Privacy notice

Job seekers: if you save a job or subscribe to an alert, we store the email address you provide and the filters you set. We do not collect CVs, identity documents, or nationality at this stage.

Employers: business identity information you enter when you create an account: company name, website, country of registration, and a contact email. When you pay for a posting, your card details go to Stripe directly and never reach us: we receive only a payment reference, the amount, and whether it succeeded.

Visitors: standard request metadata (IP address, user agent, page visited) for security and aggregated analytics. We do not run third-party advertising trackers.

• To run job postings, alerts, and saved-job features.
• To prevent fraud, scam postings, and abusive activity.
• To improve the product through aggregated, non-identifying analytics.

Under the GDPR, we rely on (a) performance of a contract for account and posting services, (b) legitimate interest for security, analytics, and fraud prevention, and (c) consent for marketing communications. Where United States state privacy laws apply to you, they grant equivalent rights of access, correction and deletion, which we honour through the same request process.

Only The Skylane staff with a legitimate need can view employer account data. Job seeker email addresses for alerts are accessible only to admin staff and to the system that delivers the emails. We hold no card or bank details of any kind. Stripe processes payments and holds those details; we store only a payment reference and the amount charged or refunded.

Our database and authentication are hosted by Supabase in the eu-central-1 region (Frankfurt, Germany). Hosting and DNS run through Vercel. Payments are processed by Stripe, which is based in the United States, so the payment records attached to a posting are transferred outside the EEA under the safeguards Stripe maintains for international transfers.

• Job postings: retained while active plus three years for audit.
• Employer accounts: retained while the account is open.
• Job alert subscriptions: until you unsubscribe (every alert email contains an unsubscribe link).
• Saved jobs: until you delete them or close the account.
• Request logs: 90 days for security; aggregated analytics beyond that.

You have the right to:

• Request a copy of the personal data we hold about you.
• Correct inaccurate information.
• Delete your account and associated data.
• Object to processing for marketing.
• Lodge a complaint with the data protection authority for your country of residence, or, in the United States, with your state attorney general.

Email hello@theskylane.co to exercise any of these rights. We respond within 30 days.

The Skylane uses a small number of strictly-necessary cookies for authentication and session continuity. We do not run advertising or third-party tracking cookies. Where analytics cookies are used, they are first-party and aggregated only.

We will update this notice when our practices change. Material changes will be flagged on the homepage for at least 30 days.