← Back to Ajar

Privacy Policy

Effective May 9, 2026

1. Who we are

Ajar operates the private talent marketplace at theajar.com. When we say “Ajar”, “we”, “us”, or “our”, we mean the organisation running this Service. Questions? Reach us at hello@theajar.com.

2. What data we collect

Candidates

  • Google account name and email (for authentication)
  • LinkedIn profile URL (for verification; we do not store profile content)
  • Professional headline, seniority, role function, and years of experience
  • Compensation preferences, work style preferences, and target roles
  • Communication preferences and notification settings

Recruiters

  • Name, work email, firm name, and LinkedIn profile URL
  • Firm type and professional specialisations
  • Messages sent to candidates via the platform

Automatically collected

  • Timestamp and count of profile views (no IP or identity recorded)
  • Session tokens (stored in HTTP-only cookies)

3. How we use your data

  • To operate and improve the Service
  • To match Candidates with relevant Recruiters anonymously
  • To send transactional emails (signal notifications, weekly digest)
  • To enforce our Terms of Service and prevent abuse

We do not sell your data. We do not use your data for advertising. We do not share your data with third parties except as described below.

4. Anonymity and identity disclosure

Recruiter-facing profiles are anonymous by design. Your name, employer, and LinkedIn profile are never shared with a Recruiter unless you explicitly accept their signal. At that point, only the contact details you've provided (name and email) are revealed to that specific Recruiter.

5. Data sharing

We share data with:

  • Supabase — database and authentication infrastructure (EU/US data centres)
  • Google OAuth — for sign-in only; we receive name, email, and profile photo
  • Resend — transactional email delivery
  • Vercel — hosting and serverless infrastructure

All sub-processors are bound by data processing agreements.

6. Data retention

Candidate profile data is retained for as long as your account is active. You may delete your account at any time from Settings → Danger zone. Deletion removes your profile, preferences, and signal history within 30 days.

Recruiter data is retained for the duration of the recruiter relationship and up to 12 months after account termination for compliance purposes.

7. Your rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Object to or restrict certain processing
  • Data portability (receive your data in a machine-readable format)

To exercise any of these rights, email hello@theajar.com. We will respond within 30 days.

8. Cookies

We use a single session cookie for authentication. We do not use tracking cookies, advertising cookies, or analytics cookies. No cookie consent banner is required because we do not place non-essential cookies.

9. Security

We use industry-standard security practices including encrypted connections (TLS), HTTP-only session cookies, and row-level security on our database. No system is 100% secure — if you believe you've found a vulnerability, please disclose it responsibly to hello@theajar.com.

10. Changes to this policy

We will notify you of material changes by email at least 14 days before they take effect. Continued use of the Service after the effective date constitutes acceptance.

11. Contact

For privacy questions or requests: hello@theajar.com