1. Purpose of this notice
This notice supplements the Privacy Policy with the detail a data-protection regime typically requires: the categories of data we process, who processes it with us, on what basis, and how long it is kept. The controller is Midnight Holdings LLC, a Wyoming limited liability company in the United States that operates as Midnight Apps, which provides RemoteJobs. Requests and questions: legal@midnightapps.dev.
2. Categories of data
Identity and contact data: email address, first and last name. Authentication data: password hash, email-verification state, sign-in provider, and the session and token records held by our authentication provider. Profile and preference data: country, language, job-search preferences, notification settings and analytics choices. Job-activity data: saved jobs, saved searches, job alerts, and your own application records including the listing URL, status and history. Support data: the content of your tickets and our replies. Rights-request data: export and deletion requests and their status. Consent data: which legal document version you accepted, when, and the app version, language and country. Security data: authentication and account events. Commercial data: subscription entitlement records, and payment events reported by the app stores. We do not deliberately process special-category data; if you put it into free text, such as a support message, it is processed only as part of that message.
3. Processors and sub-processors
Supabase — database, authentication and backend hosting for all of the above, hosted in the United States. Apple (App Store) and Google (Google Play) — subscription payment processing; they act on their own account as well as providing us with entitlement and payment events, and we never receive your payment card details. RevenueCat — reconciliation of store subscriptions with our entitlement records, where it is configured for the release you are using. No analytics, advertising, crash-reporting, marketing-email or customer-relationship provider is used by this application. Job sources, such as the United States federal government job API, receive requests from our servers and no personal data about you.
4. Legal basis
Performance of our contract with you, for running your account, showing and remembering your job activity, and providing subscriber access. Legitimate interests, for securing the service, preventing fraud and abuse, screening scam listings, and improving the product. Legal obligation, for keeping financial records and responding to lawful requests. Consent, where we ask for it — for example the analytics preferences in the app, which you can change or withdraw at any time. The mapping of each purpose to a basis in each jurisdiction is being confirmed with counsel before publication.
5. Retention
When you delete your account, records that exist only because of your account — your profile, preferences, saved jobs, saved searches, job alerts, your own application-tracking records, support tickets (including reports you made about job listings or employers, which are filed as support tickets), privacy requests, consent records and subscription entitlement records — are deleted with it. Two categories of record are kept, with your account reference removed so they no longer identify you: security and audit events, and billing and payment events. Records that serve a business or moderation purpose rather than your account — for example an enquiry raised on behalf of an employer, an internal note written by a reviewer, or a report about an offer in the Remote Work Shop — are likewise kept with your reference removed. How long the retained security and billing records are kept is being set with counsel, and no period is asserted here.
6. Your rights and how to use them
Access, correction, deletion, portability, objection, restriction, and withdrawal of consent, as applicable where you live. In the app: Profile, then Privacy, then Download my data for a copy; Profile, then Delete account to delete your account immediately yourself; and Profile, then Privacy, then My requests to see the status of a request or cancel one. Otherwise write to legal@midnightapps.dev. You may also complain to your data-protection authority.
7. Automated decision-making
We score job listings automatically for scam risk and quality, and that affects whether a listing is published. That is a decision about a listing, not about you, and it has no legal or similar effect on you. We do not profile you in order to make automated decisions about your access to the service.