Privacy Policy

This Privacy Policy explains how Articling Jobs ("we", "us", "our") collects, uses, discloses, retains, and protects personal information in connection with articlingjobs.com (the "Service"). We handle personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial private sector privacy legislation.

This Policy applies to everyone who uses the Service: candidates, employers, recruiters, and visitors. It forms part of our Terms and Conditions. By using the Service you consent to the practices described here, subject to the choices set out in sections 6 and 10.

Employers who receive candidate information through the Service are independently responsible for their own handling of that information and must comply with privacy law and section 4 of the Terms. We are not responsible for an employer's use of information once lawfully disclosed to them.

We collect the following categories of information, directly from you unless noted otherwise:

• Account information: name, email address, password (stored only as a cryptographic hash), chosen roles, and, if you enable them, passkey credentials (public keys only).
• Candidate profile and resume information you choose to provide: job title, practice area, education, work experience, licences and memberships, skills, languages, NCA status, location, photograph, publications, volunteer work, and any free text you write.
• Application information: cover letters, resumes, answers, and the record of which postings you applied to and when.
• Employer and company information: firm name, logo, description, locations, team members, and postings.
• Reviews, ratings, rankings, messages, support tickets, and other content you submit.
• Usage information: pages and postings viewed (including per-posting view counts tied to your account), saved jobs, searches, and feature usage.
• Payment information: plan, purchase, invoice, and transaction records. Card details are collected and processed by Stripe; we never receive or store full card numbers.
• Technical information: IP address, browser and device characteristics, and server logs collected automatically for security and operations.

• To provide the Service: operating accounts, publishing postings, delivering applications to employers, showing profiles according to your visibility settings, and processing payments.
• To personalize your experience: showing your saved jobs, your private rankings, your own viewing history, and relevant listings.
• To provide employers with aggregate, non identifying statistics about their postings, such as total and unique view counts. Your individual browsing is not shown to employers.
• To communicate with you: transactional messages (applications, interviews, invitations, billing, security) and, only with your consent, optional notification categories you can manage on the notification settings page.
• To maintain safety and integrity: preventing fraud and spam, enforcing the Terms including the anti-discrimination policy, and securing the Service.
• To comply with legal obligations and to establish, exercise, or defend legal claims.
• To improve the Service, using aggregated or de-identified information wherever practical.

We do not sell personal information, and we do not use your information for third party advertising.

We rely on your consent, express or implied, as required by PIPEDA. Providing profile or application information, posting content, or purchasing services constitutes consent to the handling described in this Policy for those purposes. You may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice; withdrawal may limit the parts of the Service we can provide. Consent for optional emails can be withdrawn on the notification settings page or through the unsubscribe mechanism in the email itself.

• With employers: when you apply to a posting, the posting employer receives your application materials. Employers with the required access (an active plan, recruiter pass, or live posting, as applicable) can view candidate profiles set to public, including contact details where you have provided them for that purpose.
• With other users: public candidate profiles are visible as described in section 6; company profiles, postings, and reviews are public; your name appears with reviews you publish (initials only for signed-out visitors).
• With service providers acting for us: payment processing (Stripe), transactional email (Brevo), server hosting, file storage, and map tiles (OpenStreetMap tile servers receive standard web requests, including IP addresses, when maps load). Providers may only use the information to provide their service to us.
• For legal reasons: where required by law, subpoena, or court order, or where necessary to protect the rights, property, or safety of users, the public, or the Service.
• In a business transaction: if we are involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction subject to equivalent protections.

Candidates are never visible to other candidates, and we do not disclose your application history to anyone other than the employers you applied to.

• Your candidate profile is visible to qualifying employers only if you set it to public. You can change this at any time in your profile settings.
• Address privacy settings let you control how precisely your location appears.
• Your private job rankings, notes, saved jobs, and viewing history are visible only to you.
• Reviews you publish are public; you may delete your review at any time.

We use strictly necessary cookies to keep you signed in (session cookies), to protect against cross site request forgery, and to remember functional preferences. We also use browser storage to preserve unsaved form drafts on your device. We do not use third party advertising or cross site tracking cookies. Because these cookies are necessary for the Service to function, they cannot be switched off while using the Service; you can clear them at any time through your browser.

• Account and profile information is retained while your account is active.
• Applications and hiring records are retained while the related accounts remain active, so both sides keep an accurate record of the process.
• Payment and transaction records are retained as required by tax and accounting law, generally seven years.
• Server logs and technical records are retained for a short period for security and troubleshooting.
• When your account is closed, we delete or de-identify personal information within a reasonable period, except where retention is required by law, needed to resolve disputes, or necessary to enforce agreements.

We protect personal information with safeguards appropriate to its sensitivity, including encryption in transit (TLS), password hashing, passkey support, role based access controls that strictly separate what candidates, employers, and staff can see, payment handling delegated entirely to Stripe, and least privilege access for administration. No system is perfectly secure; if a breach creates a real risk of significant harm we will notify affected individuals and the Office of the Privacy Commissioner of Canada as required by law.

• Access: you may request access to the personal information we hold about you and information about how it has been used and disclosed.
• Correction: you may update most information directly in your account, and may ask us to correct anything else that is inaccurate or incomplete.
• Withdrawal of consent: as described in section 4.
• Deletion: you may close your account and request deletion, subject to the retention rules in section 8.
• Complaint: you may complain to us using the contact details below, and you have the right to complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca) or your provincial privacy regulator.

We respond to written requests within the time limits set by applicable law, and we will not discriminate against you for exercising your rights.

Some service providers process information outside Canada (for example, payment and email providers operate infrastructure in the United States and elsewhere). Information handled outside Canada is subject to the laws of those jurisdictions, including lawful access by their authorities. We use contractual and technical protections with providers regardless of location.

The Service is intended for people pursuing or offering legal careers and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us personal information, contact us and we will delete it.

We may update this Policy from time to time. Material changes will be signalled on the Service or by email, and the date at the top of this page will change. Your continued use of the Service after a change takes effect constitutes acceptance of the updated Policy.

Our privacy officer oversees compliance with this Policy. Requests, questions, and complaints can be sent through the support inbox in your dashboard or by email to privacy@articlingjobs.com.