Datenschutzerklärung

This Privacy Policy explains how Jobstoday World FZCO (the “Company”, “we”, “us” or “our”) collects, uses, stores, discloses and otherwise processes personal data when you visit https://www.jobstoday.world, use our related websites, the Jobstoday World mobile apps for iOS and Android and our recruitment services, create an account, apply for a job, submit a Job Request, post or manage vacancies, receive our emails, or communicate with us.

The Company is a free zone company licensed by the International Free Zone Authority (IFZA), registered under number 77536, with its registered address at IFZA Property FZCO, Building A1, Dubai Digital Park, Dubai Silicon Oasis, Dubai, United Arab Emirates. For privacy enquiries, contact support@jobstoday.world.

The website is available in English, Spanish, Polish and German. From 5 November 2026 Jobstoday World FZCO is the controller of the personal data processed through the website and the apps.

This policy applies to jobseekers, candidates, employers, recruiters, staffing agencies, website visitors, business contacts and other individuals whose personal data we process in connection with our services, including business contacts whose professional details we obtain from other sources (see section 3). Where we process personal data on behalf of an employer or recruiter customer, that customer may act as the controller and our processing is also governed by the applicable customer agreement and data processing agreement.

• Job board and job search. Vacancies posted directly by employers and vacancies aggregated from job-board and feed partners. When you apply for a partner vacancy, we redirect you to the site of the partner or the employer.
• Candidate accounts and applications. A profile, CV/resume upload, applications with a cover letter and screening questions, saved vacancies and an application history.
• Job Requests. A Job Request is a candidate profile that employers and recruiters can view. Based on your Job Request and plan, we search for matching vacancies and submit applications on your behalf.
• Paid candidate plans. Plans such as Recruiter Pro & VIP, which make your profile more visible to employers and, depending on the plan, include a career coach, interview preparation and profile reviews.
• AI Resume Builder. AI-assisted resume creation, tailoring and review of resumes.
• Candidate mailbox. An inbox with a Jobstoday email address (on jtworldmail.com) for correspondence with employers about your applications.
• Employer services. Job posting with AI-assisted job descriptions, applicant management, screening questions, AI-assisted application review, team recipients and paid plans.
• Recruitment Services for employers. (Cost Per Hire – Cost per Screening – Candidate Database and Unlimited Job posting): Our recruitment team searches for, contacts and screens candidates, checks identity, right to work, references and documents, holds first interviews, sends shortlists with notes and gives employers access to our Candidate Database, with unlimited job postings with a monthly plan.
• Mobile apps. The Jobstoday World apps for iOS and Android, which use the same account and services.
• Payments, subscriptions and partner programmes. Checkout, subscriptions, invoices and our affiliate programme.
• Email communications. Service messages, job alerts, newsletters and marketing emails.

Available features depend on account type, location, subscription and enabled services.

• Identity and contact data: title, first and last name, email address, username, telephone number, postal address (street, house number, postcode, city, region, country) and preferred language.
• Account, sign-in and security data: your password (stored in hashed form), the sign-in method you use, the identifier, name and email address we receive from Google or Apple if you sign in through them, optional two-factor authentication settings, whether you chose to have a device remembered for 30 days and, in the mobile apps, a random device identifier generated by the app.
• Registration record: the date and time you registered, your IP address, the city and country derived from it, the version of the terms in force and a digitally signed record of your acceptance.
• Professional profile and CV data: CV/resume files and their text, employment history, education, skills, languages, qualifications, driving licence, career preferences, salary expectations, the job you are looking for (Job Request) and links to social profiles.
• AI Resume Builder data: the files and text you give to the AI Resume Builder, including uploaded CVs (PDF, Word or photo), your answers to its questions and the resumes it generates.
• Additional details some forms ask for: date of birth, gender, nationality, work-permit status, availability date and a profile photo.
• Recruitment and application data: job searches, saved jobs, the vacancies you apply to, cover letters, attachments, screening responses, match results, AI review scores and summaries, hiring status and the Job Requests you publish.
• Recruitment Services data: when our recruitment team screens you for an employer, identity and right-to-work information and documents, licences and certificates, references, and notes from calls and first interviews.
• Employer and business data: organisation name, industry, company size, tax number, business contact details, job vacancy details, the email addresses of team members who receive applications, applicant management activity, billing and subscription records.
• User content and communications: mailbox emails (sender, recipients, subject, content and attachments), messages sent through our contact forms, support requests, job reports, feedback and other information you choose to submit.
• Transaction data: the plan purchased, amount, currency, payment status, the customer and transaction references issued by the payment provider, and the brand and last four digits of a payment card. Full card numbers and security codes are entered with the payment provider and are not received or stored by us.
• Technical and usage data: IP address; approximate location derived from IP (city, region, postcode, country); browser, operating system, device type and user agent; referring page; pages viewed; timestamps; and the campaign and click identifiers contained in links, such as UTM parameters and partner click IDs.
• Job click data: when you click through to an external vacancy, we log a click identifier, the job, the time, your IP address and approximate location, device and browser, the referring page, whether the click appears to be automated and, if you used the CV match check, the match result.
• Interaction recordings: our analytics tool records page views, clicks, scrolling and pointer movement, and can replay a visit, to help us find usability problems.
• Email engagement data: delivery, opens, link clicks (with IP address and user agent), bounces, spam complaints and unsubscribes.
• Mobile app data: with your permission, your device location while the app is in use, to suggest jobs near you (the coordinates are kept on your device and used to work out your city), and the CV files you choose to upload from your device.

Data we receive from other sources

• Google and Apple, when you use their sign-in.
• Job-board, feed and affiliate partners, which pass us click identifiers and confirmations of conversions.
• Employers and recruiters, for example the status of your application or the email addresses of their team members.
• Referees you name, when our recruitment team checks your references.
• Business data providers, such as People Data Labs, and contact lists we import, which give us the names and professional contact details of businesses and professionals we may contact about our services.

Please do not upload another person’s information unless authorised. Avoid including sensitive personal data in a CV or message unless genuinely necessary.

• Create and administer accounts, authenticate users (including through Google or Apple sign-in) and provide requested services, including the candidate mailbox.
• Display job listings, process applications and Job Requests, and connect candidates with employers or recruiters, including by sending applications by email to the employer and to the team addresses the employer has verified.
• Search for vacancies and submit applications on your behalf where you use Job Request.
• Generate or support resume content, CV text extraction, candidate-job matching, applicant screening, application summaries, scoring and recommendations using AI-assisted features.
• Enable employers and recruiters to post jobs, review candidate profiles and applications, see AI match scores and summaries, and manage recruitment pipelines.
• Provide our Recruitment Services to employers: searching for, calling and screening candidates, checking identity, right to work, references and documents, holding first interviews, sending shortlists with notes, and giving employers access to our Candidate Database. Only candidates who agree, when they fill in their details in an application, to the processing of their data and to sharing it with employers (by clicking to accept) are added to the Candidate Database. Candidates can withdraw this consent at any time by contacting support@jobstoday.world, and we then remove them from the database.
• Show jobs from partner job feeds, distribute employers’ vacancies to partner job boards and channels, and report clicks and completed applications to those partners using click identifiers.
• Detect automated traffic, apply the country restrictions that partners set for their vacancies, prevent fraud and abuse, and secure accounts.
• Provide customer support, service notices, product updates and security communications.
• Process subscriptions and payments, pre-fill billing details at checkout from your profile, enforce our terms and protect our services.
• Analyse service usage (including through heatmaps and session replay), troubleshoot issues, improve features and develop services.
• Measure our advertising and affiliate campaigns, including by sharing hashed identifiers with advertising platforms where you have allowed marketing cookies, and identify the companies that visit our pages for employers.
• Send job alerts, newsletters and marketing communications, and contact businesses and professionals about our services, where permitted by law and, where required, with your separate consent.

• European Union and United Kingdom (GDPR and UK GDPR). Because we offer our services to people in the European Economic Area (EEA) and the United Kingdom and analyse how they use our website, the GDPR and the UK GDPR apply to that processing (Article 3(2) GDPR).
• United Arab Emirates. We are established in the UAE, in the IFZA free zone, which has no data protection law of its own. The UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021, the “UAE PDPL”) therefore applies to all personal data we process, wherever you are located.
• Other countries. Where you are in the United States, Latin America, Asia or elsewhere, the data protection law of your state or country may also give you rights (see sections 12 and 13).

Where the GDPR or UK GDPR applies, we rely on the following legal bases (Article 6 GDPR):

• Contract (Art. 6(1)(b)): running your account, Job Request, the AI Resume Builder, the candidate mailbox, applications and job posts, and payments.
• Legal obligation (Art. 6(1)(c)): tax and accounting records, and responding to lawful requests.
• Legitimate interests (Art. 6(1)(f)): keeping the platform secure, preventing fraud and automated traffic, analysing and improving how our pages are used (including heatmaps and session replay), screening candidates and checking references for employers who use our Recruitment Services, and contacting businesses and professionals about our services. You can object to this processing at any time, and always to direct marketing.
• Consent (Art. 6(1)(a)): adding you to our Candidate Database and sharing your profile with employers through it, the CV match check on partner vacancies, non-essential cookies, advertising, and marketing emails where consent is required.
• Legal claims: establishing, exercising or defending legal claims.

Where the UAE PDPL applies, we process your data with your consent or where an exception in Article 4 of the UAE PDPL applies, for example where processing is necessary to perform a contract with you or to take steps you ask for before a contract, to comply with UAE law, or to establish or defend legal claims.

Information necessary to create an account or deliver a feature is required to use that feature; if you do not provide it, we cannot provide that feature. Optional information and optional marketing choices are identified as such.

Consent is not used as a blanket substitute for other lawful bases. If we ask for consent for a specific optional purpose, you may refuse or withdraw that consent without affecting processing lawfully based on another ground.

Some services use automated systems or AI to assist with resume creation, job matching, candidate screening, application summaries, ranking or recommendations. The features are:

• AI Resume Builder. Your resume content, your instructions and any target job description you provide are processed to draft, tailor or review a resume.
• CV text extraction. A CV file you upload (PDF, Word or photo) may be processed to read its text.
• Job Request assistance. The description of the job you are looking for is processed to structure your Job Request.
• Application review for employers. When you apply to a vacancy posted on Jobstoday, your CV text, your screening answers and the vacancy are processed to produce a match score, a short summary and an assessment that are shown to the employer.
• CV match check on external vacancies. On some partner vacancies you may be invited to upload a CV for a match check before you are redirected. The check runs only if you give the separate consents shown on that page, and you can always continue to the vacancy whatever the result.
• Job descriptions. Details an employer enters are processed to draft a job description.
• Job matching and suggestions. Suggested jobs are calculated by our own search technology from your profile and preferences.

For these features we use external AI providers: OpenAI, Google (Gemini) and Anthropic, depending on the feature and our configuration. The content described above, including the full text of a CV, is sent to the provider to generate the output.

Our AI features support people’s decisions; they do not make hiring decisions. Outputs may be incomplete or inaccurate and should be reviewed by users. We do not automatically reject an application because of an AI score. Employers and recruiters decide whom to contact, interview or hire, and should not rely solely on automated outputs where applicable law requires human involvement or additional safeguards. A match, score or recommendation does not guarantee an interview, job offer or hiring outcome.

Two automated checks can stop a redirect to an external vacancy: detection of automated (bot) traffic, and a partner’s restriction on the countries from which it accepts candidates. If you believe either was applied to you in error, contact us.

We may disclose personal data to the following categories of recipients where necessary and subject to appropriate safeguards:

• Employers, recruiters and staffing agencies. When you apply for a vacancy, the employer receives your application (contact details, CV, cover letter, screening answers and the AI-assisted review) in its dashboard and by email, including at the team addresses it has verified, and can download your CV.
• Viewers of Job Requests. A Job Request is a profile intended to be found by employers. It can be viewed on the platform, and employers and recruiters who are signed in to Jobstoday can see your contact details and download the CV attached to it. If you select the anonymous option, your name, contact details, location and photo are hidden; other details, such as gender and salary expectation, remain visible.
• Employers using our Recruitment Services. They receive our shortlists and screening notes, and employers with access to our Candidate Database can see the profiles and CVs of candidates who agreed to be included.
• Referees. As part of our Recruitment Services, we may contact your referees to check your references.
• Job-board, job-distribution and integration partners. When you click to apply for a partner vacancy, we redirect you to the partner with a click identifier and may confirm to the partner that a click or application took place. We do not send your CV, name or contact details to feed partners.
• Service providers supporting hosting, cloud infrastructure, communications, analytics, advertising, AI functionality, payment processing, security and technical operations, listed in the table below.
• Professional advisers, auditors, insurers, regulators, law-enforcement bodies and courts where legally required or reasonably necessary to protect rights and safety.
• A successor or transaction counterparty in connection with a merger, financing, restructuring, acquisition or sale of all or part of our business, subject to applicable law.

We keep this list up to date and provide further details of our providers on request.

Server hosting and data location

Our application servers, the file storage that holds CVs, attachments and incoming mailbox emails (Amazon S3) and our mailbox email service (Amazon SES) run in the AWS Europe (Frankfurt) Region (eu-central-1), within the European Union. This identifies where that infrastructure is located; it should not be read as a guarantee that every category of personal data, backup, log, support record or third-party service is stored exclusively in that region. Our team in the UAE and in our other team locations may access data to run and support the service, and data is also processed in other locations by the service providers listed in this policy, as described in section 8.

Because the Company is established in the United Arab Emirates, the service operates in more than 85 countries and several providers are based in the United States, data may be transferred across borders, including to the UAE and the United States. Where personal data from the EEA or the UK is sent to a country without an adequacy decision, we use a recognised safeguard, such as the European Commission’s Standard Contractual Clauses (with the UK Addendum) or the EU–US Data Privacy Framework where the recipient is certified (Chapter V GDPR). Transfers of personal data subject to the UAE PDPL are made in line with Articles 22 and 23 of the UAE PDPL. You can ask for information about these safeguards at support@jobstoday.world.

We retain personal data for as long as reasonably necessary for the purposes described in this policy, including providing services, maintaining accounts, meeting legal and contractual obligations, resolving disputes and enforcing agreements. Retention periods depend on data type, account status, customer instructions and applicable law.

Closing your account

You can close your account at any time in Settings on the website or in the mobile app. Closure takes effect immediately: you can no longer sign in, your profile, Job Requests, resumes and job postings are taken offline, and Job Requests are removed from search. Active web subscriptions are cancelled; a subscription bought through the App Store or Google Play must be cancelled there first.

Closing an account does not by itself erase the underlying records, and applications you have already sent remain with the employers who received them. To have your personal data erased, write to support@jobstoday.world. We will erase or anonymise it unless we are required or entitled to keep it, for example invoices or records needed for legal claims.

We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. These include encrypted connections, passwords stored in hashed form, optional two-factor authentication, restricted staff access, protection against forged requests and automated abuse, and signed records of acceptance. No method of transmission or storage is completely secure. Keep account credentials confidential and notify us promptly if you suspect unauthorised access.

Our website and services use cookies and similar technologies, such as browser storage, to operate the site, maintain sessions, remember preferences, support security, measure performance and measure advertising. Our consent tool groups them into four categories: Necessary (always on), Preferences, Statistics and Marketing.

How the categories are set depends on where you visit from, which we determine from your IP address. If you visit from the European Union or European Economic Area, the United Kingdom or Switzerland, or we cannot determine your country, the Preferences, Statistics and Marketing technologies controlled by the consent tool stay off until you allow them in the cookie banner. In other countries they are on by default and you can switch them off. In every country, a Global Privacy Control signal from your browser is treated as a refusal of marketing cookies.

You can change your choices at any time through “Cookie Settings” in the website footer, and through your browser settings. Blocking essential cookies may affect functionality. Our tag manager loads on every page and applies your choices to the tags it controls. Separately, our analytics tool for heatmaps and session replay (section 3) does not use cookies and is not one of the cookie categories.

The mobile apps contain no advertising or analytics components. They store your sign-in session, your profile and your last location on your device.

Depending on your location and applicable law, you have rights to request access to your personal data and a copy of it, correction, erasure, restriction of processing and data portability, to object to processing based on legitimate interests and to direct marketing at any time, not to be subject to a decision based solely on automated processing that significantly affects you, and to withdraw consent without affecting earlier processing.

You can exercise several of these choices yourself:

• Edit your profile, CV and Job Request in your account.
• Hide your identity on a Job Request with the anonymous option.
• Choose which emails you receive in Settings (“Receive new offers from Jobstoday” and “Newsletter”), or use the unsubscribe link in a marketing email.
• Change your cookie choices through “Cookie Settings” in the website footer.
• Close your account in Settings on the website or in the mobile app (see section 9).

For anything else, including a copy of your data, its erasure or removal from the Candidate Database, contact support@jobstoday.world. We may need to verify your identity. We respond within one week, or sooner where local law requires. Where an employer or recruiter controls the relevant recruitment data, you may also need to contact that organisation.

You may also complain to a data protection authority: in the EEA, the authority of the country where you live or work; in the UK, the Information Commissioner’s Office; in the UAE, the UAE Data Office (or its successor authority).

If a US state privacy law applies, residents may have additional rights, such as rights to know, access, correct, delete or obtain a copy of personal information and to opt out of certain targeted advertising, sale or sharing activities. We do not sell personal data. Where you allow marketing cookies, our use of advertising cookies may count as “sharing” under California law. Outside the European Union, European Economic Area, United Kingdom and Switzerland, our website footer shows a “Do Not Sell or Share My Personal Information” link that opens the cookie settings, and we treat a Global Privacy Control signal as an opt-out of marketing cookies. Availability and scope depend on applicable law and our role in the processing. Contact us to submit a request.

Our services are intended for adults. You must be at least 18 years old, and meet the minimum age for employment in your jurisdiction, to create an account, apply for a job or submit a Job Request. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided personal data unlawfully, contact us.

Our services contain links to third-party websites, job boards, payment services and integrations. In particular, vacancies sourced from partners take you to the site of the partner or employer to complete your application. Their privacy practices are governed by their own notices. We are not responsible for third-party websites or services that we do not control.

We may update this policy from time to time. We will post the updated version on our website and revise the effective date. Where required by law, we will provide additional notice or seek consent before material changes.