This Privacy Policy explains how iWork (“we”, “us”, “our”) collects, uses, and shares information when you use our job search platform, company dashboard, and related services (the “Services”). If you do not agree with this Policy, please do not use the Services.
Controller: iWork (Kingsley Abebe)
Email: info@kingsleyabebe.org
Website: www.kingsleyabebe.org
This Policy applies to job seekers, registered users, and companies using iWork to post jobs or manage applications.
A. You provide: account details (name, email, password—stored hashed), Google OAuth profile basics if you sign in with Google, profile/resume (skills, experience, preferences, city/state, links, uploaded resume stored via Cloudinary), job activity (saved jobs, applications, notes, alert preferences), company info (name, logo/banner via Cloudinary, tagline, job postings), messages/support emails, and—if you use paid features—limited payment details processed by Stripe (we do not store full card numbers).
B. Automatically: usage data (search terms, filters, pages and features used, timestamps), device/log data (IP address, browser/OS, device type, referrer/UTM, approximate location from IP), and cookies similar technologies (auth session, preferences, security).
C. From third parties: job listing providers (e.g., Adzuna), authentication providers (Google OAuth), infrastructure and tools (MongoDB Atlas, Cloudinary, Nodemailer/Gmail, hosting/CDN, analytics if enabled).
Where GDPR/UK GDPR applies, we rely on: Contract (to deliver requested Services); Legitimate interests (to secure, improve, and personalize the Services); Consent (optional communications/certain cookies); and Legal obligation (compliance).
We do not sell personal information. We share data with: (a) employers/companies at your direction when you apply or contact them; (b) service providers (hosting, database, Cloudinary, email, analytics, error monitoring) under confidentiality and data-protection terms; (c) integrated APIs (e.g., Adzuna, Google OAuth); (d) Stripe for payment processing; (e) authorities where required by law; and (f) successors in a business transfer with appropriate protections.
We use essential cookies (authentication, security), preference cookies (e.g., alert frequency), and analytics cookies (if enabled). You can control cookies in your browser. Blocking essential cookies may impair login and core features.
We retain information for as long as your account is active and as needed to provide the Services. Logs/security records are typically kept up to 12 months unless required longer. Legal/accounting records are kept as required by law. When no longer needed, data is deleted or anonymized.
California (CPRA): We do not “sell” or “share” personal information for cross-context behavioral advertising. If this changes, we will provide a “Do Not Sell or Share” mechanism.
We may process data in the United States and other countries. Where required, we use appropriate safeguards (e.g., Standard Contractual Clauses) for transfers from the EEA/UK.
We employ administrative, technical, and physical measures (encryption in transit, hashed passwords, access controls, monitoring). No method is 100% secure; we cannot guarantee absolute security.
The Services are not directed to children under 16 (or the age required by your jurisdiction). If you believe a child provided personal information, contact us to remove it.
Our Services may link to third-party sites or services, which are governed by their own privacy policies.
We may update this Policy periodically. Changes will be posted with an updated “Effective date.” Material updates may be communicated via email or in-product notice.
Questions or requests? Email support@GoHirely.com.
Effective date: August 10, 2025