Privacy Policy

Last updated 6 Oct 2026. This Privacy Policy describes how CareerCola ("we", "us") handles personal data when you use this job discovery site.

Who this applies to

This policy covers visitors, registered candidates, employers, and administrators who use the public site and signed-in account areas.

Data we collect

Account and profile

  • Name, email address, and account role (candidate, employer, or admin).
  • Optional profile fields such as phone number and bio when you provide them.
  • A password hash when you set a password, or a Google account identifier and avatar URL when you use Google Sign-In.
  • Email verification status and account security settings.

Employer-provided data

  • Company name, website, logo, and about text for employer profiles you manage.
  • Job listing content you submit, including titles, descriptions, locations, and apply URLs.

Applications and candidate materials

  • When you apply through CareerCola, we store your application status, an optional cover letter, and the resume file you upload.
  • When you apply on an employer's site, that site handles your data under its own policy. CareerCola may record that the apply link was opened, for operational counts on the listing.
  • Saved jobs, when you use that feature while signed in.

Forms and safety reports

  • Contact form submissions (name if you provide one, email, category, subject, message, and technical details such as IP address).
  • Feedback form submissions with similar fields.
  • Job and company safety reports (a reporter email if provided, the details you submit, and the related listing).
  • Privacy consent records when you accept this policy during registration or apply (email, purpose, policy version, time, and IP address).
  • Data deletion requests sent through the deletion request form.

Technical data

  • Server and application logs used for security and debugging. Logs may include IP address, user agent, and requested URLs.
  • Session identifiers and CSRF tokens required for signed-in features.

Cookies and browser storage

  • Session cookie (careercola-session) — keeps you signed in. It is HttpOnly, typically Secure on production, and SameSite=Lax.
  • CSRF cookie (XSRF-TOKEN) — helps protect forms from cross-site request forgery. It is not HttpOnly, so the site can send it with requests that need it.
  • Local storage — a first-visit job safety notice may store a dismissal flag in your browser (careercola_safety_notice_v1) so the notice is not shown again. Admin-only drafting tools may use separate local storage keys. Those keys are not used for public visitors.

Analytics and advertising

Google Analytics (GA4) is used on this site. On public pages where the analytics script loads, Google may collect usage data such as pages viewed and an approximate location derived from your IP address. We ask Google to anonymize IP addresses when that option is turned on. Google's privacy policy describes how Google processes that data.

CareerCola may show ads served by third-party vendors, including Google. These vendors use cookies to serve ads based on a user's prior visits to this and other websites. Google's use of advertising cookies enables it and its partners to serve ads based on visits to CareerCola and/or other sites.

You can opt out of personalized ads in Google Ads Settings and at www.aboutads.info.

Authentication and bot protection

Google Sign-In may be offered as a way to create an account or sign in. If you use it, we receive your Google account identifier, name, email address, and profile image URL, and we use those to open your CareerCola account. Google's privacy policy describes Google's processing.

Cloudflare Turnstile may be used on selected forms to reduce spam. When it is used, Cloudflare processes the technical data needed to check the challenge.

How we use data

  • Provide job search, listings, applications, employer tools, and account management.
  • Moderate content, reduce spam and abuse, and look into safety reports.
  • Run scheduled work such as closing listings that have passed their valid-through date, and deleting old application records under the retention period below.
  • Understand how public pages are used when analytics is running.
  • Meet legal duties and enforce our Terms.

Legal bases (where applicable)

Depending on where you are, we rely on performing the service you ask for, legitimate interests (security, fraud prevention, and running the site), consent where the law requires it for optional processing such as analytics or advertising, and legal obligation.

Sharing

  • Employers receive applications you submit to their jobs through portal apply.
  • Service providers that host the site or support email, sign-in, analytics, advertising, or bot checks when those features are in use.
  • Authorities when the law requires it, or to protect rights and safety.

We do not sell personal data as a product.

Retention

  • Account data is kept while your account is active, and afterward for as long as we need it for legal, security, or audit reasons.
  • Portal job applications and the resume files stored with them are deleted after about 365 days by a scheduled purge, unless a longer period is required by law or an active dispute.
  • Contact, feedback, safety reports, privacy consents, and deletion requests may be kept as needed to run the service and show that we followed this policy.
  • Server logs are kept for a limited period set by hosting and logging configuration.

Your choices

  • Update profile fields in account settings when you are signed in.
  • Delete your account from account settings when self-service deletion is available for your role.
  • Send a data deletion request if you cannot sign in or need more help.
  • Control cookies in your browser. Blocking the session cookie will stop signed-in use.
  • Opt out of personalized ads in Google Ads Settings or at www.aboutads.info.

Children

The service is not directed at children under 16, and we do not knowingly collect personal data from children.

International transfers

Data may be processed in the countries where our hosting and providers operate. Where data crosses borders, we take steps that match applicable law.

Security

We use access controls, encrypted transport in production, private resume storage, rate limits, and monitoring. No method of sending or storing data is completely secure.

Changes to this policy

We may update this Privacy Policy. The new version will be posted on this page with a new Last updated date. Where the law requires it, we will ask for consent again after a material change.

Contact us about privacy

Send privacy questions through the Contact form and choose a privacy-related category.

Operated by CareerCola.

Based in Raipur, Chhattisgarh.