Privacy policy
What we collect, why, who processes it for us, which cookies we use, how long we keep things and how to get them deleted.
This policy covers findajobandrelocate.com, run by Highly Performant Limited, a limited liability company in the Masdar City Free Zone, Abu Dhabi, United Arab Emirates, licence MC 13910, Smart Station, First Floor, Incubator Building, Masdar City, Abu Dhabi, United Arab Emirates (“we”), the controller of your personal data. For anything about your data, write to hello@findajobandrelocate.com.
What we collect, and why
- Your account: your email address and a name (from your email, or from Google if you sign in with it). We need it to give you the account you asked for.
- Your check and profile: the answers you give (where you're moving from, household, role, level, current pay), your saved jobs and your checklist, so the site can work out your plan. Before you sign up they stay in your browser only.
- Payments: Paddle.com, our reseller, sells you the pass and takes the payment as merchant of record, under its own privacy policy. It tells us what you bought, when, the amount and currency and the order number; we never see your card details. We keep these records because accounting and tax law require it.
- The AI advisor: your questions and our answers, so you can see your history. The AI provider gets your question and your check's answers, never your name or email address.
- CV and offer reviews: the file you upload, the text we read from it (to show your document with our notes) and the report. The file and its text are deleted after 30 days; the report, with the short quotes its notes point to, is kept for 1 year. Deleting a review removes all of it at once. The AI provider (Fireworks AI) uses them only to write your report: it doesn't store or log them, and never uses them to train AI models. While it works, the text can sit briefly in its servers' memory, which may be in the US or another country.
- The free ATS CV check: the file you check is read in our server's memory and dropped as soon as the answer is sent. We don't store it, log it or send it to an AI provider. If you choose, a copy stays in your own browser (below), so you don't upload it again.
- Emails: the sign-in links, receipts and pass reminders we send, and, only if you ask for them, job alerts and a waitlist email when a city goes live. Job alerts and waitlist emails need your consent: every one has a one-click unsubscribe link, and the waitlist asks you to confirm your address first.
- Usage statistics: a few steps (check started and finished, sign-up, pricing viewed, checkout, AI questions) with the page and the country you chose. For visitors who aren't logged in we count with a code that changes every day, made from a random value we throw away each day, your IP address and your browser; the IP address itself isn't stored. If your browser sends Global Privacy Control or Do Not Track, we don't count you at all. This is in our legitimate interest in knowing whether the site helps people.
- Keeping the site safe: your IP address, for a day at most, to limit how often sign-in links, messages and questions can be sent; while you're logged in, the IP address and browser of each login, so we can spot someone else using your account (kept until you log out or the login expires, 30 days at most); error reports (without email addresses) to fix what breaks; and messages you send through the contact form.
Why we're allowed to use it
- To provide what you asked for (a contract with you): your account, check, saved jobs, the pass, the AI advisor, reviews and the emails that go with them.
- Our legitimate interests: keeping the site and your account safe, fixing errors, and counting how the site is used without tracking you.
- Your consent: job alerts and waitlist emails. You can withdraw it at any time with the unsubscribe link or from your account.
- The law: keeping payment records.
Cookies and what your browser keeps
We only use cookies the site needs to work, and one that remembers a choice you made. There are no advertising, analytics or third-party cookies, so there is no cookie banner.
The one exception is the checkout page: when you press Pay, Paddle.com's checkout opens there, loaded from paddle.com. Paddle, and the payment providers it works with for the method you choose (such as card networks, PayPal, Apple Pay or Google Pay), may set their own cookies to take the payment and prevent fraud, under Paddle's privacy policy. Nothing from Paddle loads on any other page.
| Cookie | What it does | How long | Type |
|---|---|---|---|
| fjar.session_token | Keeps you logged in (secure, not readable by scripts) | 30 days, renewed while you use the site | Necessary |
| fjar.state | A security check while you sign in with Google | A few minutes | Necessary |
| fjar_access | Whether you're logged in and have the pass, so pages open the right sections without waiting | 365 days | Necessary |
| fjar_user | Your name and email for the menu at the top of the page | 365 days | Necessary |
| fjar_ask | How many questions you've asked the AI advisor without an account this month (signed, not readable by scripts) | 40 days | Necessary |
| mf | The country you're moving from, for the currency and passport notes | 365 days | Preference |
| mf_guess | The country we guessed from your IP address, so the guess can be corrected until you pick one yourself | 365 days | Preference |
Your browser also keeps your own answers in its local storage (and the CV you checked, in its IndexedDB), so the site works before you have an account (fjar_check: your answers to the check, fjar_check_gate: whether the check asks you to log in before the questions or before the results (we test both), fjar_saved_jobs: jobs you saved, fjar_checklist_dubai: your move checklist ticks, fjar_waitlist: cities you asked us to tell you about, fjar_advisor: your conversation with the ai advisor, fjar_advisor_stage: where you are in your move, for the advisor's suggestions, fjar_after_signup: that you were buying the pass when you signed up, so you go back to it, fjar-files: the cv you checked with the free ats check, if you chose to keep it, so you don't upload it again). Logging out clears them.
Who processes your data for us
Only the services that run the site. Each works on our instructions under a data processing agreement. Paddle, which sells the pass, is not our processor: it is responsible for the payment data it collects (below).
| Processor | What for | What data | Where |
|---|---|---|---|
| Hetzner Online GmbH | Hosting: the web server, the database and its backups | Everything this policy lists, stored on our server | Germany or Finland (EU) |
| Resend | Sending email: sign-in links, receipts, job alerts, waitlist emails | Your email address and the email itself | United States |
| Fireworks AI | The AI advisor and, when you ask for one, CV and offer reviews | Your question, your check's answers (never your name or email) and, for a review, the text of your file | United States |
| Firecrawl | Reading public web pages (employers' careers pages) for our data | No data about you: only public pages | United States |
Our server and its backups are in the EU. Where a processor is outside the UK and the EU, the transfer is covered by the EU standard contractual clauses and the UK addendum to them in that provider's data processing agreement.
- Paddle: our reseller: Paddle.com sells you the pass and takes the payment as merchant of record, so it collects your payment details, billing address or country and email under its own privacy policy (paddle.com/legal/privacy), and tells us what you bought, when, the amount, the currency and the order number. We never see your card details.
- Google: only if you choose "Continue with Google": Google tells us your name, email address and profile picture, under Google's own privacy policy.
- LinkedIn: only if you choose "Continue with LinkedIn" where it's offered: LinkedIn tells us your name, email address and profile picture, under LinkedIn's own privacy policy.
- DB-IP: we download their country database and look up your IP address on our own server to guess the country you're moving from; your IP address is never sent to them and we don't store it.
- Cloudflare and Apple: we download the lists of where their VPN and Private Relay exits are (Cloudflare WARP, iCloud Private Relay), so a visitor using one gets the right country; your IP address is never sent to them.
We don't sell your data, and we don't share it with employers, recruiters or advertisers.
How long we keep it
- Your account, profile, check, saved jobs, checklist and job alerts: while your account is open.
- AI advisor chats: 1 year after the last message, or until you delete them.
- CV and offer review reports (the notes and the short quotes they point to): 1 year, or until you delete them.
- Uploaded CVs and offer letters, and the text we read from them: 30 days.
- The log of emails we sent you: 6 months.
- Usage statistics: 13 months.
- Error reports: 90 days.
- Contact form messages: 2 years.
- Waitlist sign-ups you never confirmed, or unsubscribed from: 30 days.
- Payment records: 7 years, as tax law requires. If you delete your account they stay without your name, email address or account for that time, then are deleted.
- Backups of the database, kept encrypted with our hosting provider in the EU: 30 days. Something you delete can stay in a backup for that long; we only read a backup to restore the site after a failure.
Your rights
You can download everything we hold about you, and delete your account and all of it, at any time from your account page. Job alerts and waitlist emails stop with one click from any of them, or from the account page. You can also ask us to correct your data, to stop using it, or to explain how we use it: write to hello@findajobandrelocate.com and we'll answer within a month.
If you're not happy with our answer you can complain to the UK Information Commissioner's Office (ico.org.uk), India's Data Protection Board, the data protection authority where you live in the EU, or the UAE Data Office.
Security
The site only works over an encrypted connection. Sign-in links work once, for a few minutes, and are stored scrambled; the session cookie can't be read by scripts. Our server and its backups are in the EU.
Children
The site is for adults planning a job move. We don't knowingly collect data from anyone under 18.
Changes
If we change what we collect or who processes it, we'll update this page and, for a big change, email account holders first.
Last updated: 10 October 2026.