Privacy policy.

Last updated: 21 April 2026

We collect as little as possible. Here's exactly what we store, why, and who else sees it.

What we collect

Company + job-post details — what you type into the post-a-job form: title, description, salary, apply URL or email, contact email, logo. This is public by design once approved.
Candidate alerts — if you subscribe to job alerts, we store your email, the category and remote preference you picked, a verification token, and an unsubscribe token.
Contact-form + sales inquiries — name, email, and the message you send us.
IP address + a hashed user-agent — used only to rate-limit forms and de-duplicate job views and apply clicks. We never store the full user-agent or build a user profile from it.
Payment metadata — Stripe customer ID, checkout session ID, and the cents paid. We never see or store your card number.

We don't sell your data, we don't share it with advertisers, and we don't run third-party analytics or tracking pixels on this site.

Cloudflare — hosting, database (D1), object storage (R2), bot defense (Turnstile).
Stripe — payments, customer records, invoices.
Resend — transactional email delivery.

These processors handle data on our behalf under their own terms. We don't hand your data to anyone else.

Published job listings stay on the board until they expire or you ask us to remove them.
Expired listings remain in our database for historical record unless you ask us to delete them.
Alert subscriptions persist until you unsubscribe.
Payment records are retained per Stripe's terms and applicable tax rules.
Rate-limit logs roll off within 24 hours.

Email jobs@vulnu.com and we'll:

Export a copy of everything we have about you.
Correct anything that's wrong.
Delete your data on request, except where we're legally required to retain it (typically payment records for tax).

Vulnerable U · jobs@vulnu.com