Privacy policy
What Joined collects, why, who sees it, how long we keep it, and the choices you have. Google is used to sign in, not to read Gmail or Calendar.About this policy
This privacy policy explains how Joined collects, uses, shares, and protects personal information when you use our website, our job search and hiring app, and Scout, our program for people who submit job leads. It also explains the choices you have and how to reach us.
Effective date: November 4, 2026.
In this policy, “Joined,” “we,” “us,” and “our” mean the team that runs Joined and Scout, and “you” means anyone who visits or uses them. “Personal information” means information that identifies you or can reasonably be linked to you.
Joined is a job search and hiring app. People use it to find jobs, track applications and interviews, and, where hiring features are available, to post roles and review applicants. Joined is for finding jobs and hiring people. It does not create or edit images.
This policy applies to the Joined website and apps, to Scout and the Scoutwell website, and to the Scout browser extension. It does not cover websites and services run by others, such as an employer’s career site, an applicant tracking system, Google, or Stripe. Those have their own policies, and we point to them where they matter.
At a glance
This summary is a convenience. The sections that follow are the full policy.
- What we collect. The details you give us (such as your name, email address, profile, résumés, applications, and messages), what your device sends when you use Joined (such as your IP address and browser), and limited information from Google if you choose to sign in with Google.
- Sign in with Google. If you use it, Joined asks Google for your name, your email address (and whether Google has verified it), and your Google account ID, and nothing else. We do not read Gmail or Google Calendar. We do not store your Google password or Google access tokens.
- What we never do. We do not sell your personal information. We do not use Google user data for advertising, and we do not use it to train artificial-intelligence models. Joined does not use Google APIs for AI-generated non-consensual intimate imagery.
- Employers. A company sees your application when you apply to it. Where recruiter search is available, you decide who can find your profile.
- Your controls. You can export your data and delete your account from Settings, edit your profile and who can find it, and turn job alerts off or delete a saved search. Analytics cookies stay off unless you allow them.
- Questions. Write to support@joinedhq.com.
Information we collect
We collect information in three ways: what you give us, what we collect automatically when you use Joined, and what we receive from others.
Information you give us
| Category | Examples |
|---|---|
| Account details | Name, email address, account type (job seeker, employer, or scout), password if you use email sign-in |
| Profile | Phone number, headline, location, a short “about” summary, target roles, preferred locations, workplace preference (remote, hybrid, or on-site), salary floor and currency, work authorization, security clearance, notice period, skills, work experience, education, and links to LinkedIn, GitHub, or a portfolio |
| Résumés | Files you upload and résumés you build, their labels, and the text and fields we read from them |
| Applications | The jobs you save or apply to, the stage of each application, the résumé you chose, your answers to screening questions, notes, reminders, the note you add for the company, your referral source, and a record that you consented to share your application |
| Interviews | Dates, times, formats, interviewers, meeting links, and reminders you add or that a company schedules with you |
| Messages | Conversations with companies on Joined and notes from Joined |
| Saved jobs and searches | The jobs you save, the searches you save, and how often you want alerts (off, daily, or weekly) |
| Preferences | Alert frequency on your saved searches and other choices you save |
| Reports and feedback | Reports about a job or company, and messages you send us |
| Billing | Your plan and subscription status. Card details go to our payment processor, not to us |
You give us all of this yourself, except billing details, which go to our payment processor, and interview and message details, which a company can also add.
Work authorization, such as whether you can work in a country or need visa sponsorship, can be sensitive. You choose whether to provide it. We use it to show jobs that fit and to rank them, and we share it with a company only as part of an application you send.
Information we collect automatically
- Device and connection details: your IP address, browser and device type, language, the pages and links you open, the time of each request, and the page that sent you to Joined.
- Activity in the product: searches you run, filters you use, jobs shown to you, and what you do with them (opened, saved, skipped, or applied to). We use these signals to rank jobs, protect the service, and fix problems.
- Cookies and similar technologies: small files and browser storage that keep you signed in and remember choices. See Cookies and similar technologies.
Information we receive from others
- Google, if you choose Sign in with Google. See Sign in with Google and Google user data.
- Employers, when they update the status of your application, schedule an interview, or reply to you.
- Job sources. The jobs on Joined come from employers and from public job postings. A posting can include a business contact, such as a recruiter’s name or work email, and we show what the posting publishes.
- Payment processor, which tells us whether a payment or subscription succeeded.
- Scout submitters and staff reviewers, who add and check job leads.
Sign in with Google and Google user data
Joined lets you create an account and sign in with your Google Account. This section says exactly what we ask Google for, what we do with it, and what we never do. It applies to Joined and to Scout, which each use Google sign-in the same way.
What we ask Google for
When you choose Sign in with Google, Joined asks Google for the basic profile scopes and nothing more:
| Scope | What Google shares | Why we need it |
|---|---|---|
openid | A stable identifier for your Google Account | To recognize your account when you return, even if you change your email address |
email | Your email address, and whether Google has verified it | To create your Joined account, send you account emails, and avoid duplicate accounts |
profile | Your name | To show your name in the product and on applications you send |
These are Google’s basic, non-sensitive sign-in scopes. Joined does not request any sensitive or restricted Google scope.
What we store
Joined stores your Google account ID, your name, your email address, and whether Google has verified that email address. Google’s response can include other basic profile details, such as a profile picture address, your language setting, or the domain of a workplace account. Joined does not store or use them.
What we do not do
- We do not read Gmail or Google Calendar. We do not request access to Gmail, Google Calendar, Google Drive, Google Contacts, Google Photos, YouTube, or any other Google service, and we do not read, send, or store your email or calendar.
- We never receive your Google password.
- Joined does not request offline access and does not receive a refresh token. It uses the access token Google issues once, to read your basic profile, and does not keep it.
- We do not sell Google user data, and we do not share it with advertisers, ad networks, or data brokers.
- We do not use Google user data for advertising, including personalized or retargeted advertising.
- We do not use Google user data to develop, improve, or train generalized artificial-intelligence or machine-learning models.
- We do not use Google user data to decide whether to offer you credit or a loan.
- Joined does not use Google APIs for AI-generated non-consensual intimate imagery, and it does not use Google user data to create or edit images. Joined does not generate images.
How we use Google user data
We use the information from Google only to provide and secure the Joined and Scout features you asked for:
- to create your account and recognize you when you come back;
- to show your name in the product and on applications you send;
- to send account emails, such as a sign-in or security notice;
- to prevent duplicate and fraudulent accounts; and
- to answer your support requests and to meet legal obligations.
Who can see Google user data
Joined’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
In line with those requirements, we use Google user data only to provide or improve the user-facing features described in this policy. We transfer it only to provide those features, to comply with the law, to protect the security of the service, or as part of a merger or sale after people are notified. People on our team do not read Google user data unless you ask us to, it is needed for a security or abuse investigation, the law requires it, or the data is combined so that it no longer identifies you.
The hosting and infrastructure providers that run our systems store this data on our behalf and may not use it for their own purposes. See How we share information.
How long we keep it, and how to remove it
We keep your Google account ID, name, email address, and verified flag while your account is open. When you delete your account in Settings, we remove them from our live systems. See How long we keep information.
You can also review and remove Joined’s access at any time in your Google Account at myaccount.google.com/permissions. Removing access stops sign-in with Google. It does not delete your Joined account, so use Settings or contact us to do that. Google’s own handling of your data is described in the Google Privacy Policy.
How we use your information
We use personal information to run Joined, keep it safe, and make it better. If you are in the European Economic Area, the United Kingdom, or Switzerland, the legal basis for each use is shown in the table.
| Purpose | Examples | Legal basis |
|---|---|---|
| Provide your account and the service | Create and secure your account, sign you in, show jobs, save your searches, track applications and interviews, and let you message companies | Contract: needed to provide the service you asked for |
| Send applications to employers | Share your application, résumé, and answers with the company you apply to | Contract, and your consent when you submit the application |
| Communicate with you | Verification and password emails, job alerts you turned on, interview reminders, receipts, and security or policy notices | Contract, legal obligation, and legitimate interests. You can turn off optional emails |
| Rank and personalize jobs | Order search results using your profile, saved jobs, and activity; show fit information | Legitimate interests. You can object by writing to us |
| Keep Joined safe | Detect fake or scam jobs, spam, fraud, abuse, and attempts to break in; enforce our terms; review reports | Legitimate interests and legal obligation |
| Understand and improve Joined | Measure use of the product, find and fix errors, test changes, and train our own ranking | Legitimate interests. Analytics cookies only with your consent |
| Take payments and keep records | Process Premium payments, issue receipts, and meet tax and accounting rules | Contract and legal obligation |
| Operate Scout | Review job leads, calculate and pay rewards, and run identity, tax, and sanctions checks before payouts | Contract and legal obligation |
| Comply with law and protect rights | Answer lawful requests, resolve disputes, and defend legal claims | Legal obligation and legitimate interests |
We do not use your résumé, profile, or messages to build advertising profiles, and we do not sell personal information.
Automated processing, scores, and AI
Some features use automated processing. They help you find and judge jobs. People, not these tools, decide whether to hire someone.
- Ranking and fit. We order search results and show how a job fits you using your profile (such as target roles, skills, locations, and salary floor), the jobs you save or skip, and the contents of each posting. This runs on our own servers. You can object to ranking based on your activity by writing to us.
- Scam and quality signals. We score postings for signs of fake or low-quality jobs, and we review reports from people who flag a job. These signals are about the posting, not about you.
- AI language models. We use AI language models to read, summarize, and check job postings and company information, such as a job description a recruiter pastes in. We do not send your résumé, profile, messages, or Google user data to third-party AI providers.
- Training. To improve search we log which jobs were shown and what people did with them, and we use those signals to train our own ranking model. We do not use your résumé, messages, or Google user data to train generalized AI models.
- No automated decisions with legal effect. Joined does not make hiring decisions. Scores and rankings are estimates for your information. A company decides who to interview or hire, and you can ignore any score.
- No images. Joined does not generate or edit images, and it does not use Google APIs for AI-generated non-consensual intimate imagery.
We do not collect biometric identifiers, such as face or fingerprint templates, today. If we add identity or liveness checks, we will update this policy first and ask for your consent where the law requires it.
If you want a person to look again at something an automated tool affected, write to support@joinedhq.com.
How long we keep information
We keep personal information only as long as we need it for the purposes in this policy, and then we delete it or de-identify it.
| Information | How long we keep it |
|---|---|
| Account, profile, and résumés | Until you delete them or your account. We may ask whether you still want an account that has been inactive for a long time, and we may delete accounts that stay inactive for 24 months |
| Applications, interviews, saved jobs and searches, notes, and reminders | While your account is open. Removed when you delete your account. Employers keep their own copies of applications they received |
| Messages | While your account is open. Removed from your account when you delete it. A message already delivered to another person, including by email, can remain with them |
| Google sign-in data (account ID, name, email, verified flag) | While your account is open. We do not store Google passwords or access tokens |
| Billing records | As long as tax, accounting, and legal rules require, which can be up to seven years |
| Scout earnings, payout, and tax records | As long as tax, accounting, and legal rules require, which can be up to seven years |
| Sessions and one-time links | Sessions up to 30 days. Email verification links 24 hours. Password reset links 1 hour. Google sign-in state 10 minutes |
| Security and server logs | A short period, and longer where needed to investigate abuse or a security incident |
| Backups | Copies of deleted data can remain in our backups for a limited time, until older backups are replaced |
| Cookie choice | 180 days |
| De-identified or aggregated statistics | May be kept, because they no longer identify you |
When you delete your account we remove your personal information from our live systems right away in most cases, and in any event within 30 days. We keep only what the law requires, such as payment and tax records, and what we need to resolve a dispute or prevent abuse.
How we protect information
We use administrative, technical, and organizational measures to protect personal information, including:
- Encryption in transit. Joined is served over HTTPS, so traffic between your browser and our servers is encrypted.
- Passwords. Passwords are salted and hashed with Argon2id. We never store them in plain text. After repeated failed sign-in attempts, sign-in is paused for 15 minutes.
- Sessions. The session cookie is HttpOnly, SameSite, and, in production, Secure. Sessions end after 30 days, and you can sign out at any time.
- One-time links. Email verification links expire after 24 hours and password reset links after 1 hour. Google sign-in uses a state check and a code verifier, and the state expires after 10 minutes.
- Request checks. Email sign-in and sign-up requests are accepted only from our own site.
- Limited access. We limit access to personal information to staff who need it to run, support, and secure Joined. Our staff tools are protected by sign-in with a staff Google Workspace account, and their sessions last 12 hours.
- Separation. Our services run in separate containers, and each service keeps its own configuration.
- Monitoring and recovery. We monitor the service for errors and abuse, and we keep switches that let us turn off risky features quickly.
No system is perfectly secure. If you think your account or data is at risk, or you find a security problem, write to support@joinedhq.com. If a breach affects your personal information, we will notify you and the authorities as the law requires.
Your choices and rights
You are in control of your information. You can do many things yourself, in Settings and on your Profile page.
- See and export your data. In Settings, under Privacy & data, choose Export everything to download your profile, résumés, applications, and messages as a JSON file. You can request one export per hour.
- Correct your data. Edit your profile and résumés at any time. Write to us if you cannot fix something yourself.
- Delete your account. In Settings, choose Delete account. This permanently removes your profile, applications, interviews, messages, and saved jobs. If you created a company page on Joined, deleting your account also deletes that company, its jobs, and the activity on those jobs. Export your data first, because deletion cannot be undone.
- Choose who can find your profile. On your Profile page, switch Appear in recruiter search, Open to work, and Hide from current employer on or off. Companies you apply to always see your application.
- Control alerts and email. Turn a job alert off, change how often it arrives, or delete the saved search, from your saved searches on the home page or in Settings under Job alerts. Write to us to stop any other optional email. We still send emails we need to send, such as security notices and receipts. Email is the notification channel Joined uses today.
- Choose your cookies. Allow or decline analytics in the cookie banner.
- Remove Google access. Review or remove Joined’s access in your Google Account.
- Object, restrict, or withdraw consent. This includes objecting to ranking based on your activity. Where the law gives you these rights, write to us and we will act on your request. Withdrawing consent does not affect what we did before.
To use a right that Settings does not cover, write to support@joinedhq.com from the email address on your account. We may ask you to confirm your identity before we act. We aim to answer within 30 days, and we will tell you if we need more time. We do not charge a fee unless a request is clearly unfounded or excessive, and we will not treat you differently for using your rights. You can ask an authorized agent to make a request for you, and we may ask for proof of the authorization.
If we cannot resolve your concern, you can also contact your local data protection authority.
Employers and hiring features
Employer accounts collect information about the company and its team: the company’s name, website, logo, size, and locations; team members and their roles; the jobs it posts; its hiring settings; and its billing. Employers also see the applications they receive and the messages they exchange with candidates.
An employer decides why and how it uses the applicant information it receives, so it is responsible for that use. Our terms of use require employers to use applicant information only for hiring, to follow equal-opportunity and privacy laws, and not to sell it. Joined does not collect facial images or run face recognition.
If you are an applicant and you want an employer to delete the application it received, contact that employer. You can also write to us and we will help where we can.
Scout accounts
Scout lets people submit job leads and earn rewards when a qualifying outcome lands on a job they submitted. Scout accounts are covered by this policy, and Scout’s independent-contractor terms govern the work.
For Scout we collect your account details, the job leads you submit and their review status, your earnings, and what we need to pay you: your legal name, country, tax-form details, and payout method. Before a payout we run identity, tax, and sanctions checks. The screening provider receives only your user ID, country, and tax-form type. A payout provider handles the transfer.
The Scout browser extension reads job details from the page you choose to capture, and only when you start a capture. It does not read your browsing history or run in the background. It sends data only to Joined’s own Scoutwell website and Scout API, and it does not include advertising or unrelated analytics.
We keep Scout earnings, payout, and tax records for as long as tax, accounting, and legal rules require.
Where we process information
Joined is run from servers and by service providers that can be in the United States and in other countries. If you use Joined from outside the country where our servers are, your information is transferred to and processed there, and the laws there can differ from the laws where you live.
When we transfer personal information out of the European Economic Area, the United Kingdom, or Switzerland, we use a lawful transfer mechanism, such as the European Commission’s Standard Contractual Clauses, where one is required.
Region-specific information
European Economic Area, United Kingdom, and Switzerland
Joined is the controller of the personal information described in this policy. You have the right to access your personal information, to have it corrected or deleted, to restrict or object to certain processing, to receive it in a portable format, and to withdraw consent at any time. The legal bases for our processing are in How we use your information. You can write to us to use these rights, and you have the right to complain to your local data protection authority.
California
California law gives California residents the right to know what personal information we collect, to access and delete it, to correct it, and to limit the use of sensitive personal information. Over the past 12 months we collected the categories below. We do not sell personal information and we do not share it for cross-context behavioral advertising.
| Category | Examples | Why we collect it | Shared with |
|---|---|---|---|
| Identifiers | Name, email address, IP address, account ID | Provide and secure the service | Service providers; employers you apply to |
| Customer records | Phone number and other profile details you give us | Provide the service | Service providers; employers you apply to |
| Professional and education information | Work history, education, skills, résumés, target roles | Provide the service and rank jobs | Employers you apply to |
| Commercial information | Plan and subscription status | Provide paid features and keep records | Payment processor |
| Internet and activity information | Searches, jobs viewed, saved, and applied to, device and browser details | Rank jobs, secure and improve the service | Service providers |
| Inferences | Fit and ranking signals | Show relevant jobs | Not shared |
| Sensitive personal information | Work authorization or immigration status, if you provide it | Show jobs that fit and send your application | Employers you apply to |
We use sensitive personal information only to provide the features you ask for. California residents can use their rights through Settings or by writing to us, as described in Your choices and rights.
Other U.S. states
Residents of other states with privacy laws, such as Colorado, Connecticut, Oregon, Texas, Utah, and Virginia, can ask to access, correct, delete, and obtain a copy of their personal information, and to opt out of the sale or targeted advertising of it, which we do not do. If we decline your request, you can ask us to reconsider by writing to us with the subject line “Appeal.”
Everywhere else
Other countries give residents similar rights. Write to us and we will honor them where the law applies to you.
Children’s privacy
Joined is not for children. You must be at least 16 years old to use Joined, or older if the law where you live sets a higher age to work, to enter into a contract, or to consent to the processing of your data. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, write to support@joinedhq.com and we will delete it.
Links to other sites and services
Joined links to employers’ career pages and to other sites. We do not control those sites or their privacy practices, and this policy does not apply to them. When you leave Joined, read the policy of the site you visit.
Changes to this policy
We may update this policy as Joined changes or as the law changes. When we make a material change, we will update the effective date at the top, and we will tell you in the product or by email before the change takes effect where the law requires it. The latest version is always at /privacy.
Contact us
Questions, requests, and concerns about privacy are welcome at support@joinedhq.com. Please say whether you use Joined or Scout, and write from the email address on your account so we can find it.