Privacy Policy

1. Introduction

Forcepull ("we", "our", or "us") operates forcepull.com (the "Site"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Site and use our services.

By using Forcepull, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

• Email Address, for account creation and passwordless authentication
• Newsletter Email, your email address when you subscribe to our jobs digest. We use double opt-in: nothing is sent until you confirm via the link we email you
• Company Information, company name, website, logo, and description when creating a company profile
• Job Listings, job titles, descriptions, location, salary, and other details you provide when posting jobs
• Profile Information, optional profile details like name, location, and bio

2.2 Automatically Collected Information

• Usage Data, IP address, browser type, pages visited, time spent on pages, and other diagnostic data
• Cookies, we use strictly necessary cookies for session management and security (see Section 7)

2.3 Payment Information

Payment processing is handled by Stripe. We do not store your credit card details. Stripe's use of your personal information is governed by their Privacy Policy.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our job board services
• Send you login code emails for passwordless authentication
• Send you the jobs digest you subscribed to, plus its confirmation email
• Process payments for job postings
• Display your job listings to job seekers
• Respond to your inquiries and provide customer support
• Monitor and analyze usage patterns to improve our services
• Detect, prevent, and address technical issues or fraudulent activity
• Comply with legal obligations

4. Data Storage and Location

Your data is stored on secure servers operated by Hetzner in Germany (EU). Database backups and uploaded images are held in Cloudflare R2 object storage in the EU. We use industry-standard security measures to protect your information, including:

• Encrypted connections (HTTPS/TLS)
• Secure database storage
• Regular security updates and monitoring
• Access controls and authentication

International Data Transfers. Your primary data is not transferred outside the EU. A small number of processors may handle specific data in the United States under their own Standard Contractual Clauses: Stripe (payment details) and Postmark (email delivery). See Section 5.1 for the full list.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information with:

5.1 Third-Party Service Providers

• Stripe, payment processing (see their Privacy Policy)
• Postmark, email delivery for login codes and the jobs digest (see their Privacy Policy)
• Anthropic, AI processing of the job posting text you submit to the import assistant (see their Privacy Policy)
• Cloudflare, CDN, security services, and EU object storage for backups and uploaded images (see their Privacy Policy)
• Hetzner, server hosting (see their Privacy Policy)
• Database, self-hosted on our Hetzner server (PostgreSQL); no third-party database provider

5.2 Public Information

The following information is publicly visible on our Site:

• Published job listings (title, description, salary, location, etc.)
• Company profiles (name, website, logo, description)
• Any other information you explicitly choose to make public

Your email address and other account details are never made public.

5.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (court orders, subpoenas).

6. Your Rights (GDPR & UK GDPR)

If you are located in the European Economic Area or the United Kingdom, you have the following rights:

• Right to Access, request a copy of your personal data
• Right to Rectification, update or correct your information
• Right to Erasure, request deletion of your account and data
• Right to Restrict Processing, request limitation of data processing
• Right to Data Portability, receive your data in a portable format
• Right to Object, object to processing of your personal data
• Right to Withdraw Consent, withdraw consent at any time

To exercise these rights, contact us.

7. Cookies

We use strictly necessary cookies to provide our services. These cookies are essential for the Site to function and cannot be disabled:

• Session Cookie (_forcepull_session), maintains your login session
• CSRF Token, protects against cross-site request forgery attacks

We do not use tracking, analytics, or advertising cookies. No cookie consent banner is required because these cookies are strictly necessary for the Site's operation.

8. Data Retention

We retain your personal information for as long as:

• Your account is active
• Needed to provide you with our services
• Required to comply with legal obligations (tax records, payment history)

To delete your account, contact us; we delete your personal information within 30 days of the request, except where we're required by law to retain certain records.

Newsletter subscriptions. We keep your address only while you're subscribed. Unsubscribing deletes it immediately and entirely; we keep no suppression list or record that you were ever subscribed. Signups that are never confirmed are deleted automatically after 30 days.

9. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Continued use of our services after changes constitutes acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact:

Contact, Contact form
Data Controller, Forcepull

12. Supervisory Authority

If you are located in the EEA or UK and believe we haven't addressed your concerns, you have the right to lodge a complaint with your local data protection authority.