Privacy Policy
Effective date: 7 May 2026
Who We Are
JobnTop is a bilingual talent marketplace and job aggregation platform serving Kuwait and the Gulf region. We connect candidates with employment opportunities sourced from third-party job boards and with employers who post directly on our platform. We also provide an AI-assisted CV Builder. JobnTop is currently operated as an individual enterprise pending corporate formation.
Data Controller: JobnTop — Kuwait
Contact: privacy@jobntop.com
Information We Collect
Account credentials — Your email address and a securely hashed password, used solely for authentication and account recovery.
Candidate profile data — Display name, professional headline, biography in English and Arabic, nationality, country of residence, phone number, work experience history, educational qualifications, and professional skills.
AI CV Builder data — CV versions you draft or generate, along with generation metadata. Stored so you can return to and edit previous versions.
Employer account data — Company name, description, industry sector, and contact details linked to employer accounts.
Job listing content — Titles, descriptions, requirements, salary ranges, and other details submitted by employers.
Usage and device data — Browser type, operating system, IP address, pages visited, referring URLs, search queries, and interaction events.
Cookie and preference data — Your cookie consent preferences. See our Cookie Policy for full details.
Server and access logs — Timestamped logs retained for security monitoring and technical diagnostics.
How We Use Your Information
- Account operation — Creating and maintaining your account, authenticating your sessions, and enabling account recovery.
- Talent matching — Displaying relevant listings to candidates; enabling employers to search candidates. Candidate contact details only shared after a shortlist action.
- AI CV generation — Processing inputs through OpenRouter to return CV drafts. Your CV data is not used to train external models.
- Platform analytics — Measuring aggregate usage patterns. We do not build individual advertising profiles.
- Service improvement — Diagnosing technical problems and developing new features.
- Legal compliance — Responding to valid legal process and meeting statutory obligations.
- Security — Detecting and preventing fraud, abuse, and data breaches.
Lawful Basis
Contract performance — Processing account credentials, profile data, employer data, job listings, and CV Builder data is necessary to deliver the service.
Consent — Optional profile fields and cookie-category preferences are processed on the basis of your consent. You may withdraw consent at any time.
Legitimate interests — We process usage data and logs to keep the platform secure and prevent fraud.
Legal obligation — We process data as required to respond to lawful orders.
Sharing With Third Parties
We share personal data only as described here. We do not sell personal data.
Employers via the shortlist feature — Employers gain access to candidate contact details the candidate chose to display after a Shortlist action. Candidates control which fields are visible.
Subprocessors:
- Supabase — Database hosting, authentication, file storage (US and EU)
- Vercel — Web hosting and global edge content delivery
- OpenRouter — AI inference gateway for the CV Builder
- Polar.sh — Future payment processor; merchant of record for paid transactions
Legal authorities — We disclose personal data when required by a valid legal order under Kuwaiti or applicable international law.
Business transfers — User data may transfer in a merger or asset sale. We will notify affected users in advance.
International Data Transfers
Personal data may be processed outside Kuwait. Supabase (US/EU), Vercel (global edge), and OpenRouter (US) operate under appropriate contractual safeguards. Contact privacy@jobntop.com for details.
Cookies and Tracking
Please read our Cookie Policy for a complete description of cookies we set and how to manage your preferences.
Data Retention
- Account and profile data — Retained while active and for up to 12 months after deactivation.
- CV versions — Retained until you delete them or close your account.
- Server and access logs — Retained for 90 days, then permanently deleted.
- Legal acceptance records — Retained for the lifetime of your account and 7 years after closure.
- Cookie preferences — Retained for up to 12 months, or until you update your preferences.
Your Rights Under Kuwait Data Protection Law and Equivalent Frameworks
- Access — Receive a copy of your personal data.
- Rectification — Ask us to correct inaccurate or incomplete data.
- Erasure — Request deletion, subject to legal retention obligations.
- Restriction of processing — Ask us to limit processing while a dispute is resolved.
- Data portability — Receive your data in a machine-readable format.
- Objection — Object to processing on the basis of legitimate interests.
- Withdraw consent — Withdraw consent at any time for consent-based processing.
- Lodge a complaint — File a complaint with CITRA in Kuwait or the relevant supervisory authority in your country.
Email privacy@jobntop.com. We respond within 30 calendar days.
Children
JobnTop is for users aged 18 and over. We do not knowingly collect data from minors. Contact privacy@jobntop.com if you believe a minor has provided data.
Security Measures
- Encryption at rest and in transit (TLS 1.2+)
- Row-level security (RLS) policies
- Audit logging of administrative actions
- Least-privilege access controls
- Periodic review of subprocessor certifications
Changes to This Policy
Material changes update the Effective date and increment legal_version. Signed-in users see a re-acceptance modal on next login.
Contact
Email: privacy@jobntop.com
JobnTop — Kuwait (registered address to be updated upon corporate formation)