Your data is encrypted in transit (TLS) and at rest. It is protected on the way to us and while it sits with us.
Access to production data is tightly scoped, logged, and granted only where genuinely needed — never by default.
We collect only what we need to navigate on your behalf. Less data held is less data at risk.
Your profile powers your matches and nothing else. We do not sell your personal information, ever.
We build on reputable cloud infrastructure with network isolation, managed secrets, and regular patching.
We monitor for anomalies and maintain a plan to detect, respond to, and learn from incidents.
Security is a practice, not a badge. Here's what that looks like day to day.
Export your jobs and matches, or delete individual data or your entire account, any time — from your data settings. What you share powers your matches and nothing else. We never sell it.
We welcome reports from security researchers. If you believe you've found a vulnerability, email us with the details and steps to reproduce. We'll acknowledge your report, keep you updated, and won't pursue action against good-faith research.
Please give us reasonable time to remediate before any public disclosure.