We collect as little personal information as we can, use it only to run what you asked for, and never sell it or use it for advertising.
Browsing the site and searching for jobs needs no account and sets no cookies. If you create an account, we keep your email address, your saved searches and what is needed to sign you in safely, and you can download or delete all of it whenever you like.
Who we are
isophoric.com is run by Isophoric I.T. and Isophoric Studios of Oswego, New York, United States (“Isophoric”, “we”). We decide how the personal information described here is used, which makes us responsible for it (its “controller”, in the language of laws such as the GDPR).
Contact us at info@isophoric.com or 980-230-6846. Our apps and any future services have their own policies in our privacy directory.
What we collect, why, and for how long
| What | Why | Legal basis | Kept for |
|---|---|---|---|
| Web server logs: internet (IP) address, the page or file requested, the time, your browser's description of itself, and the country the address belongs to | Keeping the site secure, fixing problems, and a weekly count of visits | Our legitimate interest in a secure, working website | We can see them for 7 days and keep no copy. The weekly count keeps totals only, with no IP address or other personal information. Our host keeps its own logs under its privacy policy. |
| Messages you send us through the contact form, by email or by phone: your name, contact details, and whatever you choose to write | Answering you | Our legitimate interest in replying, or steps you asked us to take before working with us | 12 months after our conversation ends, or less if you ask us to delete it |
Please leave health, financial or other sensitive details out of messages unless you need us to see them.
The job search itself collects nothing about you. Your filters live in the page's address, and your last search and saved searches are kept in your own browser's storage, never sent to us unless you sign in to an account.
If you create an account
Accounts are optional and free, and the job search always works without one.
Accounts are offered only to people who live outside the European Union, the European Economic Area, the United Kingdom and Canada. When you start creating an account, we check which country your internet address belongs to, using a copy of DB-IP's free country database kept on our own server. The address is used only for that check and is not stored. Signing up also asks you to confirm where you live and that you are 18 or older. Signing in to an existing account is never limited by region.
| What | Why | Legal basis | Kept for |
|---|---|---|---|
| Your email address | Sending sign-in links, and the job alerts you ask for | Providing the account you asked for | Until you delete your account |
| Passkeys: a public key, its identifier, the type of device, and when it was added and last used | Recognising your device when you sign in. Your fingerprint, face or device PIN never leaves your device, and we never receive it | Providing the account | Until you remove the passkey or delete your account |
| Sessions: a random identifier (we store only a scrambled form of it), a device label such as “Chrome on Windows”, and sign-in and last-used times | Keeping you signed in, and letting you see and end your sessions | Providing the account | 30 days after last use |
| Saved searches and their alert settings, including a private feed link if you turn one on | Keeping your searches on every device, and finding new jobs that match them. A feed link works like a password: anyone who has it can read that feed, so keep it private; you can replace it at any time | Providing the account | Until you delete them or your account |
| Alert history: which jobs we have already sent you, and when | Never sending the same job twice | Providing the account | 90 days |
| When you confirmed that you are 18 or older and live outside the regions above | Offering accounts only to the people they are open to, and showing that we did | Our legitimate interest in offering accounts only where we can meet local law | Until you delete your account |
| When you confirmed email alerts, and when you unsubscribed | Sending alerts only with your permission, and showing that we did | Your consent | Until you delete your account |
| Security records: sign-ins and account changes, with their time and internet (IP) address | Spotting and stopping misuse of accounts | Our legitimate interest in keeping accounts safe | 90 days |
To have an account you need to give us an email address, or set up a passkey; nothing else is required, and we do not ask for your name or date of birth. When you delete your account, everything in this table is erased at once. Copies inside our web host's routine backups are overwritten within about seven weeks, and are never used to restore an account you deleted.
People named in job listings
The job search shows openings that employers have published on their own public job boards and on public remote job boards. We show a listing's title, employer, location, dates and pay, and sometimes a short quote from its requirements; the full posting stays on the employer's site, where our link takes you. A listing can occasionally name a person, such as a recruiter. We show only what the employer published, for the purpose of helping people find open jobs, and drop each listing within a day of the employer removing it. If you are named in a listing and want it taken down, write to us and we will remove it.
What we never do
- Sell personal information, or share it for advertising.
- Run analytics, advertising or tracking scripts, or buy information about you from anyone.
- Build a profile of you, or make decisions about you by automated means. The labels on job listings (remote status, pay, requirements) describe the listings, not you, and alerts only match new listings against the searches you saved.
- Send you marketing email. Account email is limited to sign-in links, the alerts you turn on, and notices about your account or this policy.
Who else handles it
- Our web host, Hostinger, stores the site, its logs, the account database and backups, and sends our email, on servers in the United States. It acts only on our instructions, under its data processing agreement, which includes the European Commission's Standard Contractual Clauses and the UK Addendum.
- Email providers (yours and ours) carry the messages we send you.
- The law: we disclose information only when a valid legal order requires it, or to protect someone's safety, and we tell you when we lawfully can.
- No one else. Apart from the above, we do not disclose personal information to anyone.
- A change of ownership: if Isophoric or this service is ever sold or merged, account information would move only under the protections of this policy, and account holders would be told before it does.
Where it is processed
Everything is stored and processed in the United States. If you use the site from elsewhere, your information is handled in the United States, under the safeguards in our host's data processing agreement, and we apply this policy and the rights below to you in full, wherever you live.
How we protect it
- Every page and request is encrypted in transit (HTTPS).
- There are no passwords to steal: you sign in with a passkey or a single-use email link that expires after 15 minutes.
- Session identifiers and sign-in links are stored only in scrambled (hashed) form.
- The account database is reachable only from our own server, and only Isophoric can access it.
- We keep the minimum, delete it on the schedule above, and keep our software up to date.
If a breach ever exposes your personal information, we will tell you within 30 days of confirming it, sooner where the law requires, and explain what happened and what you can do. We will also notify the authorities the law requires us to notify, within 72 hours where that is the rule.
Your rights
Whatever country or state you live in, you can:
- ask what personal information we hold about you, and get a copy;
- have it corrected, or deleted;
- download your account data in a portable format (JSON);
- object to, or ask us to limit, how we use it;
- withdraw consent, such as for email alerts, at any time; and
- use any of these rights without being treated differently for it.
Account holders can do most of this from the account page. For anything else, write to info@isophoric.com, from the email address you used with us if you can. We may ask a question to confirm the request is yours, and you may have someone you authorize make it for you. We answer within 30 days, free of charge, and tell you if a request needs longer and why.
If we decline a request, we will explain why, and you can ask us to look at it again. If you have a complaint about how we handle your information, write to us first: we acknowledge every complaint within 30 days. You can also complain to a regulator at any time, such as the data protection authority where you live in the European Union, the Information Commissioner's Office in the United Kingdom, the Office of the Privacy Commissioner of Canada, Brazil's ANPD, or your state attorney general in the United States.
Children
isophoric.com is a general-audience site about technology services and work, and is not directed to children. Accounts are only for people 18 or older: we ask you to confirm your age when you sign up, and do not ask for a date of birth. We do not knowingly collect personal information from anyone under 18; if we learn that an account belongs to someone younger, we close it and delete its information.
Changes to this policy
If we change what we collect or how we use it, we will update this policy before the change takes effect and change the effective date above. If a change matters to account holders, we will also email them at least 30 days ahead. Past versions are available on request, and so is this policy in another format if you need one.
Contact
Questions, requests and complaints about privacy: info@isophoric.com, 980-230-6846, Isophoric I.T. and Isophoric Studios, Oswego, New York, United States.