Privacy

Unlisted operates under the trade name Unlisted Multiple Careers, based in Mexico City, Mexico, and is the party responsible for the personal data described in this policy. For anything about your data, write to support@unlisted.careers.

Account data. Your email address and how you sign in: a password, a magic link, or your Google account. Authentication runs on Supabase; we never see your Google password.

Signup survey. The answers you give when you create an account: the kind of role you look for, seniority, work mode, salary expectation, how urgent your search is, and how you found us.

Job activity. The jobs you save, like, dismiss, and open, plus your feed settings. This is what makes your feed yours.

Resume. If you upload a resume for matching, we store the file and a numerical embedding of it to score jobs against your experience. Your resume is never shown to an employer, recruiter, or any other user. To create that embedding, the text of your primary resume is sent to OpenAI, our AI provider, under its API terms, which exclude training its models on our customers' data.

Payment data. Stripe processes every payment. We receive your subscription status and a customer reference; your card number never touches our servers.

Technical data. IP address, browser, and device information in server logs, used for security and debugging.

• Run the product: your feed, saved searches, alerts you asked for, match scores.
• Process payments and manage your plan through Stripe.
• Send the emails you request: sign in links, alert digests, receipts.
• Answer support questions.
• Keep the service secure and diagnose failures.
• Measure how the product is used, only if you accept analytics cookies.

In legal terms, we process your data to perform our contract with you (the product itself, payments, the emails you request), with your consent (analytics, which you can withdraw at any time in the cookie banner), and for our legitimate interest in keeping the service secure and working (server logs, failure diagnostics).

We never sell your data, and we never hand your resume or your search activity to employers. A small set of processors run the service for us:

• Supabase hosts our database and authentication.
• Stripe processes payments.
• Vercel hosts the web application.
• Fly.io hosts our search index and the ingestion service that reads job listings. The search index holds job data and, for matching, resume embeddings; it runs on infrastructure only we can reach.
• Resend delivers our email.
• OpenAI turns your primary resume's text into the numerical embedding we score jobs against, and runs the resume import, tailoring and cover letter features, under API terms that exclude training on customer data.
• PostHog receives product analytics, only after you accept the cookie banner.

Beyond that, we disclose data only if the law requires it, or as part of a sale or merger of the business, in which case this policy follows the data.

These processors run in the United States and the European Union, so your data crosses borders to reach them. Each one is bound by its own data processing agreement, and we only share what that processor needs for its job.

Your data travels encrypted (TLS) and is stored by processors that encrypt it at rest. Access to production data is limited to the people who operate the service. Passwords are hashed by our authentication provider; we never store or see them in plain text. No internet service can promise perfect security, but if we learn of a breach that affects your data, we will tell you without undue delay.

Essential cookies keep you signed in; the product does not work without them. Analytics run only if you accept them in the cookie banner, and your choice is remembered in your browser. Declining changes nothing about how the product works.

We keep your data for as long as your account exists. Email support@unlisted.careers from your account address and we delete your account and its data. Records we must keep for tax or accounting (Stripe invoices) survive account deletion for as long as the law requires.

You can ask us for a copy of your data, ask us to correct it, ask us to delete it, or object to how it is used, all through support@unlisted.careers. We answer from a real inbox, usually within a few days. Under Mexican data protection law these are your ARCO rights (access, rectification, cancellation, opposition) and we respond within 20 business days at most. If you are in the EU or UK, we respond within one month under the GDPR, and you can also complain to your local supervisory authority. You can limit how your data is used at any time through the cookie banner, the unsubscribe link in any email, or by writing to us.

Job listings sometimes contain personal data the employer itself published, such as a recruiter’s name or email address. We index listings as they appear at the source, and we remove contact details from listing text before showing it outside a paid account. If your personal data appears in a listing on Unlisted, email support@unlisted.careers with the listing link and we remove it from our index within 20 business days. The original posting stays on the employer’s own site, which we do not control.

Unlisted Autofill fills job application forms with details you save. Without an Unlisted account, everything you type into it stays in your browser's own storage and is sent to no one until you press the company's submit button on the form it filled. It runs on its own only on application pages of Greenhouse, Lever, Ashby, Workday, SmartRecruiters, Workable, Recruitee and Teamtailor, and on unlisted.careers. On any other site it does nothing until you press its icon and choose Fill this page; Chrome then lets it act on that one tab, that one time, and it reads nothing there but the application form it fills.

When you connect it to your account, the extension receives an access token of its own, which you can revoke at any time from your application profile. From then on your application profile (name, contact details, links, current role, and with a plan the yes and no answers, cover letter and details) is stored in your Unlisted account, downloaded into the extension, and updated from it when you save. Your primary resume is rendered to a PDF and downloaded into the extension so it can be attached to applications. With a plan, the page you filled (its address, title and company) is recorded in your tracker.

What it never does. It never submits an application, never fills equal opportunity questions, never reads pages outside the systems named above, and never sells or shares your details. Signing out of the extension deletes everything it stored in that browser and revokes its access to your account.

Unlisted is not directed at children and requires you to be at least 18 to buy a plan. We do not knowingly collect data from anyone under 16; if you believe a child has an account, contact us and we will delete it.

When this policy changes, we update this page and its date. If a change materially affects your data, we email every account before it takes effect.

Questions about your data: support@unlisted.careers.