Privacy Policy
1. Who we are
JOBnaru™ (jobnaru.com) is operated by an individual (sole proprietor) in the State of Texas, United States, under the brand JOBnaru™ (“we”, “us”). This policy explains what personal information we collect, how we use and share it, how long we keep it and the choices you have. It covers our website, our emails, and our API and MCP service.
JOBnaru™ is a U.S. job board for the Korean-American community. We do not collect resumes or job applications: you apply on the employer’s own site or by the email address or phone number the employer gives, and the employer handles your application under its own privacy policy.
Privacy contact: JOBnaru™ privacy contact (the operator) · privacy request form.
2. Summary
- You can search and read jobs without an account.
- We do not collect resumes or applications. We count clicks on “Apply” without recording who clicked.
- If you create an account, post a job or write to us, we keep only what we need to run the service and answer you.
- We do not sell personal information and do not share it for cross-context behavioral advertising. Paid placements and ads are always labeled and are chosen by page, not by who you are; advertisers receive only aggregate reports.
- Google Analytics is on by default, and you can turn it off at any time in “Cookie settings”. We honor Global Privacy Control.
- Your data is stored on our server in the United States.
- You can download or delete your data yourself in your account under “Privacy & data”, or write to us. We answer requests within 30 days.
3. What we collect and why
| When | Data | Why |
|---|---|---|
| Any visit | IP address, date and time, page requested, referring page and browser (user-agent) in our web server logs. | Deliver pages, keep the site running and secure, investigate errors and abuse. |
| Any visit | Our own page-view statistics: page, time, a one-way hash of your IP address (made with a secret key that changes every day), approximate location (country, region, city) looked up from your IP address in a database on our own server, device type, browser, referring page, and your account number if you are signed in. For automated visitors (search engines, AI crawlers) we also record the crawler’s name. For API and MCP requests we also record the query or the tool called and its parameters. | Count readers and views of each job, understand which information helps, detect bots and scraping. |
| Creating and using an account | Email address; optional name, language and time zone; how you signed up and signed in (Google or an emailed sign-in link); a password only if you set one (we store only a salted hash); account creation and last sign-in time; number of sign-ins; email preferences. Jobs you save, pages you bookmark, and your job alerts (search words, state, category and other filters). | Create and run your account, sign you in, keep your saved jobs and send the alerts you set up. |
| Signing in with Google | Your name, email address and whether Google has verified it. We do not receive your Google password or contacts. | Sign you in. |
| Agreeing or choosing | What you agreed to or declined (terms, privacy policy, age confirmation, emails, cookies, the terms for a role and, for a business, your confirmation that you are authorized to act for it), the document version, the time, your language, and keyed hashes of your IP address and browser. | Prove what you agreed to and respect your choices. |
| Posting jobs (employers) | The company name, website, location and description; the job details you enter (title, description, pay, location, visa and language requirements, and how to apply, including any application email or phone number you choose to publish); posting dates and status; our review notes; and counts of views and apply clicks. | Publish and manage your postings, review them, show you how they perform, and prevent fraud. |
| Clicking “Apply” | We add one to the job’s apply-click count (people only, not robots) and send you to the employer’s page or email. We do not record who clicked, and we do not receive what you send to the employer. | Show employers how many people clicked, without identifying anyone. |
| Payments | The payer’s name and billing email, what was bought (a job placement or an ad, and its dates), the amount, date and Stripe payment reference, the receipt and any refund. Card numbers are entered at Stripe; we never see or store them. | Take payment, issue receipts and refunds, and keep financial records. |
| Messages in your account | What you write to us and our replies. | Answer you and support your account. |
| Contact form (no account needed) | Name, email, optional organization, subject, message, language, IP address and browser. | Answer you, handle reports and privacy requests, prevent spam. |
| Reporting a job or an error | The job or page you report, your message, an optional corrected value and source link, and your language; your email address only if you want a reply, or your account number if you are signed in. The on-page report form does not record your IP address; reports sent through the contact form are handled like other contact-form messages. | Find and remove fake or unlawful jobs, correct information, and reply to you if you asked. |
| Security and activity log | Sign-ins, sign-out, failed sign-ins, sign-in links requested (including the email address entered), account changes, job postings and contact-form submissions, each with the IP address and time. Actions by JOBnaru™ staff (for example reviewing a posting) with the account and time. | Protect accounts, stop abuse, investigate incidents. |
| Searching and Ask JOBnaru™ | The words you search for or ask Ask JOBnaru™ (email addresses and long numbers are masked), the number of results, the page language and whether it came from a person or an automated program — without your IP address or account. Ask JOBnaru™ answers from our own data on our own server; your question is not sent to an outside AI service. | Improve search and answers, and find information that people look for but we do not have yet. |
| Email from us | Your email address, language, and which emails we sent you. | Sign-in links, replies, receipts and notices about your account and postings are always sent. Job alerts are sent only for alerts you save, and news only if you opted in; each has a one-click unsubscribe link. |
| API and MCP keys | Key name, a short prefix, a hash of the key (never the key itself), creation and last-use time, daily request counts; for each request the path and query and, for rate limits, the IP address. | Provide the API, enforce limits, prevent abuse. |
| Analytics | Through Google Analytics 4, unless you turn it off or send a Global Privacy Control signal: pages viewed, events, approximate location, device and browser data, and a random cookie identifier. | Understand how the site is used. |
| Forms protected by reCAPTCHA | On sign-in, contact and some other forms, Google reCAPTCHA v3 collects device and browser information and your IP address to estimate whether you are a person. | Block automated abuse of forms. |
| Clicks on sponsored placements | When you click a sponsored card: the time, which placement and page, your language, device type, your role if you are signed in, and the approximate country, region and city of your connection. We do not store your IP address, and robots are not counted. | Give advertisers aggregate click reports and check that placements work. |
| Business contact addresses | The business contact addresses that companies publish on their own websites, with the page where we found them, plus a record of our introduction emails and of whether and when a link in them was clicked (no IP address; we do not track opens). | Tell businesses about JOBnaru™, and honor unsubscribes. |
| Embedded videos | If a page shows a YouTube video and you keep previews on or click it, your browser connects to YouTube (Google), which receives your IP address and browser data. | Show videos included on the page. |
We do not ask for resumes, Social Security numbers, bank or payment card numbers, immigration documents, government ID numbers, or sensitive data such as health, religion or ethnicity. Please do not send them to us or put them in a job posting. We do not buy personal data, we do not use it for automated decisions with legal or similarly significant effects, and we do not build advertising profiles.
Information we collect from public sources is about jobs and companies: postings that companies publish on their own public job boards (such as Greenhouse, Lever and Ashby) and career pages (only where robots.txt allows), and public company information. A posting may include a recruiter’s business name or contact that the company published; we show it only as part of that posting and remove it on request.
Automated checks
- Every new or edited job posting is checked automatically — for example for a missing pay range in a state that requires one, or for signs of a scam. Postings the check flags are held until a person on our team reviews them.
- Collected jobs are classified automatically from the posting text (category, location, and mentions of visas or the Korean language).
- Search and Ask JOBnaru™ match your words against our own data on our own server.
None of these checks makes a decision that has legal or similarly significant effects on you. You can ask a person to look at any result by contacting us.
4. Employer and business accounts
When you post a job or add a business role (employer, advertiser or developer), we collect what that role needs: the business you act for, its website and location, your job title if you give it, and verification evidence such as your sign-in email domain or business details. Company pages and job postings are public. Your name and sign-in email are not shown publicly unless you put them in a posting.
When you add a role, you agree to the terms for that role and, for an organization, confirm that you are authorized to act for it; we record each agreement with the version of the role’s terms (section 3). If the terms for a role change, people with that role are asked to agree again before using its tools.
Accounts that still hold a retired member role keep the data described in the version of this policy in force when it was collected, until you delete it or your account.
What other people can see
| Who | What they can see |
|---|---|
| Everyone (public pages, API, MCP) | Job postings and company pages, including any application email or phone number the employer chose to publish. No job seeker data. |
| Employers | Counts of views and apply clicks for their own postings — never who viewed or clicked. An employer receives only what you send it yourself when you apply. |
| Advertisers | Aggregate numbers about their own ad only — visits, estimated views, clicks, and totals by role, country, region and city. Never names, emails or IP addresses. |
| Colleagues in your organization | Your name, email address and job title in the team list, and the organization’s shared records. |
| JOBnaru™ staff and the operator | What they need to review postings, verify businesses, handle reports, answer messages and resolve disputes. |
5. Who receives your data
We use these service providers. They process data for us under their own terms and may not use it for their own purposes except as their terms allow.
| Recipient | What and why | Where |
|---|---|---|
| Stripe, Inc. — payment processing | Processes payments for job placements and ads, card data and refunds, and emails receipts. | United States and other locations |
| Vultr — cloud server hosting | Stores the website, database, logs and backups on the server we rent. | United States (Texas) |
| Google LLC — Gmail | Sends our emails (sign-in links, job alerts, replies, receipts); Google receives the recipient address and message. | United States and other Google locations |
| Google LLC — Google Sign-In | Only if you choose “Continue with Google”. | United States and other Google locations |
| Google LLC — reCAPTCHA v3 | Spam and abuse protection on sign-in, contact and some other forms. | United States and other Google locations |
| Google LLC — Google Analytics 4 | Only as described in the cookie policy. Google signals and ad personalization are turned off. According to Google, GA4 does not log or store IP addresses. | United States and other Google locations |
| Google LLC — YouTube | Only on pages with a video, when previews are on or you click a video (privacy-enhanced mode, youtube-nocookie.com). | United States and other Google locations |
Employers: we do not send employers any information about you. When you apply on an employer’s site or by email, you send your information directly to the employer, which uses it under its own privacy policy.
Google’s privacy policy: policies.google.com/privacy. Location lookups use the DB-IP database stored on our own server, so no data is sent to DB-IP. Our fonts are served from our own server.
We may also disclose data when the law requires it (for example a valid court order), to protect the rights, safety or property of users or others, or to a successor if JOBnaru™ is transferred — in that case we will tell you before your data becomes subject to a different privacy policy. We do not sell personal data and do not share it for cross-context behavioral advertising.
6. Where your data is stored
Our server is in the United States (Texas), and our providers may also process data in other countries. If you use JOBnaru™ from outside the United States, your information is transferred to and processed in the United States.
7. How long we keep data
When you delete your account, we delete your bookmarks and saved articles, messages, API keys, contact-form messages sent from your email, roles and profile, remove your email address from our logs, and replace the account record with an anonymous placeholder, so job alerts stop and nothing left is linked to your email address. Security-log entries keep the IP address until their 12 months end, and consent records are kept as stated below, without your email. Deleted data disappears from backups within about 24 hours (uploaded organization documents within about 2 days). Electronic data is deleted so that it cannot be restored; we keep no paper records. We may keep data longer only where the law requires it (for example payment records) or to establish or defend a legal claim.
| Data | Kept for |
|---|---|
| Account, profile, roles, saved jobs and job alerts | Until you delete them or your account. |
| Job postings and company pages | Shown while live (30 days for a standard posting unless renewed). Expired and closed postings are no longer offered to job seekers and are kept in the employer’s account and our records until the employer deletes them or its account. |
| Jobs collected from company job boards | Removed from the site when they disappear from their source, or after 45 days without being seen there. |
| Messages in your account | 24 months after the last message, or until you delete your account. |
| Contact-form messages | 24 months; the IP address and browser data are removed after 12 months. |
| Security and activity log (with IP addresses) | 12 months. |
| Payment and invoice records | As long as the law requires for tax and accounting — generally up to 7 years. |
| Clicks on sponsored placements (no IP address stored) | Up to 24 months. |
| Introduction emails: recipient address, send and click records | Up to 24 months. |
| Business contact addresses collected from organizations’ websites | Until the organization asks us to remove it, and in any case up to 36 months for an address we have not used. We keep only the address and date of an unsubscribe so that we do not write again. |
| Site searches (no IP address or account) | 12 months. |
| Reports sent with the on-page report form | Until they are handled, then 24 months after they are handled; reports you sent are deleted when you delete your account. |
| Business verification documents uploaded by organizations (earlier roles) | Kept while the company is on JOBnaru™ (verified, or with an active or pending role). After a company leaves or is closed, the files are deleted 3 years later, for complaints and disputes. Files of applications that were not approved are deleted 1 year after the decision or the last activity. Deleted at once if you delete your account before your company is verified and no one else is in it. The record of what was checked, by whom and when is kept while the organization exists. |
| Confirmations by organization staff when saving page content | Kept as the organization’s record of its changes. The IP address is removed after 12 months; the link to your account and the IP address are removed when you delete your account. |
| Page-view statistics | After 13 months the IP hash, account number, city and referring page are deleted; only page, time, country, region, device and browser remain, which no longer identify you. |
| Apply-click counts (no personal data) | Kept with the job. |
| Web server logs | About 14 days. |
| API rate-limit counters (IP addresses) | Deleted after the counting window ends, within about 2 days. |
| Markers of used sign-in links (no personal data) | 2 days. |
| Consent records | While your account exists and for 3 years after it is deleted; anonymous cookie choices for 13 months. |
| Privacy request records | 3 years; a request that is still open is kept until it is closed. |
| Record of emails sent | 24 months. |
| Database backups | Made every hour; each is overwritten after about 24 hours. |
| Backups of uploaded organization documents | Made once a day on the same server, readable only by the operator; each is replaced after about 2 days. |
| Google Analytics data | At most 14 months in Google Analytics; analytics cookies expire after 13 months. |
8. Your privacy rights and choices
Wherever you live in the United States — and wherever you use JOBnaru™ from — you can ask us to:
- confirm whether we hold data about you and give you a copy (access and portability) — or download it yourself in your account under “Privacy & data”;
- correct inaccurate or incomplete data — most of it you can edit yourself in your profile;
- delete your data — you can delete your account yourself in your profile;
- stop or limit a use of your data;
- opt out of the sale or sharing of personal information and of targeted advertising — we do none of these, and we treat a Global Privacy Control signal as an opt-out;
- withdraw consent at any time (emails, cookies) — this does not affect processing before the withdrawal;
- have a person review the result of an automated check (section 3);
- not be treated differently for using these rights.
Use the privacy request form. We answer within 30 days, free of charge. If a request is complex, we may extend this as the law allows and tell you why. To protect you, we may ask you to confirm the request from the email address on your account; we do not ask for more data than we need for this. An authorized agent may act for you with your signed permission. If we decline a request, we will explain why and you can appeal by replying; we decide appeals within 60 days.
Email choices: every job alert and news email has a one-click unsubscribe link, and you can manage alerts and email preferences in your account. Account and transaction emails (sign-in links, receipts, notices about your postings) are part of the service.
9. Children
JOBnaru™ is not directed to children under 13. You must be 13 or older to create an account, and we do not knowingly collect personal data from children under 13. If we learn that we have, we delete it. Parents who believe their child gave us data can contact us.
Where local law sets a higher age for consent to data processing, we apply it at sign-up based on the country of your IP address — for example, people signing up from Korea must be 14 or older. Job seekers under 18 should look only for jobs that the law allows for their age.
10. Security and breaches
We protect data with encrypted connections (HTTPS with HSTS), hashed passwords and API keys, single-use sign-in links that expire after 15 minutes, protection against cross-site request forgery, rate limits, separation of personal data from the public job data and API, access to the server and admin area limited to the operator, and access-restricted backups. No system is perfectly secure.
If a breach of personal information occurs, we will contain it, assess the risk, and notify affected people and the authorities as U.S. state breach-notification laws (including Texas law) and other applicable laws require.
11. Cookie policy
Cookies are small files your browser stores for a website; local storage is similar. We use strictly necessary cookies and, unless you turn them off, Google Analytics cookies and video previews. We never use advertising cookies or ad networks. You can change your choice at any time with “Cookie settings” at the bottom of every page.
- Analytics: Google Analytics 4 is on by default, following the U.S. opt-out model. If you turn it off in “Cookie settings”, the analytics script is not loaded.
- If your browser sends a Global Privacy Control (GPC) signal, we treat it as an opt-out: Google Analytics is not loaded. We do not respond to “Do Not Track” signals, which have no agreed standard.
- Video previews: pages with a YouTube video show its preview image from Google’s servers unless you turn previews off.
| Name | Set by | Purpose | Category | Duration |
|---|---|---|---|---|
session | JOBnaru™ | Keeps you signed in, protects forms against forgery (CSRF), remembers your language and sign-up step, and holds a short list of pages already counted in this visit so our own statistics count each page once. | Strictly necessary | Until you close the browser; 30 days once you sign in or choose a language in your account. |
usn_consent | JOBnaru™ | Remembers your cookie choice and a random ID that links it to our consent record. | Strictly necessary | 12 months |
tz | JOBnaru™ | Your browser’s time zone, so dates and times are shown in your local time. | Strictly necessary (display) | Until you close the browser |
theme (local storage) | JOBnaru™ | Remembers light or dark mode — only if you click the theme button. | Strictly necessary (your setting) | Until you clear it |
usn_adseq | JOBnaru™ | Only if you choose “Accept all” or turn analytics on in “Cookie settings”: the numbers of the sponsored placements shown during this visit and how many times, so the same ad is not repeated too often and one advertiser can continue across pages. No personal data, no profile, nothing shared with advertisers. | Optional — only with your consent | Until you close the browser |
_ga, _ga_<ID> | Google Analytics | Distinguish visits and sessions for statistics. | Analytics — on unless you turn it off or send GPC | 13 months |
_GRECAPTCHA | Google reCAPTCHA (google.com) | Risk analysis to block automated abuse on sign-in, contact and some other forms. | Strictly necessary (security) | Up to 6 months (set by Google) |
| YouTube storage | YouTube (youtube-nocookie.com) | Video playback. In privacy-enhanced mode, according to YouTube, watching an embedded video does not influence your browsing experience on YouTube. | Media — only when you play a video | Set by YouTube |
| Google sign-in cookies | Google (accounts.google.com) | Set on Google’s site only if you choose “Continue with Google”. | Strictly necessary for that sign-in | Set by Google |
You can also block or delete cookies in your browser settings. If you block the session cookie, signing in and forms will not work.
12. U.S. state privacy rights (including California)
This section is for residents of California and other states with consumer privacy laws (for example Colorado, Connecticut, Virginia, Utah and Texas). In the past 12 months we collected these categories of personal information, for the purposes in section 3: identifiers (email address, name, IP address, account number); internet activity (pages viewed, searches, questions to Ask JOBnaru™, interactions); approximate geolocation (from IP address); commercial information (placements and ads that businesses bought); professional information that employers give about their business and postings; and inferences limited to whether a visitor is a person or a bot. Sources: you, your browser, Google if you use Google Sign-In, Stripe for payment status, and companies’ public job boards for job postings. We disclose personal information for business purposes only to the service providers in section 5.
We do not sell personal information, we do not “share” it for cross-context behavioral advertising, and we have not done so in the past 12 months. We do not use or disclose sensitive personal information for purposes that require a right to limit. We honor Global Privacy Control as a request to opt out. California residents and residents of other states with privacy laws can use the rights in section 8, including through an authorized agent, and we will not discriminate against you for using them.
Children’s privacy (COPPA): see section 9.
13. Users in Korea
Many of our users are Korean or Korean-speaking. If Korea’s Personal Information Protection Act (PIPA) applies to you, we honor the rights it gives you — access, correction, deletion, suspension of processing and withdrawal of consent — through the process in section 8, and we answer requests from users in Korea within 10 days. Your information is stored and processed in the United States by the providers in section 5, for the purposes and periods in sections 3 and 7. People signing up from Korea must be 14 or older. The person responsible for personal information protection is our privacy contact in section 1. You may also contact the Personal Information Infringement Report Center of KISA (118, privacy.kisa.or.kr).
14. Changes and contact
We will post any change here with a new date and version. If a change is material, we will email account holders before it takes effect, and account holders will be asked to agree again the next time they use their account. Earlier versions are available on request.