Privacy Policy

Introduction

Welcome to Indigenous Jobs Network ("IJN," "we," "our," or "us"). This Privacy Policy explains, in plain language, how we collect, use, share and look after your personal information when you use our job board.

This policy applies to all users of Indigenous Jobs Network within Canada, including candidates, employers, and recruitment agencies. It does not cover other websites we link to; their own privacy policies apply. IJN is subject to the Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia's Personal Information Protection Act (PIPA).

By accessing or using Indigenous Jobs Network, you agree to the terms of this Privacy Policy. If you do not agree with our policies and practices, please do not use our services.

Accountability

Indigenous Jobs Network has designated a Privacy Officer who is responsible for our compliance with privacy legislation and this policy. You may contact our Privacy Officer at [email protected].

We are accountable for all personal information in our possession or custody, including information transferred to third-party service providers for processing on our behalf.

Indigenous Jobs Network is a brand operated by Scandium Technologies Corp., based in British Columbia, Canada.

We are accountable under PIPEDA for personal information transferred to third-party service providers processing data on our behalf, including providers located outside Canada.

Information We Collect

We collect information that you provide directly to us, as well as information collected automatically when you use our platform:

• Account Information: Name, email address, password, phone number, and profile photo.
• Professional Information: Resume, work history, education, skills, certifications, languages spoken, and professional credentials.
• Company Information: Company name, size, industry, website, logo, and company description.
• Application Data: Cover letters, resumes submitted for specific roles, and application responses.
• Payment Information: Billing address and payment method details, processed by Stripe. We never store full credit card numbers.
• Technical Information: IP address, browser type, operating system, device identifiers, and province-level geolocation.
• Approximate Location: When you open our opportunities page without a search, we may show opportunities in the province your internet connection appears to come from. We don't save it to your account or profile, but like any search filter it can appear in our usage records. If you're signed in as a candidate, we may use the province saved in your profile instead. If you select "Use my location", your browser asks your permission, then works out your province on your device: your exact location is never sent to us. Once you allow it, the opportunities page uses your device's location the same way on later visits. The province becomes part of the page address like any search filter, and your last choice is saved in your browser so the page opens on it next time. You can switch to all of Canada at any time, or turn off location in your browser settings.
• Usage Data: Pages visited, features used, search queries, session duration, and referral source.
• Communications: Support requests, feedback, and survey responses you send us.
• Social Sign-In Information: If you choose to sign in with Google or LinkedIn, we receive a unique account identifier, your name, and email address from that provider, used only to create or match your account. We do not post on your behalf or access your contacts.

Purposes for Collection & Use

We collect and use personal information only for the following identified purposes:

• Providing, operating, and maintaining the platform
• Creating and managing your user account
• Processing job applications and facilitating candidate-employer connections
• Showing opportunities near you, using your province only, never your exact location
• Processing payments, issuing invoices, and managing billing
• Communicating service updates, system alerts, and responding to support requests
• Sending marketing communications (only with your express consent)
• Detecting, preventing, and investigating fraud, abuse, and security threats
• Complying with legal obligations, including Canada Revenue Agency (CRA) requirements and court orders
• Generating aggregated, anonymized analytics to improve the platform (this data is no longer personal information)

Where enabled, we also offer optional AI-assisted features such as resume parsing, skill suggestions, resume-to-job tailoring, and ATS scoring. When you use these features, the relevant text (such as resume content or a job description) is sent to third-party AI service providers acting as our data processors under contractual data-processing terms. We do not authorize these providers to use your personal information for their own purposes, including training their models, except as needed to provide the feature to you. AI-assisted outputs are assistive only and do not make hiring decisions.

We limit collection to information that is necessary for the identified purposes. We do not collect personal information indiscriminately.

Consent

Express consent is obtained when you: create an account, opt in to marketing emails, configure cookie preferences, or submit a job application.

Implied consent may apply when you: voluntarily provide information while using the platform, or when collection is reasonable given the circumstances of the interaction.

You may withdraw your consent at any time by contacting our Privacy Officer or updating your preferences in your account settings. Please note that withdrawing consent may limit your ability to use certain features of the platform. We will not require you to consent to more than is needed to provide the service you asked for.

Candidate Data Practices

• Profile Visibility: Employers and agencies cannot browse or search candidate profiles. They see your information only when you apply to one of their postings.
• Resume Storage: We store your resume with care and limit who can see it. Employers can view your resume when you apply to one of their jobs.
• Application Data: When you apply to a job, your application materials (resume, cover letter, profile summary) are shared with the hiring employer. You may withdraw an application at any time.
• Data Deletion: You can ask to delete your candidate profile at any time from your account settings. Once deleted, it cannot be recovered. We may keep some records where the law requires it.

Employer & Agency Data Practices

• Company profile information (name, logo, industry, description) is publicly visible in our company directory.
• Employers may access candidate data only for candidates who have applied to their posted positions. Browsing or downloading candidate data without a corresponding application is not permitted.
• Employers must not use candidate data obtained through IJN for any purpose other than evaluating candidates for the specific posted role.
• Recruitment agencies operating on behalf of client companies are responsible for ensuring their clients comply with these data practices.
• When an employer account is deleted, job posting data may be retained in anonymized form for platform analytics.

Disclosure & Sharing

We may share your personal information in the following circumstances:

• With Employers: When you apply for a job, your application materials are shared with the hiring company.
• With Agencies: If an agency manages the job posting, your application may be shared with the agency and its client company.
• Service Providers: We share information with vendors who process data on our behalf, under contractual privacy protections (see Service Providers section).
• Law Enforcement: We may disclose personal information where required or permitted by law, such as in response to a court order, subpoena or warrant, or to protect the safety of our users or others.
• Business Transfers: If our business, or part of it, is merged, acquired or sold, personal information may be transferred as part of that transaction, as permitted by applicable privacy law.
• Job-Post Distribution: When an employer publishes a job posting on IJN, we may distribute that posting to third-party platforms, such as X (formerly Twitter), as part of our syndication features. Only the job posting content (title, description, location, company name) is shared; candidate personal information is not included.
• Anonymized Data: We may share aggregated, anonymized data that is not used to identify individuals.

WE DO NOT SELL, RENT, OR TRADE YOUR PERSONAL INFORMATION TO THIRD PARTIES FOR THEIR MARKETING PURPOSES.

Service Providers

We rely on a small number of kinds of service providers to run the platform:

• Payment Processing: Stripe processes card payments. We never store full credit card numbers.
• Email Delivery: Email delivery providers send transactional and notification emails on our behalf.
• Security & CDN: Security, content delivery, and bot-protection providers protect the platform from attacks and automated abuse, and deliver content quickly.
• Authentication / Identity Providers: Google and LinkedIn: optional social sign-in, available only where enabled. We receive only your account identifier, name and email. Use is subject to each provider’s own privacy policy.
• Analytics: Google Analytics 4, Google Tag Manager, and Mixpanel: first-party product and usage analytics, loaded only after you grant analytics consent. Used solely to improve the platform, never for advertising.
• AI Service Providers: Where AI-assisted features are enabled (e.g. resume parsing, skill suggestions, resume-to-job tailoring, ATS scoring), the relevant text is sent to third-party AI providers acting as our data processors under contractual data-processing terms. We do not authorize these providers to use your information for their own purposes, including model training, except as needed to deliver the feature.
• Error & Performance Monitoring: Monitoring providers receive application error and performance data to help us identify and fix issues. We limit the personal information included in this data.
• Hosting & Storage: Cloud hosting and file storage providers. Your personal information may be stored or processed in Canada, the European Union, the United States and other countries where our providers operate, under contract, and while there it may be subject to the laws of those places. We remain accountable for that information under PIPEDA.
• Performance & Reliability Telemetry: We collect performance data (page-load speed, errors) to keep the platform reliable. It is not used for advertising or profiling.

We use contracts or other appropriate means to require our service providers to protect personal information and to use it only to provide services to us.

Safeguards

We look after your personal information with safeguards that fit how sensitive it is. These include:

• Encryption that protects your information while it travels to us, and for certain sensitive information we store
• Letting only the people who need your information to do their work see it
• Optional multi-factor authentication for your account
• Keeping watch over our systems for signs of trouble
• A plan for how we respond if something goes wrong

Even with this care, no way of sending or storing information online is completely secure, so we cannot promise absolute security.

Breach Notification

Under PIPEDA's mandatory breach reporting provisions (in effect since November 1, 2018), we are required to:

• Report to the Office of the Privacy Commissioner of Canada any breach of security safeguards involving personal information that creates a real risk of significant harm to individuals
• Notify affected individuals, as soon as feasible, of any such breach that creates a real risk of significant harm to them
• Maintain a record of every breach of security safeguards for a minimum of 24 months

If a breach involves your personal information, we will notify affected users, the Office of the Privacy Commissioner of Canada and the BC OIPC where required by law.

Where we notify you, the notice will include the information the law requires, such as what happened, the kinds of personal information involved, what we are doing about it, steps you can take, and how to reach our Privacy Officer.

If you think your account may have been compromised, please let us know right away at [email protected].

Your Privacy Rights

Under PIPEDA and BC PIPA, you have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you, and information about how it has been used and disclosed.
• Correction: Request that we correct any inaccurate or incomplete information.
• Withdrawal of Consent: Withdraw your consent to our collection, use, or disclosure of your information (this may affect your ability to use the platform).
• Challenge Compliance: Challenge our compliance with privacy legislation by contacting our Privacy Officer.

To exercise any of these rights, contact our Privacy Officer at [email protected]. We will respond within the time required by law. We may ask you to confirm your identity before we act on a request. Access requests are generally free; where the law allows a minimal fee, we will tell you before we proceed. In some cases the law allows or requires us to refuse access, for example where it would reveal someone else's personal information or confidential business information. If we refuse, we will tell you why where the law requires.

Cookies & Tracking

We use cookies and similar tracking technologies to operate and improve our platform. These include:

• Essential Cookies: Required for authentication, session management, and platform security. These cannot be disabled.
• Analytics Cookies: Help us understand platform usage patterns. Loaded only after you grant analytics consent (default denied). We use Google Analytics 4, Google Tag Manager, and Mixpanel as first-party product analytics tools, solely to improve the platform. Example cookies: _ga, _gid, mp_*. These are never used for advertising or cross-site tracking.
• Preference Cookies: Store your settings and preferences for a better experience.

We do NOT use third-party advertising or cross-site tracking cookies.

You can manage your cookie preferences at any time through our cookie consent banner or your browser settings. Session cookies are deleted when you close your browser. Your cookie choices are saved for up to 395 days, after which we may ask again.

We honour the cookie-consent choices you make through our consent banner. If you have granted analytics consent, analytics cookies will be active regardless of any Do Not Track browser setting; if you have withheld consent, no analytics cookies are loaded.

Retention & Disposal

We retain personal information only as long as necessary to fulfill the purposes for which it was collected, or as required by law:

• Active accounts: Information retained for the duration of your account.
• Deleted accounts: Personal information is deleted or anonymized within a reasonable time after the account is deleted, except records we must keep by law (such as financial records).
• Financial and billing records: Kept for as long as Canadian tax law requires.
• Security and audit logs: Kept only as long as needed for security, fraud prevention, and legal purposes. Some security and compliance records are kept for up to 7 years.
• Application data: Retained by employers independently of IJN; IJN’s copies follow the retention periods above.
• Anonymized analytics data: Retained indefinitely (no longer constitutes personal information).

When we no longer need personal information, we delete it or anonymize it with care.

Accuracy

We make reasonable efforts to keep the personal information we hold accurate, complete and up to date for the purposes we use it for.

You are responsible for keeping your profile information, contact details, and professional credentials current and accurate.

Employers are responsible for the accuracy and currency of their company profile and job posting information.

You can update most of your information directly through your dashboard. If you are unable to make a correction directly, contact our Privacy Officer for assistance.

Children's Privacy

Indigenous Jobs Network is a professional employment platform intended only for adults. It is not directed to, and may not be used by, anyone under 18 years of age (or the age of majority in their province or territory of residence, if that is higher).

We do not knowingly collect personal information from anyone below this age.

If we become aware that personal information has been collected from someone below this age, we will take steps to delete that information.

If you believe someone below this age has provided personal information to us, please let our Privacy Officer know.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, we may also let you know in other ways, such as a notice on the site or an email, and we will give any notice the law requires. We encourage you to review this Privacy Policy periodically for any changes.