Privacy Policy
Last updated: August 12, 2026
1. Introduction
This Privacy Policy explains how Corestack ("Corestack," "we," "us") collects, uses, shares, and protects personal information when you use corestackjobs.com and related services (the "Service").
Corestack is a job board for the data center and critical infrastructure industry. We are the data controller for the personal information described in this policy.
Contact for privacy matters: support@corestackjobs.com
2. Information We Collect
2.1 Information you give us
Account information. Email address and password when you register. If you sign in with Google, we receive your name, email address, and profile picture from Google.
Onboarding information. When you first register, we ask you to tell us:
- Whether you are looking for work or hiring
- The job categories you are interested in
- The geographic markets you prefer
- Your job search urgency or hiring timeline
- How you heard about Corestack
Candidate profile information. If you build a candidate profile: full name, professional title, location, biography, years of experience, LinkedIn URL, whether you are open to work, and whether your profile is visible to employers.
Resumes. Files you upload, and the information contained in them.
Employer information. If you create an employer profile: company name, tagline, logo, description, industry focus, founding year, headquarters, markets served, number of facilities, total capacity, website and careers page URLs, hiring contact email, hiring categories, and expected annual hiring volume.
Job listings. Content you submit when posting a role.
Job alerts. Keywords, locations, categories, and frequency preferences you configure.
Communications. Messages you send us, including support requests.
2.2 Information we collect automatically
Behavioral and usage data. We record events describing how you use the Service. This includes:
- Pages viewed and the paths you take through the site
- Job listings displayed to you and which ones entered your screen
- Search queries, including keywords and locations you search for
- Clicks on listings, apply buttons, and other interface elements
- Scroll depth on pages
- Referring website and, where applicable, the advertising campaign that brought you to us
We attach these events to a randomly generated session identifier stored in your browser. If you are signed in, we also attach your account identifier, which links your activity to your account. We retain event records associated with a signed-in account for as long as the account exists, and thereafter as described in Section 8.
Technical data. IP address, browser type and version, operating system, device type, and timestamps, collected automatically by our hosting and infrastructure providers.
2.3 Information from other sources
Aggregated job listings. We import listings from third-party job aggregation services. These listings are labeled with their source.
Publicly available company information. For employer profile pages we may include information about a company drawn from public sources, including news coverage and company websites.
Payment confirmations. Stripe tells us when a payment succeeds, along with limited transaction details. We do not receive your full card number.
3. How We Use Information
We use personal information to:
- Create and administer your account, including authentication
- Display job listings and let you search, filter, and save them
- Show your profile and resume to employers when you have enabled profile visibility
- Publish job listings submitted by employers
- Send job alert emails you have configured
- Process payments for job listings
- Send transactional emails, including account confirmation and payment receipts
- Provide employers with metrics about their own listings, such as view counts
- Respond to support requests
- Monitor for fraud, abuse, scraping, and violations of our Terms
- Analyze how the Service is used so we can improve it
- Measure the effectiveness of our advertising and marketing
- Produce aggregated, de-identified industry insights, including salary benchmarks and hiring trend reports, which we may publish or commercialize (see Section 6)
- Comply with legal obligations
4. Legal Bases for Processing (EEA, UK, and Switzerland)
If you are in the European Economic Area, United Kingdom, or Switzerland, we process personal information on these legal bases:
| Purpose | Legal basis |
|---|---|
| Creating and operating your account; publishing listings you submit | Performance of a contract (Art. 6(1)(b)) |
| Processing payments | Performance of a contract (Art. 6(1)(b)) |
| Sending job alerts you configured | Performance of a contract (Art. 6(1)(b)) |
| Making your profile visible to employers | Consent (Art. 6(1)(a)) — via the visibility toggle |
| Behavioral analytics and product improvement | Legitimate interests (Art. 6(1)(f)) — operating and improving the Service |
| Advertising measurement and marketing analytics | Consent where required by ePrivacy rules; otherwise legitimate interests |
| Producing aggregated industry insights | Legitimate interests (Art. 6(1)(f)) |
| Fraud prevention and security | Legitimate interests (Art. 6(1)(f)) |
| Legal compliance | Legal obligation (Art. 6(1)(c)) |
Where we rely on legitimate interests, we have assessed that our interests are not overridden by your rights and freedoms. You may object to that processing (see Section 9).
Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect processing that already occurred.
5. How We Share Information
We do not sell personal information for money. Certain sharing described below may qualify as a "sale" or "sharing" under California law — see Section 10.
With employers. If you enable profile visibility, employers using the Service can view your candidate profile and download your resume. If you turn visibility off, this stops prospectively; it does not recall information an employer already accessed.
With employers whose listings you interact with. When you click "Apply," you are typically redirected to that employer's own application system. Anything you submit there is governed by the employer's privacy policy, not this one.
Publicly. Job listings, including employer name and role details, are published on the Service and are visible to anyone, including search engines. Employer profile pages are public.
Service providers. We share information with vendors who process it on our behalf under contract:
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase | Database, authentication, file storage | Account, profile, resume, and event data |
| Vercel | Application hosting | Technical and request data |
| Stripe | Payment processing | Payment and transaction data |
| Authentication (Sign in with Google) | Account identity data | |
| Resend | Transactional and alert email | Email address, message content |
| Google Ads | Advertising measurement | Usage and campaign data |
Legal and safety. We may disclose information where we believe in good faith it is necessary to comply with law or legal process, enforce our Terms, or protect the rights, safety, or property of any person.
Business transfers. If Corestack is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or substantially all of its assets, personal information held by us may be transferred to the acquiring or successor entity as part of that transaction, and will remain subject to this Privacy Policy until the recipient provides notice of a materially different policy. We will notify registered users of any such transfer by email or through a prominent notice on the Service. Where consent is legally required for the transfer, we will obtain it.
6. Aggregated and De-Identified Data
We produce aggregated statistics and insights from Service data — for example, salary ranges by role and market, hiring volume trends, and candidate supply by category. These outputs are constructed so that individual people and, where applicable, individual employers cannot reasonably be identified from them.
We may publish, license, or sell these aggregated outputs. We maintain the de-identification and will not attempt to re-identify individuals from them, except as permitted by law to test the effectiveness of our de-identification.
Aggregated data derived in this way is not treated as personal information under this policy. Underlying identifiable records remain governed by every other section of it.
7. Cookies and Similar Technologies
We use:
- Strictly necessary storage — session cookies and local storage for authentication and to keep you signed in. These cannot be disabled without breaking the Service.
- Analytics storage — a randomly generated session identifier used to associate your activity within and across visits.
- Advertising measurement — where we run paid campaigns, parameters in URLs and identifiers used to attribute signups to campaigns.
Most browsers let you block or delete cookies through their settings. Blocking necessary cookies will prevent you from signing in.
8. Data Retention
| Data | Retention |
|---|---|
| Account and profile data | While your account is active |
| Resumes | While your account is active, or until you delete the file |
| Job listings | While active, then archived indefinitely as a historical record |
| Behavioral event data | 24 months from collection |
| Payment records | 7 years, to meet tax and accounting obligations |
| Support correspondence | 24 months |
| Backups | Up to 30 days after deletion from live systems |
When you delete your account we delete or de-identify your personal information within 30 days, except where we must retain it for legal, tax, fraud prevention, or dispute resolution purposes. Aggregated and de-identified data derived before deletion is not affected.
9. Your Rights
Everyone. You can access and update most of your information directly in your dashboard, change your profile visibility at any time, delete your resume, manage or delete job alerts, and delete your account.
EEA, UK, and Switzerland. You have the right to: access your personal data; correct inaccurate data; request erasure; restrict processing; object to processing based on legitimate interests, including profiling; receive your data in a portable format; and withdraw consent. You also have the right to lodge a complaint with your national supervisory authority.
California. See Section 10.
Other US states. Residents of states with comprehensive privacy laws, including Virginia, Colorado, Connecticut, Utah, and Texas, have rights to access, correct, delete, and obtain a copy of their personal data, and to opt out of targeted advertising and profiling with legal or similarly significant effects. You may also appeal a denied request by replying to our response.
To exercise any right, contact support@corestackjobs.com. We will respond within the period required by applicable law — generally one month under GDPR and 45 days under US state laws. We may need to verify your identity before acting.
We will not discriminate against you for exercising these rights.
10. California Privacy Notice
Under the CCPA as amended by the CPRA, in the past twelve months we have collected these categories of personal information:
| Category | Collected | Source | Purpose |
|---|---|---|---|
| Identifiers (name, email, IP) | Yes | You; Google sign-in; automatic | Account, communication, security |
| Personal records (employment history, resume) | Yes | You | Profile and applications |
| Commercial information (transactions) | Yes | Stripe | Payment |
| Internet activity (browsing, search, interaction) | Yes | Automatic | Analytics, improvement, advertising |
| Geolocation (approximate, from IP) | Yes | Automatic | Regional relevance, security |
| Professional or employment information | Yes | You | Core Service function |
| Inferences (role preferences, seniority, search intent) | Yes | Derived | Personalization, aggregated insights |
Sensitive personal information. We do not intentionally collect sensitive personal information as defined by the CPRA. Resumes may contain such information if you choose to include it. We do not use it to infer characteristics about you.
Sale or sharing. We do not sell personal information for money. Our use of advertising measurement tools may constitute "sharing" for cross-context behavioral advertising under California law. To opt out, email support@corestackjobs.com with the subject line "Do Not Sell or Share My Personal Information," or use a Global Privacy Control signal, which we honor.
Your California rights: to know, delete, correct, opt out of sale/sharing, limit use of sensitive personal information, and be free from discrimination for exercising these rights. Authorized agents may submit requests with proof of authorization.
11. International Transfers
We are based in the United States and our service providers operate infrastructure in the United States and other countries. If you access the Service from outside the United States, your information will be transferred to and processed in the United States, which may not offer the same level of data protection as your home country.
For transfers of personal data out of the EEA, UK, or Switzerland, we rely on the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, together with additional safeguards where necessary.
12. Security
We protect information using encryption in transit (TLS), encryption at rest for stored files, row-level access controls in our database, private storage buckets scoped so that users can access only their own files, and access controls on administrative functions.
No system is completely secure. We cannot guarantee absolute security, and you share information with us at your own risk. If we become aware of a breach affecting your personal information, we will notify you and any required regulator as the law requires.
13. Children
The Service is not directed to children under 16 and we do not knowingly collect their personal information. If you believe a child has provided us information, contact support@corestackjobs.com and we will delete it.
14. Third-Party Sites
The Service links to employer application portals and other third-party sites. We are not responsible for their privacy practices. Review their policies before providing information.
15. Changes to This Policy
We may update this policy. If we make material changes to how we handle personal information, we will notify registered users by email or a prominent notice on the Service at least 14 days before the changes take effect, and will update the "Last updated" date above.
16. Contact
Privacy questions, requests, or complaints:
Corestack support@corestackjobs.com corestackjobs.com
If you are in the EEA or UK and are not satisfied with our response, you may complain to your local data protection authority.