Privacy Policy

1. Accountability & Privacy Officer

WorkCA is accountable for the personal information under its control. We have designated a Privacy Officer who is responsible for our compliance with this policy and applicable privacy law.

You can reach our Privacy Officer at privacy@work-ca.ca for any question, request, or concern about your personal information.

2. Information We Collect

We collect only the information we need to operate the platform and provide our services. This includes:

Account information

• Email address and a password (passwords are stored in encrypted/hashed form by our authentication provider).
• Where you sign in with Google or LinkedIn, the name, email address, and profile picture those providers share with us.
• Your account type (job seeker or employer).

Profile and application information

• Full name, phone number, and other details you add to your profile.
• Job applications you submit, including cover letters and résumés/CVs you upload.
• Saved jobs, job alerts you create, and your application history.

Employer and company information

• Company name, description, website, and the job postings you create.
• Subscription and billing status (payment card details are handled directly by our payment processor — we never see or store full card numbers).

Information collected automatically

• Technical data such as IP address, browser type, device information, and pages viewed, used to keep the service secure, prevent abuse, and improve it.
• A small number of cookies necessary to keep you signed in and remember your language preference (see our Cookie Policy).

3. How We Use Your Information

We use personal information for the following purposes:

• To create and manage your account and authenticate you securely.
• To let job seekers search, save, and apply to jobs, and to let employers post jobs and review applicants.
• To deliver your application (and the information in it) to the employer you choose to apply to.
• To send you service-related messages, such as application status updates and account notices.
• To process employer subscriptions and payments.
• To maintain the security, integrity, and reliability of the platform and to prevent fraud or misuse.
• To analyze usage in aggregate so we can understand and improve the service.
• To comply with our legal obligations.

4. Your Consent

We collect, use, and disclose your personal information with your consent, except where the law permits or requires otherwise. By providing information and using WorkCA, you consent to the uses described in this policy.

Consent is meaningful, specific, and given for clearly identified purposes. For purposes that go beyond what is necessary to provide the service (such as optional marketing emails), we ask for your consent separately, and you can decline or withdraw it at any time without affecting your access to the core service.

You may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice. To do so, contact privacy@work-ca.ca. Withdrawing consent may limit or prevent our ability to provide certain features.

5. How We Share Your Information

We do not sell your personal information. We share it only in the following circumstances:

• With employers, when you apply to one of their jobs — they receive the information you submit in your application.
• With trusted service providers who process data on our behalf under contract and only on our instructions, including: Supabase (database, authentication, and file storage), Stripe (payment processing for employers), and Resend (sending transactional email).
• When required by law, regulation, legal process, or a governmental request, or to protect the rights, safety, and property of WorkCA, our users, or others.
• In connection with a business transaction (such as a merger, acquisition, or sale of assets), in which case we will require the recipient to honour this policy.

Some of our service providers may process or store data outside your province; where this occurs, the information remains protected by contractual and security safeguards comparable to those required under Canadian law.

6. Aggregated Job Listings

In addition to jobs posted by employers, WorkCA displays job listings sourced from the Government of Canada’s Job Bank open data. These external listings are provided by third parties. We do not control their content, accuracy, or availability, and a listing may have changed or closed after it was published. Applying to an external listing takes you to the original source, which has its own terms and privacy practices.

7. Email Communications (CASL)

We send two kinds of email: transactional messages that are necessary to operate your account (for example, application status updates and security notices), and, only if you opt in, occasional promotional messages.

In accordance with Canada’s Anti-Spam Legislation (CASL), every commercial message includes our identity, contact information, and a working unsubscribe link. If you unsubscribe, we will stop sending you commercial messages within 10 business days. You will still receive essential transactional messages while your account is active.

8. Data Storage, Location & Security

We store personal information on infrastructure located in Canada. We use technical and organizational safeguards appropriate to the sensitivity of the information, including encryption in transit, encrypted password storage, access controls, and least-privilege access to our systems.

No method of transmission or storage is completely secure. While we work hard to protect your information, we cannot guarantee absolute security. Please use a strong, unique password and keep your credentials confidential.

9. Data Retention

We keep personal information only as long as necessary for the purposes described in this policy, to maintain your account, to comply with our legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we delete it or anonymize it.

10. Your Rights

Subject to applicable law, you have the right to:

• Access the personal information we hold about you and request a copy.
• Request correction of information that is inaccurate or incomplete.
• Request deletion of your account and associated personal information.
• Withdraw your consent to optional uses of your information.
• Ask questions about how your information is handled.

To exercise any of these rights, contact privacy@work-ca.ca. We will respond within the timeframes required by law. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada, or, in Quebec, the Commission d’accès à l’information.

11. Cookies

We use a small number of essential cookies to keep you signed in and to remember your language preference. We do not use advertising cookies. For details, see our Cookie Policy.

12. Children’s Privacy

WorkCA is intended for users aged 16 and over. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us and we will delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you. Your continued use of WorkCA after an update means you accept the revised policy.

14. Contact Us

For any privacy question or to exercise your rights, contact our Privacy Officer at privacy@work-ca.ca.

Note: This Privacy Policy is provided for transparency and general information. It is not legal advice. We recommend reviewing it periodically.