In short
- We collect what jobs.ly needs: your phone or email to sign in, your CV, and the jobs you post or apply to.
- Your phone, email and CV file are seen only by the hiring teams of the employers you apply to, and by jobs.ly administrators when needed; each time an administrator opens them is recorded. Hiring managers, agencies' clients and reviewers see your CV without them.
- We never sell your information. AI (Google Gemini) helps write texts, sorts applicants for employers and suggests jobs; people make the decisions.
- Agencies' client and sales records belong to the agency: we keep them on its behalf, never sell or publish them, and never use them to contact the people in them.
- Google Analytics runs only if you allow it.
- Job alerts, suggestions to organizations and a public CV link are your choice, and you can turn them off at any time.
- You can see, download, correct or delete your information, and withdraw an application. Inactive accounts may be deleted after 24 months, after notices.
A summary to help you read; the full text below is what applies.
Contents
1.Who we are
- jobs.ly is a job portal for Libya, a product of Libyan Spider (شركة العنكبوت الليبي), which runs it and is responsible for your information on jobs.ly. In this policy, "we" means Libyan Spider.
- When you apply for a job, your application reaches the organization that posted it (the employer or recruitment agency), which is also responsible for how it uses it. Our Terms of use allow it to use applications only for hiring. The client and sales records a recruitment agency keeps on jobs.ly are that agency's, and we keep them on its behalf (see “Client and sales records”).
- This policy explains what we collect and why, who can see it, how long we keep it, and your rights. jobs.ly is for people aged 18 and over.
2.What we collect
- Account: your mobile number or email address (to send you sign-in codes), your name in Arabic and English letters, your language, and the date and version of the Terms you accepted.
- Job seekers: the CV you create or upload (name, contact details, experience, education, skills and anything else you add), the jobs you apply to, your note to the employer and your answers to its questions, your saved jobs and your job alerts.
- Uploaded CV files: employers you apply to see the file as it is. If it shows a photo, date of birth, nationality, marital status, ID number or other personal details, they will see them, so include only what you want employers to know.
- Employers and agencies: organization details, the jobs you post and your team. If you buy a plan: its invoices (plan, amount, date, payment method, transfer reference, and the billed organization's name, city and phone). We never receive card or wallet details.
- Organization verification: the official document you send (for example a commercial registration, registration certificate, founding decision or authorization; for agencies, the licence) and, for recruitment agencies, the licence number. Only your organization's owner and jobs.ly staff see the document. An agency's licence number appears on its page once it is verified.
- Approval details: what an organization gives us before its first job is published, so that we know it is real: the organization's phone, a work email we confirm with a code, its website or page, the person's role there, the commercial registration or licence number, the office address and a note for our staff. Only the organization's owner and recruiters, and jobs.ly staff, see them; they are never public.
- From partners: when you come from a partner's site to post a job (today the Libyan Businessmen Council, LBC, at lbc.ly), the partner sends us your name, email and phone, and your organization's names, membership number and membership end date. We use them to fill in your sign-in and your organization's details and to link your organization to its membership. What the partner sent about you is deleted once you link your organization; otherwise it expires after 30 minutes and is deleted within a day. With your organization we keep only the membership number, its end date, and who linked it and when. If your email is new to jobs.ly and the partner has just confirmed it with its own code, we may open your account with that email and the name the partner sent, without sending you our code.
- Hiring records: what employers record about an application: private notes, the team's ratings, interview times, your replies and whether you attended, the reasons recorded for hiring steps, and offers and offer letters (start date, salary, probation, reply date, terms and signer) with your reply. For a question the employer marked “Requirement”, whether your answer meets it is recorded too. At agencies also: client reviewers' answers and comments, and placement details (start date, fee, and whether you left during the guarantee period).
- Saved candidates: if you allow an employer or agency to contact you about other jobs, the notes and tags it keeps about you.
- Messages: conversations on jobs.ly between an employer's hiring team and the people who applied to it, between a recruitment agency and its clients' contact people, and between you and the jobs.ly team; the hiring team's comments about an applicant; and messages you send us from the site (the Contact page, a walkthrough request or a feature suggestion).
- Staff records: notes and documents our staff keep when checking organizations and page, join or account-type requests; the reports people send, including who sent them; and a log of staff actions, including each time an administrator opens a person's CV, contact details or file, or downloads a copy of their data at their request; whether we have answered the messages you send us from the site; and the places on our sales team and the invitations to join it.
- Browser notifications, only if you turn them on: a technical address for that device from your browser's notification service.
- Technical data: your IP address and browser details, to keep the site secure and working. The server's access log keeps them for at most 14 days, without cookies or sign-in details. When you sign in, we also save them with your sign-in session to protect your account, and remove them after 7 days.
- Error reports: technical messages about a failure, the kind of page and how often it happened, so our team can fix it. Links, contact details and form values are removed before saving.
- People who aren't users: a phone number or email an organization invites to its team; the contact people at an agency's or group's client organizations (name, email, phone, language, when they open their client page, and the statements and payment reminders an agency sends them); and the organizations and people in agencies' and our own client and sales records, including emails noted from a Bcc address (see “Client and sales records”).
3.How we use it
- To run the service: show jobs, send your applications to employers, let employers contact you, and keep your account working.
- To keep client and sales records: the records agencies keep on jobs.ly, which we keep on their behalf, and our own sales records, to talk with organizations about jobs.ly (see “Client and sales records”).
- To send you messages: sign-in codes, updates about your applications or new applicants, job alerts you created, jobs that fit your CV, invitations to apply, and occasional news about jobs.ly (an important change or a new feature, by email, at most once a week). Job-fit alerts start when you create your CV; for a CV made from a file you upload while applying or checking a job's fit, they start only if you agree. You can stop each optional kind at any time on your CV page, under My jobs → Alerts, or with the link in each email.
- To suggest jobs and candidates: we compare your CV with new jobs (field, city, experience and, with AI, the content) to find the ones that fit you.
- To keep jobs.ly safe: check jobs before and after they are published, find scams and abuse, and handle reports. When someone signs in to a jobs.ly staff account, or when you change the phone or email you sign in with, we tell the account (or the old address) so that a stranger can't use it unnoticed.
- To improve jobs.ly: when a job search finds nothing, we keep the search words for 1 year (never who searched, and never anything that looks like an email or phone number), to know which jobs people look for.
- To describe the job market: every month we count jobs, job seekers, applications and hires by city, field, occupation and experience level. These anonymous totals never include names or contact details, and small numbers are hidden or rounded so that nobody can be identified from them. If you answer “Did you get this job?” under My jobs → Applied, your answer is only counted in these totals; the employer doesn't see it. We may publish these totals or share them with public bodies and researchers.
- We don't sell your personal information, and we don't use it for advertising.
4.How we use AI
- We use Google Gemini, an AI service, for the tasks below. AI suggests, writes and sorts; people make the decisions. AI never rejects an applicant or removes a job by itself.
- Writing and translating: drafting job posts and CVs, translating jobs, CVs and organization descriptions, and suggesting screening questions and a job's interview questions (from the job post only). AI text is a suggestion that you review.
- Reading an uploaded CV: a PDF or photo is sent whole, including any contact details in it (we first remove the details a phone adds to a photo, such as where it was taken). From a Word file or typed answers, we remove emails and phone numbers before sending the text.
- Filling your CV from its file: if your CV has empty sections and a CV file is saved with it, our daily task, or an administrator, may send that file to Gemini in the same way to fill only the empty sections, once for each file (we try again on a later day if Gemini doesn't answer). We never replace what you wrote. If something was added, we tell you and mark it as “Added automatically” until you check it; until then, your public CV link leaves it out.
- Sorting applicants: when you apply, your CV without your name, your city, your note to the employer and your answers to its questions are sent to Gemini. On jobs marked “Fair review”, your schools, dates and city are removed too. Gemini returns a match score with short reasons, strengths and gaps. The employer's team sees them, and they set the default order of its applicant list. The score helps the employer read applications; the employer decides. You can see your scores in “Download my data”.
- Suggestions: an anonymous version of your CV (without your name, contact details, company and school names, dates or city) is compared with jobs, for “Jobs for you”, job-fit alerts and, if you allow it, employers' suggested candidates.
- Your own tools: “Does this job fit me?”, “Tailor my CV for this job” and interview practice send your CV without your name, and the job. Contact details you wrote inside your CV text are not removed. The fit result and practice answers stay on our server for up to 12 hours and are not saved with your account. A tailored CV is saved with that application and shown only to that employer's team.
- Notes about applicants: an employer may ask AI for a short note about applicants it sends to a manager or client. Names and contact details are removed first, and the employer reads the note before sending it.
- Client and sales records: when someone asks AI to fill a record from notes, the notes and the organization's name are sent; for a suggested follow-up message, the names of the agency, the sender, the organization and the contact (with their job title), the deal and the latest lines of its history, as they were written. Phone numbers and emails saved for the contact are not sent. Nothing is saved until the person checks it, and we never send a suggested message ourselves.
- Checking jobs: every job an employer publishes, with its screening questions, is checked by our rules and by AI for signs of fraud, fees, false information or discrimination. For a job shown as “Undisclosed employer”, the organization's name is not sent. A job with signs of fraud or fees may then be held for our staff to review; possible discrimination is marked for our staff to check, and the job stays published until they decide.
- Imported jobs: jobs we copy from other websites are rewritten by AI, and may include the contact details the original poster published.
- Names: so that names appear in both Arabic and English, we send the name you type to Gemini to suggest the other spelling. You see the suggestion while you type and can change it. If you save your name without the other spelling, and for older accounts and imported organizations with one spelling only, we add the other automatically and mark it as added automatically; you can change it at any time on your CV or account page.
- Search by meaning: when it is switched on, the text of jobs and CVs (without names, phone numbers or emails) and the words typed in job searches are sent to Voyage AI to build search data.
- Google processes what we send under the Gemini API terms, and Voyage AI under its own terms.
5.Who can see your information
- Your contact details: your phone number, email and uploaded CV file are visible only to you; to the owner and recruiters of each employer or agency you applied to (its whole hiring team, not only the person handling the job); and to jobs.ly administrators. Administrators open them only to keep the site safe or to answer a request, for example when checking a report, and each time they do it is recorded. Moderators never see them.
- After 12 months: an employer sees your phone number, email and uploaded file until 12 months after the last job you applied to there has closed. Your CV and the hiring records stay with the application.
- Withdrawing: before you are hired, you can withdraw an application under My jobs → Applied. The employer then no longer sees your CV or contact details through that application; its team keeps a short, read-only record (its notes, ratings and past interviews).
- First review without names: on jobs marked “Fair review”, the employer's team and its review links first see an anonymous applicant, without your name, contact details, city, uploaded file, school names or dates (your name is also removed from your own texts). Your identity is shown when you are moved forward, and stays shown if you are moved back. If you are declined or withdraw while anonymous, you stay anonymous, even if the employer later turns this review off.
- Public CV link: if you turn it on, anyone with the link can see your CV. Your phone number, email and uploaded file are not shown, and contact details you write in the CV text are hidden too. Search engines don't show this page.
- Suggestions to organizations: only if you turn on “Let organizations suggest me for matching jobs”, employers with a matching job, and employers on a paid plan who search the CV database, see an anonymous summary: your professional title, city, field, experience level and skills, and how well you match, with a short reason written by AI. They never see your name, phone number, email or CV file, and see your full CV only if you apply. It is off by default.
- Hiring managers and reviewers: an organization may add a hiring manager to a job, or send your CV to the person who decides (for example a manager) through a private link that expires. They see your CV to give their opinion, and a hiring manager also sees your note and your answers to the job's questions, without your phone number, email or uploaded file; contact details written in these texts are hidden. A hiring manager sees only the jobs they are added to.
- Ratings and offer letters: the account owner and recruiters see the team's ratings and saved offer letters. A hiring manager rates applicants only for their own jobs and sees only their own ratings. None of this is shown publicly or to other applicants.
- Messages and interviews: employers you applied to see your answers to their questions, and may keep a private note and comments that only their hiring team sees. They can write to you about that application in a conversation under Messages (you also get it by email or notification), and you can answer there or write to them once after applying; their owner and recruiters read the conversation, never their hiring managers. You can stop a conversation at any time. It closes 30 days after your application ends (at once if you withdraw), and when the employer can no longer see your contact details (see “After 12 months”). When the job ends, it also closes 30 days later for applicants not yet moved past the shortlist; if you reached a later step, such as an interview or an offer, it stays open until your application ends. jobs.ly staff read a conversation only when one of its messages is reported, and each time is recorded. When they book an interview, you get the time and place with a calendar invite and a reminder, and their team sees your answer (“I'll attend” or “Another time”) and your note.
- Recruitment agencies: when you apply to a job an agency posts for a client organization, the agency may send your CV, without your phone number or email, to that client through a private link that expires. If you agreed when applying that your CV goes to that client, the agency has already shared it with them, you are not anonymous in a first review without names, and the agency turned on interview emails for that client, the client's main contact is also told your name and the interview's date, time and place, with a calendar invite; otherwise the email says only “an applicant”. They never receive your phone number or email.
- Saved candidates: if you tick “The agency may contact me about other jobs” or “Keep me in mind for other jobs at this organization”, that agency or organization may keep you among its saved candidates and invite you to its other jobs. You can stop this at any time under My jobs → Applied. Nobody gets more than one invitation a day through jobs.ly.
- Groups of companies: when you apply to a group's job for one of its companies, the group may share your CV with that company through a private link that expires, without your phone number or email. A separate permission lets the group keep you among its saved candidates; you can withdraw it from the application.
- Client pages: an agency or group can give each contact person at a client a private page. A contact with review access sees only the applicants shared with them or with all of that client's reviewers: their CVs (without phone number, email or uploaded file), name, city, hiring step and interviews, only while the shared link is active; once it ends or is stopped, they no longer appear on the page. A contact with billing access sees that client's invoices and statement of account, which name the hired candidate and show the payments the agency recorded. Answers and suggested interview times are saved with the name of the person who answered and a history, and their colleagues with access can see them. Anyone with a page's link can use it, so forwarding it shares this access. Monthly reports emailed to a client's contact contain totals, never candidates' names, and are sent only after that person agrees.
- Undisclosed employers and confidential clients: for a job shown as “Undisclosed employer”, the organization's name is hidden from visitors, and an applicant learns it when the organization first messages them, books an interview, invites them to choose an interview time or sends them an offer. A recruitment agency may hide a client's name (“Confidential client”); the agency itself is always named.
- Recommendations: anyone signed in can send a job's link with their own code (“Recommend someone you know”). If you apply through such a link, you see who recommended you when applying; unless you remove the name before sending, the employer's account owner and recruiters see it with your application, but not while you are anonymous in a first review without names. To remove it after applying, write to us. If you recommend someone, whoever opens your link to apply sees your name, and we never tell you who applied or anything about their application; if you delete your account, your name is removed from those applications. “Download my data” includes your code and who recommended you.
- Public pages: jobs and organization pages are public. Job posts (never applicants' details) are also shared with search engines and job-search websites, as our Terms of use describe, and the jobs of an organization linked to a partner membership are also shown on that partner's site (for example lbc.ly).
6.Client and sales records
- Agencies' records: a recruitment agency on the Agency plan can keep its clients and prospects in “Clients and sales”: organizations; their contact people (name, job title, phone, email, notes, and whether they asked not to be contacted); deals and expected fees; a history of calls, meetings, notes and emails; follow-ups; files such as proposals and agreements; and the payments it records on its invoices. The agency adds them itself, by typing, by importing a spreadsheet or by noting emails (see below).
- Whose they are: these records are the agency's. It decides what to keep and why, and it is responsible for having the right to keep and use them and for telling the people in them where the law requires it. We keep them on the agency's behalf, only to provide the service: we never sell them, never use them to contact or market to those people, and never show them publicly.
- Who sees them: only the agency's account owner and recruiters, never its hiring managers, its clients or other organizations; only the account owner imports a spreadsheet or downloads a copy. Our staff don't open these records. On the agency's page for our staff, administrators can view its invoices and the amounts recorded as received, without changing them, and staff see the agency's team history, which notes some actions and may name a client or contact (for example a deal won or lost, or a reminder sent).
- How long: they stay until the agency deletes them (a contact, a deal, a file or a history line the person wrote can be deleted; an organization's record is archived instead) or deletes its account, which deletes them all at once with their files. When the Agency plan ends, nothing is deleted: the team can still read them and the owner can download them, but nothing can be added or changed. When someone leaves the agency's team, what they held moves to the account owner.
- If an agency keeps your details: ask that agency first to see, correct or delete them. If you write to us, we pass your request to the agency and help it answer.
- Payments, statements and reminders: an agency can record payments received on its invoices, split an invoice into instalments, mark one as disputed, and send a client's billing contacts a statement of account or a payment reminder, by email from jobs.ly in the agency's name or as a text ready for WhatsApp. Nothing is sent unless someone at the agency presses send, never by itself, and an invoice marked as disputed gets no reminder.
- Files: files in these records (PDF, Word, Excel, PowerPoint, PNG or JPG, up to 5 MB each) are private to that team. We check what each file contains and refuse files with macros or other active content. A file is deleted when the team removes it or with the account, and a file left without its record is removed by our daily clean-up.
- jobs.ly's own sales records: our sales team keeps, with the same tools, records of organizations we work with or approach about jobs.ly's services: the organization's name, city, field, website, phone and email; its contact people (name, job title, phone, email and notes); and the history of our contact (calls, meetings, notes, emails, proposals and the plan discussed). We get them from the organization and its people, from its public pages, from introductions and events, from the emails our team sends (see below) and, for an organization registered on jobs.ly, from jobs.ly itself: its type, approval, verified badge, current paid plan and its end date, and how many open jobs it has, never its applicants, documents or payment details. When an administrator adds a registered organization to these records, they may also copy in the name, phone and email of its account's owner as a contact person.
- Why, who and how long: these records are ours. We use them to talk with the organization about jobs.ly's services, plans and renewals, on the basis of our legitimate interest in business contact. Only members of our sales team see them, under a duty of confidentiality: each has a place given by an administrator (every change is recorded) and signs in with a passkey. They are never shared with agencies or shown publicly. They stay until our team deletes them. You can object at any time: write to privacy@jobs.ly, and we stop contacting you and delete your contact details, except what we must keep (for example invoices).
- Emails noted from a Bcc address: someone who uses these records (an agency's owner or recruiter, or a member of our sales team) can add their own private jobs.ly address in Bcc when they email a contact from their own mailbox. The email passes through Cloudflare to jobs.ly, and we note it on that organization's history: the subject, the first 1,000 characters of the text (without quoted replies or the signature), the date, the contact it went to, who sent it and a technical message identifier. We never keep attachments, the full email or the Bcc list, and we never connect to or look into anyone's mailbox. Nothing is noted unless the email comes from that person's own confirmed address and goes to an address saved in their records. The note stays as long as the history, and its sender can delete it.
- Private calendar address: each person who uses these records can make a private address that adds their open follow-ups to their own calendar (for example Google, Apple or Outlook). It shows only each follow-up's title and the organization's name and, at an agency, the due days of its unpaid invoices and instalments with their number and the client's name; never notes, contacts or amounts. We keep only a fingerprint of the address, and our server's access log hides it. The person can stop or replace it at any time, and it stops by itself when they no longer have access to these records. The calendar service they add it to reads it regularly and keeps what it reads under its own policy.
7.Cookies and storage on your device
jobs.ly uses only the cookies below. Its own visit statistics use no cookies.
| Cookie | What it does | How long |
|---|---|---|
| __Secure-better-auth.session_token | Keeps you signed in | Up to 60 days, renewed while you use the site; deleted when you sign out |
| NEXT_LOCALE | Remembers the site language | Until you close the browser |
| theme, text-size, contrast | Your display settings, only if you choose them | 1 year |
| jobsly-who | The “Mine / Everyone” view on employer pages, only if you choose it | 1 year |
| jobsly-fonts | Remembers that your browser already has the site's font, so pages show it from the start | 1 year |
| filled_not_now | Remembers that you chose “Not now” after a hire on a job, only on that job's pages | 1 year |
| jobsly-crm-not-client | Remembers the “looks like one of your clients” hints you answered “Not the same” in Clients and sales | 1 year |
| jobsly_partner_lbc | Holds the request from a partner's site (LBC) while you sign in and link your organization | 30 minutes |
| _ga, _ga_… | Google Analytics, only if you allow it (see “Counting visits”) | Up to 2 years |
- On your device: your browser also keeps your analytics choice, your last 5 job searches, unsent drafts (a CV, organization details or a job, for up to 7 days), your last interview settings, and small reminders you closed. Searches and drafts are cleared when you sign out. In the open tab only: where your visit came from, unsent messages, and a task code that expires after 24 hours.
- Our staff also get a short cookie when signing in with a passkey (5 minutes), a language cookie in the content editor, and a cookie that remembers which sections of the staff menu are open or folded (1 year).
- You can delete cookies and stored data at any time in your browser settings; you will then be signed out.
8.Counting visits
- Our own statistics: we count which pages are visited, in which language, and which website sent the visitor (for example Google or Facebook). For a job you apply to outside jobs.ly (by WhatsApp, phone, email or the employer's website), we also count presses on its apply button; the employer and our staff see only how many people pressed it. Visit records are deleted after 13 months.
- How we keep them anonymous: we use no cookies for this and don't store your network address. Addresses of private pages are saved without names, account numbers or private link codes. Visits are told apart with a code made from a random value that changes every day and is never saved in our database or backups, so nobody can follow you from one day to the next. If your browser sends “Do Not Track”, you aren't counted.
- Usability measurements: we measure whether a search leads to a job, and whether setting up an account, a CV, an organization, an application or a job post is finished, with a random code for each task that is kept in the open tab and expires after 24 hours. We also measure loading speed, responsiveness and layout stability with only the kind of page, the language and a screen-size group. We collect no form content, search words, contact details or full page addresses for this, and delete the records after 30 days.
- Google Analytics: on your first visit we ask whether you allow analytics, and saying no is as easy as saying yes. Google Analytics loads only after you choose “Allow”: until then, nothing is sent to Google and no Google Analytics cookie is set. With your permission, Google receives public page addresses without search details, browser and device information and a cookie identifier, and uses your network address to estimate your approximate location. Sign-in, account, CV and application pages are never measured, and advertising features and the automatic measurement of clicks and forms are off.
- Your choice: you can change it at any time in Display settings or with the analytics choice at the end of this page. Saying no to analytics, “Do Not Track” or “Global Privacy Control” also turns off the usability measurements, and with either of these two browser signals Google Analytics never runs.
- Where an application came from: when you apply, we note where that visit came from (for example a WhatsApp or Facebook link), so the employer learns which channels bring applicants. Nothing is noted if your browser sends “Do Not Track”.
9.Services we use
- Our server: jobs.ly, its database and uploaded files run on a server that only Libyan Spider's operations team manages.
- Cloudflare: protects the site and delivers its pages and files. Everything sent to or from jobs.ly passes through it, including CVs, sign-in codes and uploaded files. It may also receive reports from your browser about connections that fail. It also receives the emails sent to the private Bcc addresses of client and sales records (on our domain job.ly) and passes them to jobs.ly without keeping the message; it keeps only a delivery record: the addresses, the subject, the time and whether it was delivered.
- Google: Gemini for AI (described above); Google Workspace, which sends jobs.ly's emails and holds our team inbox, so it receives every email we send you and every message you send us; Google Analytics, only if you allow it; Google Drive, where our encrypted backup copies are kept; and Google Search, which receives the addresses of public jobs only.
- Voyage AI: search by meaning, when it is switched on (described above).
- iSend (Libya): text messages for sign-in codes, account security, interviews, offers and hiring news, when we send text messages. It receives your phone number and the message.
- Browser notification services (for example Google, Apple or Mozilla): only if you turn on browser notifications; they deliver each notification to your device.
- Calendar services (for example Google, Apple or Microsoft): only if you add your private calendar address from client and sales records to one; it then reads your follow-ups regularly and keeps them under its own policy.
- Online payment (Plutu and your payment provider): when online payment is offered. They receive the payer's mobile number and email for that payment.
- IndexNow (used by search engines such as Bing): the addresses of public jobs only.
- Payload CMS: the software for our articles and help pages runs on our own server; no data goes to its makers.
- Outside Libya: Cloudflare, Google and Voyage AI are based in the United States and process information in several countries.
10.How long we keep it
We keep your information while your account is open, and for the periods below. When a period ends, the information is deleted or made anonymous.
| Information | How long we keep it |
|---|---|
| Your account, CV, applications and alerts | While your account is open (unused accounts: see below) |
| Unused accounts | A warning after 18 months without activity; deleted 24 months after the last activity, at least 30 days after a warning that reached you and 14 days after a final notice that reached you |
| Your phone, email and CV file at an employer | Until 12 months after the last job you applied to there closed |
| Sign-in sessions | Until you sign out, or 60 days without use; the IP address and browser saved with them: 7 days |
| Browser notification addresses | Until you turn notifications off, or the sign-in session on that device ends |
| Server access log | 14 days at most |
| Sign-in attempt counters (they contain the email, phone or network address used) | 2 days at most |
| Error reports | 30 days after the error last happened |
| Visit statistics | 13 months |
| Usability measurements | 30 days |
| Search words that found nothing | 1 year |
| Team invitations nobody accepted | 30 days |
| Verification documents | Deleted once our staff decide, or after 90 days if nobody reviewed them |
| Details given for an organization's approval, and a partner membership linked to it | While the organization's account exists |
| What a partner sent about you when you came from its site | Deleted once you link your organization; otherwise it expires after 30 minutes and is deleted within a day |
| Page, join, account-type and page-handover requests | 12 months after the decision; documents of a handover request nobody reviewed: 90 days |
| Messages you send us from the site | 90 days on our server |
| Messages an employer sent to several applicants at once | 1 year after sending |
| Conversations between an employer and an applicant, and the hiring team's comments | With the application: deleted with it or with your account |
| Conversations with the jobs.ly team | 2 years after the last message |
| An agency's conversations with a client's contact person | Until that contact is removed from the client |
| Candidates suggested to employers | 90 days, or 12 months after an invitation to apply |
| Shortlist and client-page history (answers, comments, suggested times) | 12 months after the link ends |
| Employers' notes and tags on saved candidates | Until 12 months after the last job you applied to at that employer closed |
| Agencies' placement records and their invoices | 7 years, then the candidate's name is removed |
| An agency's client and sales records, its files and the payments it records | Until the agency deletes them or its account (see “Client and sales records”) |
| jobs.ly's own sales records, and invitations to our sales team | Until our team deletes them (you can ask us to at any time) |
| Daily count of AI use per account | 13 months |
| Staff activity log | About 13 months (400 days) |
| Payment records and plan invoices | 7 years |
| Backups on our server | Database: 14 days; uploaded files: 7 days |
| Encrypted backups outside our server | 90 days (a copy deleted from Google Drive may stay in its bin for up to 30 more days) |
- Unused accounts: activity in your sign-in sessions and by your employer team counts as account activity. Staff accounts, suspended accounts and owners of organizations with an active paid plan are not deleted for inactivity. We delete an unused account only after both notices have reached it: an account we can't reach (for example a phone-only account while we can't send it a text message or a browser notification) is not deleted for inactivity while that lasts. Because phone numbers are sometimes given to new people, a phone-only account with a CV that comes back after 12 months or more must first confirm the name or email on its CV.
- Deleting your account: your CV, applications, alerts and uploaded files are deleted at once. Some records stay for the periods above: messages an employer sent to several applicants, staff activity-log lines that name you, anonymous visit records, payment records (with the organization's name and city, without the billed phone), and, if an agency placed you in a job with one of its clients through jobs.ly, your name on that agency's placement record and invoice.
- When deletion has to wait: while the account or its organization is suspended, or while one of its jobs is under review or has an open report. We tell you why.
- When an employer deletes its account: its jobs and the applications to them are deleted too, and so are an agency's client and sales records, files and invoices. We tell applicants whose application was still recent (the employer could still see their contact details), and every applicant keeps a short record of the application in My jobs → Applied for 12 months.
- Payment records: the invoice number, plan, amount, payment reference and status, and the billed organization's name and city. When an account is deleted, these records are no longer linked to it, and the billed phone number is removed.
- Backups: our server makes copies of the database and uploaded files every day; only the server's administrators can open them. An encrypted copy is also kept outside the server, on a computer of our operations team and in Google Drive. Deleted information may stay in these copies until they are removed. If we ever restore a backup, we delete again every account that was deleted after that copy was made, and keep every choice to stop made since (for example stopped messages, a CV made private or a device signed out).
- Copies outside jobs.ly: emails already sent to you, and applicant lists an employer downloaded, are not in our control. Our Terms require employers to delete such lists when they no longer need them, and at the latest 12 months after the job closes.
11.Your rights and choices
- See and download: “Download my data” (on your CV page under “Your account”, or in Organization settings under “Account”) gives you a file with your account, CV and uploaded file; your applications with their messages, interviews, offers and AI match scores; who your CV was shared with and their answers; your alerts, saved jobs and sign-in sessions; the messages and requests you sent us; your partner memberships; and your place on our sales team and your private calendar and Bcc addresses (when made and last used, never the addresses themselves). “View my data” shows the same as a page you can read or print. Employers also get their organization's details (including its approval details), jobs, team and payments, and an agency's owner its recorded fees.
- Correct: you can edit your CV, account and organization details at any time. Ask us to correct anything else.
- Delete: use “Delete my account” on your CV page or in Organization settings. You can also withdraw a single application under My jobs → Applied, and delete your CV alone (“Delete my CV”, under “Your account”) once none of your applications is still being considered. To confirm, if you last signed in more than 15 minutes ago, we first send a code to your phone or email.
- Stop or object: turn off job-fit alerts, suggestions to organizations, the public CV link, browser notifications (My jobs → Alerts, or Organization settings → Notifications), analytics (Display settings, or at the end of this page), and each kind of optional email with the link in it.
- Ask us: write to privacy@jobs.ly to see, correct or delete your information, to stop an optional use of it, or to ask how it is used. We may ask you to confirm that the account is yours, and we reply within 30 days. If you can't sign in, we can send you the “Download my data” file once we have confirmed the account is yours. If an agency keeps your details in its client and sales records, ask that agency first (see “Client and sales records”).
12.Keeping your information safe
- Every connection to jobs.ly is encrypted. You sign in with a code that works once, and our staff and sales team also need a passkey.
- Each person sees only what their role allows (see “Who can see your information”), and our staff's views of private CV data are recorded.
- If you find a security problem, write to security@jobs.ly.
13.Changes to this policy
When we change this policy, we update the date at the top of this page and keep the earlier versions, with their dates, on the page of earlier versions. When a change affects how we use your information, people with an account see a notice on the site and are asked to accept the new version.
14.Contact
For privacy questions, write to privacy@jobs.ly. jobs.ly is run by Libyan Spider (شركة العنكبوت الليبي).
Have a question about this page?
Contact us