Privacy

What we collect

Your account. Your name, your email address, your password (kept only as a one-way hash we cannot read back) and the language you use. If you sign in with Google or Apple, they give us your name and email address, which with Apple can be a private relay address, and an id that ties the sign-in to your account.

What you do on Bahoz. The jobs you save, the job alerts you set up and the searches behind them, your notification choices, and which jobs we already told you about, so the same job does not reach you twice.

The app. A notification token from Apple or Google for each phone you sign in on, so we can send you notifications; the phone's model, so you can see which phones are signed in; and the app's version.

Crash reports. When the app crashes, a report of what went wrong reaches us: where in the app it happened, the app's version, the phone's model and system. It holds nothing you wrote or saved.

The contact form. Your name, your email or phone number, your message, and your IP address. The address is there to tell real messages from spam, nothing else.

Visits. Our server keeps ordinary access logs: the address you came from, the page you asked for, and the time.

Where you are, only when you ask. If you choose "Near me", your browser or phone tells us where you are once, and we answer with the nearest city. We do not keep it, and it is in no log.

Your CVs. What you write in the CV maker, kept until you delete it. No employer sees a CV unless you send it yourself. A CV you send with an application is copied as it is at that moment, for the organisation you send it to, and stays with them even if you later change or delete your CV or your account; our staff can open one only to help you or put a problem right, and every opening is recorded. We do not ask for a date of birth or an ID.

Your photos. The photo you add to your profile or a CV, kept while something uses it and deleted a day after nothing does. Photos of a printed CV that you import are read like an imported file, and deleted once they are read.

Cookies

Some cookies are needed for the site to work at all. They keep you signed in, remember your language and whether you chose dark mode, and stop someone submitting a form in your name.

We also measure how the site is used, so we can see what works and make it better. We use Google Analytics for this, and it sets measurement cookies from your first visit, without advertising features and with a shortened address. If you choose Decline in the banner, measurement stops, its cookies are removed, and we remember your choice. To change your mind, clear this site's data in your browser and choose again. The app sets no such cookies.

Who else sees it

• Resend delivers our email, so it handles your address to send it.
• Google Firebase delivers the app's notifications and its crash reports.
• Google or Apple, only if you choose to sign in with them.
• Cloudflare checks that our forms are filled by a person and not a script.
• Google Analytics, which measures how the website is used, unless you declined it.

We use an AI service to tidy job postings into a readable shape. If you import a CV from a file, the same kind of service reads it to fill in your CV: it is sent to it with a request that it keep nothing and learn nothing from it, and we delete the file once it is read.

We do not sell anything about you, and we pass your details to an employer only when you apply to them. When you apply with Easy Apply, the organisation receives a copy of the CV you choose, the city you choose and your note. For other jobs you leave Bahoz and deal with the employer directly, on their site or by their email, phone or WhatsApp. What happens there is between you and them.

How long we keep it

• Your account, and what you saved and asked for in it: until you delete it.
• An application you send, with the copy of your CV and your note: kept with the organisation you sent it to, even after you delete your account.
• An app's sign-in: 90 days from the last time the app was used; after that the phone is signed out and stops getting notifications.
• The notifications in your inbox: 60 days.
• The record of jobs already sent to you: 90 days.
• Crash reports: 90 days.
• Contact messages: until they are dealt with, and a while after in case you write again.
• Backups: 14 days, then they are gone.
• A CV file you import: deleted once it is read; what was read from it, a day, for you alone, in case you import it again.

Deleting your account

You can ask for your account to be deleted in the app, under Account, then Account details, or on the website, under Account. From that moment you are signed out everywhere, and every email and notification stops.

A person at Bahoz carries out the request within 1 to 7 business days. Until then you can change your mind: sign in and choose Keep my account.

When it is done, your name, email address, saved jobs, alerts, notifications and phones are erased, and a sign-in with Apple is disconnected at Apple too. Applications you already sent stay with the organisations you sent them to, with the copy of your CV and your note, no longer linked to any account. Beyond that we keep only an anonymous record that an account was deleted, and when.

What you can do

Choose what reaches you, and how, in the app's notification settings or on the website. Every alert email also has a link to manage your alerts and a link to stop them, and stopping takes one click.

You can also ask for a copy of what we hold about you. Write to us from the address you use on Bahoz, and we will send it.

Changes

If we change this page, we will change the date at the top. If a change matters to people who already use Bahoz, we will tell them in the app or by email.

Contact

Write to us through the contact form and we will get back to you.