Privacy Policy

1. Who We Are

PinkSlipCrew ("we", "us", "our") operates the PinkSlipCrew platform. We are committed to protecting your privacy and handling your data with transparency and care. For privacy-related inquiries, contact us at privacy@pinkslipcrew.com.

2. Eligibility

PinkSlipCrew is intended for users who are at least 16 years old. We do not knowingly collect personal data from children under 16. If we become aware that a child under 16 has provided us with personal data, we will take steps to delete that information promptly.

3. Information We Collect

We collect information you provide directly:

• Professional profile data (name, headline, company, skills, experience)
• Resume files (PDF/DOCX) stored in encrypted private storage
• Referral requests and messages
• Verification evidence (employment email, LinkedIn)
• Reports and moderation submissions
• Account credentials (email address, managed by Supabase)

We also collect certain information automatically:

• IP address (for rate limiting and abuse prevention)
• Browser and device information
• Usage data (pages visited, actions taken within the platform)

4. Lawful Basis for Processing

We process your data based on the following legal grounds:

• Contract performance: Processing necessary to provide the platform services you have requested (account management, referral matching, messaging).
• Consent: Where you have given explicit consent (e.g., resume processing consent, marketing communications).
• Legitimate interest: For platform security, abuse prevention, and improving our services—where these interests do not override your fundamental rights.
• Legal obligation: Where required by applicable law (e.g., audit log retention, responding to lawful requests).

5. How We Use Your Information

Your information is used to:

• Provide referral matching and request management
• Verify professional affiliations
• Prevent spam, fraud, and abuse
• Send transactional notifications about your requests
• Improve platform quality and safety

6. What We Never Do

We never:

• Sell your personal data to third parties
• Share resumes without your explicit consent
• Display your email, phone, or personal contact details publicly
• Use your data for automated employment decisions

7. Third-Party Service Providers

We use the following third-party processors to operate the platform:

• Supabase — Authentication, database hosting, and file storage (hosted in the United States).
• Resend — Transactional email delivery.
• Sentry — Error tracking and performance monitoring.
• Cloudflare — Bot protection (Turnstile CAPTCHA).

These providers are contractually bound to protect your data and are not permitted to use it for their own purposes.

8. International Data Transfers

Your data may be processed in countries outside your own, including the United States, where our service providers operate. We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses where required by applicable data protection laws.

9. Data Sharing

Your resume is shared only when you explicitly authorize it for a specific referral request. Referrers see your professional profile but never your private contact information. We do not share your data with other third parties except as described in this policy or with your explicit consent.

Hiring Network Profile Sharing is optional. If you enable it, PinkSlipCrew may share your professional profile with relevant employers, recruiters, hiring partners, referral partners, and affiliates to help identify opportunities. This consent never includes your full resume, email, phone number, home address, or other private contact information. You can withdraw it in Settings at any time; withdrawal stops future network sharing but cannot recall information already received by an external recipient. We record network-profile sharing activity for your review.

10. Data Security

We use industry-standard security measures including encryption at rest (AES-256-GCM) and in transit (TLS), signed URLs for file access, role-based access controls, rate limiting, and regular security audits. Resume files are stored in private, encrypted storage and validated for file type, size, and integrity before processing.

11. Your Rights

Depending on your jurisdiction, you have the right to:

• Access all your data (data portability)
• Rectify inaccurate data
• Request account deletion (right to erasure)
• Withdraw consent for data processing at any time
• Restrict or object to certain processing activities
• Control visibility of your profile sections

To exercise these rights, use the settings in your account or contact us at privacy@pinkslipcrew.com.

12. Data Retention

We retain your data while your account is active. After a deletion request, we retain data for a 30-day grace period, then anonymize it. Specific retention periods:

• Account data: Retained until deletion, then anonymized after 30-day grace period
• Audit logs and consent/share evidence: Retained for 7 years for legal compliance
• Messages: Retained until account deletion, then permanently deleted
• Resume files: Deleted from storage upon account deletion

13. Cookies

PinkSlipCrew uses only essential session cookies required for authentication and security, managed by Supabase. We do not use analytics, advertising, or tracking cookies. Session cookies are strictly necessary for the platform to function and do not require separate consent under applicable law.

14. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by email or through the platform at least 30 days before they take effect. The "Last updated" date at the top reflects the most recent revision.

15. Contact

For privacy-related inquiries, contact our Data Protection contact at privacy@pinkslipcrew.com. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.