Privacy Policy

Last updated: October 29, 2026 | Your privacy is our priority

Last Updated: October 29, 2026 | View Change History

📋 Policy Summary

Data Collection

We collect information you provide and usage data

Data Usage

To provide and improve our services

Data Sharing

Limited to service providers and legal requirements

Your Rights

Access, correct, delete, or export your data

1. Introduction

NoMondays ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our job search platform and related services.

Please read this Privacy Policy carefully. By accessing or using our services, you consent to the practices described in this policy. If you do not agree with our policies and practices, please do not use our services.

Scope of This Policy

This policy applies to information we collect:

  • On our website (nomondays.io) and mobile applications
  • In email, text, and other electronic messages between you and NoMondays
  • Through mobile and desktop applications you download from us
  • When you interact with our advertising and applications on third-party websites and services

Definitions: For the purposes of this Privacy Policy:

  • "Personal Information" means any information that identifies, relates to, describes, or can be associated with you.
  • "Services" refers to our job search platform, career resources, and related features.
  • "User" means any individual who accesses or uses our Services.

2. Information We Collect

2.1 Information You Provide to Us

Personal Information:

  • Account Information: Name, email address, phone number, password, profile photo
  • Profile Information: Resume/CV, cover letters, work experience, education history, skills, certifications, portfolio links
  • Job Preferences: Desired salary, location preferences, job types (full-time, part-time, contract), industry preferences
  • Application Materials: Job applications, interview availability, assessment results
  • Communication: Messages with employers, application status updates, interview feedback
  • Payment Information: For premium services, we collect billing address and payment method details (processed by secure third-party processors)

2.2 Information Collected Automatically

Technical and Usage Data:

  • Device Information: IP address, browser type and version, time zone setting, browser plug-in types, operating system
  • Usage Data: Pages visited, time spent on pages, click patterns, search queries, features used
  • Location Information: Approximate location based on IP address, precise location (if you enable location services)
  • Cookies and Tracking: Session cookies, persistent cookies, web beacons, pixels, and similar technologies
  • Log Information: Log files recording website access, including access times, viewed pages, and IP addresses

2.3 Information from Other Sources

We may receive information about you from third parties:

Social Media Platforms

When you connect your social media accounts (LinkedIn, Google, etc.), we may receive profile information and connections.

Employers and Recruitment Agencies

Application status updates, interview feedback, and hiring decisions.

Background Check Providers

Only with your explicit consent for specific job applications.

Publicly Available Sources

Professional profiles, publications, and other publicly accessible information.

3. How We Use Your Information

We use your information for the following purposes:

👤 Service Provision and Account Management

Create and maintain your account, process job applications, facilitate employer connections, provide job recommendations, and deliver core platform functionality.

📧 Communication and Notifications

Send job alerts, application updates, interview invitations, platform announcements, and respond to your inquiries and support requests.

🚀 Platform Improvement and Personalization

Analyze usage patterns, develop new features, personalize job recommendations, optimize user experience, and conduct research and development.

🛡️ Security and Compliance

Protect our platform from fraud and abuse, enforce our terms of service, comply with legal obligations, and protect the rights and safety of our users.

📊 Analytics and Business Operations

Monitor platform performance, analyze user behavior, measure marketing effectiveness, and make business decisions based on aggregated data.

Legal Basis for Processing (GDPR Compliance)

For users in the European Economic Area (EEA), we process your information based on:

•
Consent: When you explicitly agree to specific processing activities
•
Contract Performance: To provide the services you requested
•
Legitimate Interests: For platform improvement and security
•
Legal Compliance: To meet our legal obligations

4. Information Sharing and Disclosure

We do not sell your personal information to third parties. We may share your information in the following limited circumstances:

💼 With Employers

When you apply for a job, we share:

  • Your complete profile information and resume/CV
  • Application materials and cover letters
  • Assessment results and skills evaluations
  • Communication history related to the application

Note: Employers become data controllers for the information they receive and are responsible for their own privacy practices.

Other Sharing Circumstances:

Service Providers

We share information with trusted vendors who assist in platform operation:

  • Cloud hosting providers (AWS, Google Cloud)
  • Payment processors (Stripe, PayPal)
  • Email service providers (SendGrid, Mailchimp)
  • Analytics and monitoring services
  • Customer support platforms

All service providers are bound by strict data protection agreements.

Legal Requirements

We may disclose information when required by:

  • Law, regulation, or legal process
  • Government requests and court orders
  • To protect our rights, property, or safety
  • To investigate fraud or security issues

Business Transfers

In connection with mergers, acquisitions, or sale of assets, user information may be transferred to the new entity, subject to the same privacy protections.

Aggregated and Anonymized Data

We may share non-identifiable, aggregated user statistics with partners for market analysis, research, or business purposes.

5. Data Security

We implement comprehensive technical and organizational security measures to protect your personal information:

🔒

Encryption

All data encrypted in transit (TLS 1.2+) and at rest (AES-256)

🛡️

Access Controls

Role-based access, multi-factor authentication, and principle of least privilege

📊

Monitoring

24/7 security monitoring, intrusion detection, and regular security audits

🔄

Backup & Recovery

Regular encrypted backups and disaster recovery procedures

Security Certifications and Compliance

Our security practices align with industry standards including:

ISO 27001 SOC 2 GDPR CCPA

Your Responsibility

Please keep your account credentials secure and notify us immediately at security@nomondays.io if you suspect any unauthorized access to your account.

6. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

1

Access and Portability

Request access to and export of your personal data in a structured, machine-readable format.

How to exercise: Account Settings → Download My Data

2

Correction and Update

Update or correct inaccurate or incomplete information in your profile and account.

How to exercise: Edit your profile directly or contact support

3

Deletion and Erasure

Request deletion of your personal data, subject to legal retention requirements.

How to exercise: Account Settings → Delete Account

4

Objection and Restriction

Object to certain processing activities or request restriction of processing in specific circumstances.

How to exercise: Contact privacy@nomondays.io

5

Marketing Preferences

Opt-out of marketing communications and control your notification preferences.

How to exercise: Account Settings → Notifications

Response Time and Verification

We aim to respond to all legitimate requests within 30 days. We may need to verify your identity before processing certain requests to protect your privacy.

No Fee Usually Required: You will not have to pay a fee to access your personal data or to exercise any of your rights.

To exercise these rights, please contact us at privacy@nomondays.io.

7. Cookies and Tracking

We use cookies and similar tracking technologies to enhance your experience and analyze platform usage.

Types of Cookies We Use

Essential Cookies

Required for basic platform functionality and security

Performance Cookies

Help us understand how users interact with our platform

Functionality Cookies

Remember your preferences and settings

Targeting Cookies

Used for personalized job recommendations and advertising

Cookie Management

You can control cookies through your browser settings. However, disabling essential cookies may affect platform functionality.

Browser Controls

Most browsers allow you to:

  • See what cookies are stored and delete them
  • Block third-party cookies
  • Block cookies from specific sites
  • Block all cookies
  • Delete all cookies when you close your browser

For detailed information about our cookie usage, please see our Cookie Policy.

8. International Data Transfers

NoMondays operates globally, and your information may be transferred to and processed in countries other than your country of residence.

Transfer Safeguards

We ensure appropriate safeguards are in place for international data transfers:

  • EU-US Data Privacy Framework: We participate in the EU-US Data Privacy Framework for transfers to the United States
  • Standard Contractual Clauses: We use EU-approved standard contractual clauses for other international transfers
  • Adequacy Decisions: We rely on adequacy decisions where applicable
  • Binding Corporate Rules: We implement binding corporate rules for intra-organizational transfers

Primary Data Processing Locations:

  • European Union (Primary): Our main servers are located in Germany
  • United States: Some analytics and marketing services operate from the US
  • Global CDN: Content delivery networks may cache data in various locations for performance

By using our services, you consent to the transfer of your information to these locations.

9. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law.

Active Accounts

We retain your information while your account is active and for 3 years after last activity for job matching purposes.

Job Applications

Application materials are retained for 5 years to support employment verification and legal requirements.

Financial Records

Billing and payment information is retained for 7 years for tax and accounting purposes.

Analytics Data

Aggregated and anonymized usage data may be retained indefinitely for business analysis.

Deletion Process

When we no longer need to retain your information, we securely delete or anonymize it. Backups containing your information may be retained for additional periods as part of our disaster recovery procedures.

10. Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16.

Age Verification

During account registration, we verify that users are at least 16 years old. If you believe we have collected information from a child under 16, please contact us immediately.

Parental Rights: Parents or guardians who discover that their child has provided us with personal information can contact us to request deletion.

Compliance with COPPA: We comply with the Children's Online Privacy Protection Act (COPPA) and similar regulations worldwide.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

Notification of Changes

We will notify you of any material changes by:

  • Posting the updated policy on our website with a new "Last Updated" date
  • Sending an email notification to registered users
  • Displaying a prominent notice on our platform before changes take effect

Recent Changes

October 29, 2026: Initial publication of Privacy Policy

No previous versions available

Continued Use: Your continued use of our services after any changes to this Privacy Policy constitutes your acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

NoMondays Data Protection Officer

Email: privacy@nomondays.io

Address: Warsaw, Poland

Response Time: We aim to respond to all inquiries within 30 days

Security Concerns

For security-related issues or data breaches, please contact: security@nomondays.io

Supervisory Authority

You have the right to lodge a complaint with your local data protection authority if you believe we have not complied with applicable data protection laws.

EU Residents: Contact your national data protection authority
UK Residents: Information Commissioner's Office (ICO)
Other Regions: Contact your local data protection regulator