Privacy Policy

1. Introduction

Forcepull ("we", "our", or "us") operates forcepull.com (the "Site"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Site and use our services.

By using Forcepull, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

• Email Address, for passwordless authentication of the accounts that run the Site, and for the newsletter if you subscribe
• Newsletter Email, your email address when you subscribe to our jobs digest. We use double opt-in: nothing is sent until you confirm via the link we email you
• Company Information, company name, website, logo, and description when creating a company profile
• Job Listings, job titles, descriptions, location, salary and other details, taken from the employer's own public careers page
• Job Suggestions, the link you send us through the suggestion form and an optional note about the role. The form asks for no name, no email address and no way to reach you, and we do not reply to suggestions
• Profile Information, optional profile details like name, location, and bio

2.2 Automatically Collected Information

• Usage Data, IP address, browser type, pages visited, time spent on pages, and other diagnostic data
• Cookies, we use strictly necessary cookies for session management and security (see Section 7)

2.3 Payment Information

None. Nothing on this Site is for sale, there is no checkout, and we never ask for payment details.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our job board services
• Send you the jobs digest you subscribed to, plus its confirmation email
• Display your job listings to job seekers
• Respond to your inquiries and provide customer support
• Monitor and analyze usage patterns to improve our services
• Detect, prevent, and address technical issues or fraudulent activity
• Comply with legal obligations

4. Data Storage and Location

Your data is stored on secure servers operated by Hetzner in Germany (EU). Database backups and uploaded images are held in Cloudflare R2 object storage in the EU. We use industry-standard security measures to protect your information, including:

• Encrypted connections (HTTPS/TLS)
• Secure database storage
• Regular security updates and monitoring
• Access controls and authentication

International Data Transfers. Your primary data is not transferred outside the EU. A small number of processors may handle specific data in the United States under their own Standard Contractual Clauses: Postmark (email delivery). See Section 5.1 for the full list.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information with:

5.1 Third-Party Service Providers

• Postmark, email delivery for the jobs digest and for messages you send us (see their Privacy Policy)
• Cloudflare, CDN, security services, and EU object storage for backups and uploaded images (see their Privacy Policy)
• Hetzner, server hosting (see their Privacy Policy)
• Database, self-hosted on our Hetzner server (PostgreSQL); no third-party database provider

5.2 Public Information

The following information is publicly visible on our Site:

• Published job listings (title, description, salary, location, etc.)
• Company profiles (name, website, logo, description)
• Any other information you explicitly choose to make public

Your email address and other account details are never made public.

5.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (court orders, subpoenas).

5.4 Advertising

We do not currently display third-party advertising. When we do, it will be labelled, never a job, and we will not use advertising cookies or send advertisers anything that identifies you.

6. Your Rights (GDPR & UK GDPR)

If you are located in the European Economic Area or the United Kingdom, you have the following rights:

• Right to Access, request a copy of your personal data
• Right to Rectification, update or correct your information
• Right to Erasure, request deletion of your account and data
• Right to Restrict Processing, request limitation of data processing
• Right to Data Portability, receive your data in a portable format
• Right to Object, object to processing of your personal data
• Right to Withdraw Consent, withdraw consent at any time

To exercise these rights, contact us.

7. Cookies

We use strictly necessary cookies to provide our services. These cookies are essential for the Site to function and cannot be disabled:

• Session Cookie (_forcepull_session), maintains your login session
• CSRF Token, protects against cross-site request forgery attacks

We do not use tracking, analytics, or advertising cookies. No cookie consent banner is required because these cookies are strictly necessary for the Site's operation.

8. Data Retention

We retain your personal information for as long as:

• Your account is active
• Needed to provide you with our services
• Required to comply with legal obligations (tax records, payment history)

To delete your account, contact us; we delete your personal information within 30 days of the request, except where we're required by law to retain certain records.

Newsletter subscriptions. We keep your address only while you're subscribed. Unsubscribing deletes it immediately and entirely; we keep no suppression list or record that you were ever subscribed. Signups that are never confirmed are deleted automatically after 30 days.

9. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Continued use of our services after changes constitutes acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact:

Contact, Contact form
Data Controller, Forcepull

12. Supervisory Authority

If you are located in the EEA or UK and believe we haven't addressed your concerns, you have the right to lodge a complaint with your local data protection authority.