privacy Control” also turns off the usability measurements, and with either of these two browser signals Google Analytics never runs.
• Where an application came from: when you apply, we note where that visit came from (for example a WhatsApp or Facebook link), so the employer learns which channels bring applicants. Nothing is noted if your browser sends “Do Not Track”.

8.Services we use

• Our server: jobs.ly, its database and uploaded files run on a server that only Libyan Spider's operations team manages.
• Cloudflare: protects the site and delivers its pages and files. Everything sent to or from jobs.ly passes through it, including CVs, sign-in codes and uploaded files. It may also receive reports from your browser about connections that fail.
• Google: Gemini for AI (described above); Google Workspace, which sends jobs.ly's emails and holds our team inbox, so it receives every email we send you and every message you send us; Google Analytics, only if you allow it; Google Drive, where our encrypted backup copies are kept; and Google Search, which receives the addresses of public jobs only.
• Voyage AI: search by meaning, when it is switched on (described above).
• iSend (Libya): text messages for sign-in codes, account security, interviews, offers and hiring news, when we send text messages. It receives your phone number and the message.
• Browser notification services (for example Google, Apple or Mozilla): only if you turn on browser notifications; they deliver each notification to your device.
• Online payment (Plutu and your payment provider): when online payment is offered. They receive the payer's mobile number and email for that payment.
• IndexNow (used by search engines such as Bing): the addresses of public jobs only.
• Payload CMS: the software for our articles and help pages runs on our own server; no data goes to its makers.
• Outside Libya: Cloudflare, Google and Voyage AI are based in the United States and process information in several countries.

9.How long we keep it

We keep your information while your account is open, and for the periods below. When a period ends, the information is deleted or made anonymous.

• Unused accounts: activity in your sign-in sessions and by your employer team counts as account activity. Staff accounts, suspended accounts and owners of organizations with an active paid plan are not deleted for inactivity. We delete an unused account only after both notices have reached it: an account we can't reach (for example a phone-only account while we can't send it a text message or a browser notification) is not deleted for inactivity while that lasts. Because phone numbers are sometimes given to new people, a phone-only account with a CV that comes back after 12 months or more must first confirm the name or email on its CV.
• Deleting your account: your CV, applications, alerts and uploaded files are deleted at once. Some records stay for the periods above: messages an employer sent to several applicants, staff activity-log lines that name you, anonymous visit records, payment records (with the organization's name and city, without the billed phone), and, if an agency placed you in a job with one of its clients through jobs.ly, your name on that agency's placement record and invoice.
• When deletion has to wait: while the account or its organization is suspended, or while one of its jobs is under review or has an open report. We tell you why.
• When an employer deletes its account: its jobs and the applications to them are deleted too. We tell applicants whose application was still recent (the employer could still see their contact details), and every applicant keeps a short record of the application in My jobs → Applied for 12 months.
• Payment records: the invoice number, plan, amount, payment reference and status, and the billed organization's name and city. When an account is deleted, these records are no longer linked to it, and the billed phone number is removed.
• Backups: our server makes copies of the database and uploaded files every day; only the server's administrators can open them. An encrypted copy is also kept outside the server, on a computer of our operations team and in Google Drive. Deleted information may stay in these copies until they are removed. If we ever restore a backup, we delete again every account that was deleted after that copy was made.
• Copies outside jobs.ly: emails already sent to you, and applicant lists an employer downloaded, are not in our control. Our Terms require employers to delete such lists when they no longer need them, and at the latest 12 months after the job closes.

10.Your rights and choices

• See and download: “Download my data” (on your CV page under “Your account”, or in Organization settings under “Account”) gives you a file with your account, CV and uploaded file; your applications with their messages, interviews, offers and AI match scores; who your CV was shared with and their answers; your alerts, saved jobs and sign-in sessions; and the messages and requests you sent us. Employers also get their organization's details, jobs, team and payments, and an agency's owner its recorded fees.
• Correct: you can edit your CV, account and organization details at any time. Ask us to correct anything else.
• Delete: use “Delete my account” on your CV page or in Organization settings. You can also withdraw a single application under My jobs → Applied.
• Stop or object: turn off job-fit alerts, suggestions to organizations, the public CV link, browser notifications (My jobs → Alerts, or Organization settings → Notifications), analytics (Display settings, or at the end of this page), and each kind of optional email with the link in it.
• Ask us: write to privacy@jobs.ly to see, correct or delete your information, to stop an optional use of it, or to ask how it is used. We may ask you to confirm that the account is yours, and we reply within 30 days.

11.Keeping your information safe

• Every connection to jobs.ly is encrypted. You sign in with a code that works once, and our staff accounts also need a passkey.
• Each person sees only what their role allows (see “Who can see your information”), and our staff's views of private CV data are recorded.
• If you find a security problem, write to security@jobs.ly.

12.Changes to this policy

When we change this policy, we update the date at the top of this page and keep the earlier versions, with their dates, on the page of earlier versions. When a change affects how we use your information, people with an account see a notice on the site and are asked to accept the new version.

13.Contact

For privacy questions, write to privacy@jobs.ly. jobs.ly is run by Libyan Spider (شركة العنكبوت الليبي).