JobCeylon
LEGAL

Privacy Policy

What we collect, why we collect it, and the control you have over your data.

Last updated: 20 October 2026

01Who we are

JobCeylon (jobceylon.com) is an AI-powered job search platform for Sri Lanka, headquartered in Colombo, Sri Lanka (“we”, “us”). We are responsible for the personal data described in this policy.

This policy explains what we collect when you use the website, the JobCeylon Telegram bot (@Jobceylonbot) and related services, why we collect it, and the choices you have. Questions can be sent to our team via our contact page or directly to contact@jobceylon.com. Please also read our Terms and Conditions.

02Information we collect

Information you give us

  • Account details: your name, email address and password, or your Google account name and email if you sign in with Google.
  • Profile and preferences: phone number, area you live in, desired roles, experience levels, locations, industries and job types.
  • Your CV: the file you upload and the details we extract from it, such as work history, education and skills. A CV can contain sensitive details you choose to include; please leave out anything you do not want to share.
  • Profile photo, if you upload one.
  • Email sending settings: if you connect your own email account to send applications, its server, username and password. The password is stored encrypted.
  • Applications and tracker entries: the jobs you apply to or save, cover letters you generate and notes you add.
  • Employer details: if you post jobs, your company name, contact details and the vacancies you submit.
  • Messages to us, such as support emails.

Information collected when you use the service

  • Telegram: when you connect the bot, your Telegram chat ID and, if you share it, your Telegram phone number.
  • Payments: the plan, amount, date and PayPal order reference. Card and bank details are entered on PayPal and are never sent to or stored by us.
  • Technical data: standard server logs such as IP address, browser type and the pages requested, kept for security and troubleshooting.

03How we use your information

  • To create and secure your account and keep you signed in.
  • To match new vacancies to your CV and preferences, and send matching job alerts by Telegram and email.
  • To provide AI features you request, such as cover letters, CV-to-job match analysis and ATS resume scores.
  • To send job applications from your connected email account when you ask us to.
  • To show your candidate profile to employers when you have “Open to offers” switched on.
  • To process payments and manage your plan.
  • To send service messages, such as account and security notices.
  • To prevent fraud and abuse, fix problems and improve the service.
  • To meet legal obligations.

05AI processing

Matching, cover letters, match analysis and resume scoring are produced by AI models. To do this, the relevant parts of your CV and the job description are sent to our AI providers (see the next section). Scanned CVs may be read with optical character recognition. AI output can be wrong, so please review any cover letter or analysis before relying on it. We do not use AI to make decisions about you that have legal or similarly significant effects; employers make their own hiring decisions.

06Who we share it with

We do not sell your personal data. We share it only as follows:

  • Employers: when you apply to a job, the employer receives your application, cover letter and CV. When “Open to offers” is on, employers using JobCeylon can see your candidate profile and invite you to apply. This setting is on by default and you can turn it off in Settings.
  • Service providers that run parts of the platform for us, under their own security and privacy terms:
    • Supabase: database and account sign-in
    • Vercel: website hosting
    • Cloudinary: storage of CV files and profile photos
    • OpenRouter and the AI model providers it connects to: AI features
    • Google: Google sign-in and text recognition for scanned CVs
    • Telegram: delivering job alerts
    • PayPal: payment processing
    • Our email delivery provider: sending account and alert emails
  • Legal reasons: if required by law, court order or a valid request from authorities, or to protect the rights and safety of our users or the public.
  • Business changes: if JobCeylon is merged or sold, your data may transfer to the new owner under this policy.

07International transfers

Several of our service providers store or process data outside Sri Lanka. When your data is transferred abroad we take reasonable steps, including choosing reputable providers with appropriate safeguards, so that it stays protected as described in this policy.

08How long we keep it

We keep your account data, CV and preferences while your account is active. If you ask us to delete your account, we delete or anonymise your personal data within 30 days, except where we must keep some of it longer, such as payment records needed for accounting and legal purposes. Server logs are kept for a limited period for security.

09How we protect it

Data is sent over encrypted HTTPS connections, access to our systems is restricted, and sensitive values such as connected email passwords are stored encrypted. No online service can be completely secure, so please use a strong, unique password and tell us at contact@jobceylon.com if you notice anything suspicious.

10Cookies and local storage

We use only the cookies needed to keep you signed in securely. We do not use advertising cookies or third-party analytics trackers. Your browser’s local storage may hold small items such as display preferences. Payment and Google sign-in pages are run by PayPal and Google and use their own cookies.

11Your rights and choices

Under the Personal Data Protection Act you can ask us to:

  • give you access to the personal data we hold about you;
  • correct inaccurate or incomplete data;
  • delete your data or your account;
  • stop or limit certain processing, or withdraw consent you have given;
  • review a decision made solely by automated means.

You can update your profile, preferences, CV, “Open to offers” and notification settings yourself in Settings. For anything else, email contact@jobceylon.com from your account email address. We will respond within the time required by law. If you are unhappy with our response, you can complain to the Data Protection Authority of Sri Lanka.

12Children

JobCeylon is intended for people aged 16 and over who are looking for work. We do not knowingly collect data from younger children. If you believe a child has given us personal data, contact us and we will delete it.

14Changes to this policy

We may update this policy as the service changes. The date at the top shows when it last changed. For significant changes we will tell you by email or a notice on the site before they take effect.

15Contact us

JobCeylon, Colombo, Sri Lanka
Email: contact@jobceylon.com