Privacy Policy
Last updated: 24 October 2026
1. Introduction
This policy explains how CaveJobs collects, uses and protects your personal information when you use the CaveJobs website. In this policy, “we”, “us” and “our” mean CaveJobs, and “you” means anyone who visits the board or has an account.
By using CaveJobs, you agree to this privacy policy.
2. Who We Are
CaveJobs is a job board for content writing and marketing roles. Contact us through our contact page.
3. What We Collect
3.1 What You Give Us
- Account: your email address and name. You sign in with an emailed code or through Whop.
- Your choices on the board: jobs you read, apply to, report, save or hide, and the preferences you set when you join.
3.2 What We Collect Automatically
- Account activity: sign-in records and membership updates.
- Usage and device data: once you create an account, your IP address, browser and device identifiers, the pages you visit and the searches you run.
3.3 What We Get From Third Parties
If you sign in or pay through Whop, we receive your name and email address, and your membership details: plan, billing cycle and whether it is active or set to cancel. Whop handles your payment, so we never see your card details.
If you connect Slack, we receive your Slack member ID and link it to your account, so we can add you to the job alerts channel, send you personalized alerts by direct message, and remove you when you disconnect.
We do not receive your job applications (applying happens on the employer's own site), we never see your card details, and we do not sell your data.
CaveJobs is for people aged 18 and over. We do not knowingly collect data from anyone under 18, and if we learn that we have, we will delete it.
4. Why We Use It
| Purpose | What it covers | Basis |
|---|---|---|
| Running your account | Your account and membership, and the emails about them: sign-in codes, receipts, renewal reminders, subscription notices. | Contract |
| Ordering jobs for you | Showing the jobs that fit your saved preferences first. This runs on fixed rules, not profiling. | Contract |
| Job summaries | Using AI to write the summaries on job pages. It reads the text of the listing, not your personal data. | Legitimate interest |
| Job alerts | Sending you job alerts. | Contract |
| Marketing emails | Sending you marketing emails. | Consent |
| Security | Keeping the board working and secure: fixing faults and watching for abuse. | Legitimate interest |
| Analytics | Understanding how the site is used, through performance cookies. | Consent |
| Marketing tracking | Measuring how our marketing is doing and spotting abuse, through marketing cookies. | Consent |
| Measuring the board | Counting how the board is used while you are signed in, and clicks on company links. | Legitimate interest |
| Support | Answering your questions and complaints. | Legitimate interest, or contract if you are a member |
| Updates | Sending you service and administrative updates. | Contract, or legal obligation |
| Legal | Keeping records the law requires and answering lawful requests from authorities. | Legal obligation |
4.1 What Those Bases Mean
- Contract: to provide the membership or account you signed up for.
- Consent: where you have chosen it. You can withdraw it at any time, which does not affect what we did before.
- Legitimate interest: to run the board securely and answer you, where our interest does not override your rights.
- Legal obligation: where the law requires it.
5. Who We Share It With
We share your personal data with service providers who help us run the board:
| Provider | Purpose | Data shared |
|---|---|---|
| Whop | Sign-in and payments | Name, email, plan and billing status |
| Supabase | Database | Your account, choices and activity |
| Cloudflare | Hosting and security | Page requests, including IP address and browser |
| PostHog | Analytics | Usage events if you accept performance cookies or are signed in, and clicks on company links |
| Google Analytics and Tag Manager | Analytics | Pages you view and device details, only if you accept performance cookies |
| Microsoft Clarity | Heatmaps and session recordings | Where you click, scroll and move on a page, and device details. What you type is masked. Only if you accept performance cookies |
| Whop pixel | Marketing tracking and spotting abuse | Pages you view and a browser identifier, only if you accept marketing cookies |
| Cloudflare Email | Sending transactional emails | Your email address and the message |
| AI provider | Writing job summaries | Listing text only, not your personal data |
| Slack | Job alerts channel and personalized DM alerts, if you connect it | Your Slack member ID |
We also share data with professional advisors, with authorities where the law requires it, to enforce our terms, and with other parties only with your consent.
Our providers are based in the United States, and our data is hosted on servers there. If your data leaves the UK or EEA, we use safeguards where the law requires them.
6. People Named in Listings
Some listings include the name and public contact details of the person hiring, taken from what they already made public. We show them to members so they can reach you about that job, and use them for nothing else. We do not sell them. If you are named and want it removed, contact us and we will take it down.
7. How Long We Keep It
We keep your data only as long as we need it, including for legal and accounting requirements. If your account is inactive for a long time, we may delete or anonymize it.
| Data | Kept for |
|---|---|
| Your account | Until you delete it. After you ask, we erase it 30 days later, unless you sign in again first. |
| Pages you view | 90 days. After that only a daily count per account remains, for 13 months. |
| Sign-in requests | 90 days. |
| Browser records | Deleted when the browser has not been seen for 180 days. |
| Deletion note | 12 months after you delete your account. |
| Cookie choice record | 24 months. |
After you delete your account, we keep a short note of it, with the date, any reason you gave and a permanent ID, to prevent fraud and abuse. The rest of your activity has your name and email removed and may be used for statistics.
Payment records are held by Whop as the law requires.
8. Your Rights
You can ask us to:
- show you the personal data we hold about you
- correct data that is wrong
- delete your data
- give you a copy of it in a portable format
- restrict how we use it, or stop using it for a purpose you object to
Two things you can do yourself: delete your account from your settings, and change your at any time. Where we rely on your consent, you can withdraw it at any time.
CaveJobs needs some of your data to work, such as your email, preferences and activity. If you ask us to stop using that data, we can no longer give you an account, so you will have to delete it.
If you live in California, you can also ask what personal data we collected, used or shared about you in the last 12 months, and ask us to delete or correct it. We do not sell your data or share it for advertising, and we will not treat you differently for using these rights.
To make a request, contact us. We will reply within 30 days.
9. Cookies
Necessary cookies keep you signed in and remember your cookie choice. They are always on.
Performance and marketing cookies are off until you accept. If your browser sends a Global Privacy Control signal, we keep them off and do not ask.
If you arrive through a member's share link, we keep a referral code in a cookie for 30 days, so we can tell who shared the job if you sign up.
You can change your choice at any time in your .
We keep a record of each choice for 24 months, so we can show what you chose: the date, the banner version and a random ID stored in your browser. It holds no IP address. If you are signed in, or sign in later on the same browser, it is linked to your account and deleted with it.
10. Data Security
- Encryption: your data is encrypted in transit, and at rest by our providers.
- Access: limited to our small team. Support staff can view the site as a member to fix a problem, and we log it.
- Breaches: if your data is exposed in a way that puts you at risk, we will tell you and the relevant regulator within 72 hours where the law requires it.
11. Changes
We may update this policy. We will post the new version here with a new date, and tell you about significant changes by email or on the site.
12. Contact
For questions, contact us. If you are in the UK or EEA and are not satisfied, you can complain to your data protection authority: in the UK the ICO, in the EEA the authority for your country, listed by the European Data Protection Board. For the rules of using the board, see the terms of service.