Privacy policy

What Joined collects, why, who sees it, how long we keep it, and the choices you have. Google is used to sign in, not to read Gmail or Calendar.

About this policy

This privacy policy explains how Joined collects, uses, shares, and protects personal information when you use our website, our job search and hiring app, and Scout, our program for people who submit job leads. It also explains the choices you have and how to reach us.
Effective date: November 4, 2026.
In this policy, “Joined,” “we,” “us,” and “our” mean the team that runs Joined and Scout, and “you” means anyone who visits or uses them. “Personal information” means information that identifies you or can reasonably be linked to you.
Joined is a job search and hiring app. People use it to find jobs, track applications and interviews, and, where hiring features are available, to post roles and review applicants. Joined is for finding jobs and hiring people. It does not create or edit images.
This policy applies to the Joined website and apps, to Scout and the Scoutwell website, and to the Scout browser extension. It does not cover websites and services run by others, such as an employer’s career site, an applicant tracking system, Google, or Stripe. Those have their own policies, and we point to them where they matter.

At a glance

This summary is a convenience. The sections that follow are the full policy.
  • What we collect. The details you give us (such as your name, email address, profile, résumés, applications, and messages), what your device sends when you use Joined (such as your IP address and browser), and limited information from Google if you choose to sign in with Google.
  • Sign in with Google. If you use it, Joined asks Google for your name, your email address (and whether Google has verified it), and your Google account ID, and nothing else. We do not read Gmail or Google Calendar. We do not store your Google password or Google access tokens.
  • What we never do. We do not sell your personal information. We do not use Google user data for advertising, and we do not use it to train artificial-intelligence models. Joined does not use Google APIs for AI-generated non-consensual intimate imagery.
  • Employers. A company sees your application when you apply to it. Where recruiter search is available, you decide who can find your profile.
  • Your controls. You can export your data and delete your account from Settings, edit your profile and who can find it, and turn job alerts off or delete a saved search. Analytics cookies stay off unless you allow them.
  • Questions. Write to support@joinedhq.com.

Information we collect

We collect information in three ways: what you give us, what we collect automatically when you use Joined, and what we receive from others.

Information you give us

CategoryExamples
Account detailsName, email address, account type (job seeker, employer, or scout), password if you use email sign-in
ProfilePhone number, headline, location, a short “about” summary, target roles, preferred locations, workplace preference (remote, hybrid, or on-site), salary floor and currency, work authorization, security clearance, notice period, skills, work experience, education, and links to LinkedIn, GitHub, or a portfolio
RésumésFiles you upload and résumés you build, their labels, and the text and fields we read from them
ApplicationsThe jobs you save or apply to, the stage of each application, the résumé you chose, your answers to screening questions, notes, reminders, the note you add for the company, your referral source, and a record that you consented to share your application
InterviewsDates, times, formats, interviewers, meeting links, and reminders you add or that a company schedules with you
MessagesConversations with companies on Joined and notes from Joined
Saved jobs and searchesThe jobs you save, the searches you save, and how often you want alerts (off, daily, or weekly)
PreferencesAlert frequency on your saved searches and other choices you save
Reports and feedbackReports about a job or company, and messages you send us
BillingYour plan and subscription status. Card details go to our payment processor, not to us
You give us all of this yourself, except billing details, which go to our payment processor, and interview and message details, which a company can also add.
Work authorization, such as whether you can work in a country or need visa sponsorship, can be sensitive. You choose whether to provide it. We use it to show jobs that fit and to rank them, and we share it with a company only as part of an application you send.

Information we collect automatically

  • Device and connection details: your IP address, browser and device type, language, the pages and links you open, the time of each request, and the page that sent you to Joined.
  • Activity in the product: searches you run, filters you use, jobs shown to you, and what you do with them (opened, saved, skipped, or applied to). We use these signals to rank jobs, protect the service, and fix problems.
  • Cookies and similar technologies: small files and browser storage that keep you signed in and remember choices. See Cookies and similar technologies.

Information we receive from others

  • Google, if you choose Sign in with Google. See Sign in with Google and Google user data.
  • Employers, when they update the status of your application, schedule an interview, or reply to you.
  • Job sources. The jobs on Joined come from employers and from public job postings. A posting can include a business contact, such as a recruiter’s name or work email, and we show what the posting publishes.
  • Payment processor, which tells us whether a payment or subscription succeeded.
  • Scout submitters and staff reviewers, who add and check job leads.

Sign in with Google and Google user data

Joined lets you create an account and sign in with your Google Account. This section says exactly what we ask Google for, what we do with it, and what we never do. It applies to Joined and to Scout, which each use Google sign-in the same way.

What we ask Google for

When you choose Sign in with Google, Joined asks Google for the basic profile scopes and nothing more:
ScopeWhat Google sharesWhy we need it
openidA stable identifier for your Google AccountTo recognize your account when you return, even if you change your email address
emailYour email address, and whether Google has verified itTo create your Joined account, send you account emails, and avoid duplicate accounts
profileYour nameTo show your name in the product and on applications you send
These are Google’s basic, non-sensitive sign-in scopes. Joined does not request any sensitive or restricted Google scope.

What we store

Joined stores your Google account ID, your name, your email address, and whether Google has verified that email address. Google’s response can include other basic profile details, such as a profile picture address, your language setting, or the domain of a workplace account. Joined does not store or use them.

What we do not do

  • We do not read Gmail or Google Calendar. We do not request access to Gmail, Google Calendar, Google Drive, Google Contacts, Google Photos, YouTube, or any other Google service, and we do not read, send, or store your email or calendar.
  • We never receive your Google password.
  • Joined does not request offline access and does not receive a refresh token. It uses the access token Google issues once, to read your basic profile, and does not keep it.
  • We do not sell Google user data, and we do not share it with advertisers, ad networks, or data brokers.
  • We do not use Google user data for advertising, including personalized or retargeted advertising.
  • We do not use Google user data to develop, improve, or train generalized artificial-intelligence or machine-learning models.
  • We do not use Google user data to decide whether to offer you credit or a loan.
  • Joined does not use Google APIs for AI-generated non-consensual intimate imagery, and it does not use Google user data to create or edit images. Joined does not generate images.

How we use Google user data

We use the information from Google only to provide and secure the Joined and Scout features you asked for:
  • to create your account and recognize you when you come back;
  • to show your name in the product and on applications you send;
  • to send account emails, such as a sign-in or security notice;
  • to prevent duplicate and fraudulent accounts; and
  • to answer your support requests and to meet legal obligations.

Who can see Google user data

Joined’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
In line with those requirements, we use Google user data only to provide or improve the user-facing features described in this policy. We transfer it only to provide those features, to comply with the law, to protect the security of the service, or as part of a merger or sale after people are notified. People on our team do not read Google user data unless you ask us to, it is needed for a security or abuse investigation, the law requires it, or the data is combined so that it no longer identifies you.
The hosting and infrastructure providers that run our systems store this data on our behalf and may not use it for their own purposes. See How we share information.

How long we keep it, and how to remove it

We keep your Google account ID, name, email address, and verified flag while your account is open. When you delete your account in Settings, we remove them from our live systems. See How long we keep information.
You can also review and remove Joined’s access at any time in your Google Account at myaccount.google.com/permissions. Removing access stops sign-in with Google. It does not delete your Joined account, so use Settings or contact us to do that. Google’s own handling of your data is described in the Google Privacy Policy.

How we use your information

We use personal information to run Joined, keep it safe, and make it better. If you are in the European Economic Area, the United Kingdom, or Switzerland, the legal basis for each use is shown in the table.
PurposeExamplesLegal basis
Provide your account and the serviceCreate and secure your account, sign you in, show jobs, save your searches, track applications and interviews, and let you message companiesContract: needed to provide the service you asked for
Send applications to employersShare your application, résumé, and answers with the company you apply toContract, and your consent when you submit the application
Communicate with youVerification and password emails, job alerts you turned on, interview reminders, receipts, and security or policy noticesContract, legal obligation, and legitimate interests. You can turn off optional emails
Rank and personalize jobsOrder search results using your profile, saved jobs, and activity; show fit informationLegitimate interests. You can object by writing to us
Keep Joined safeDetect fake or scam jobs, spam, fraud, abuse, and attempts to break in; enforce our terms; review reportsLegitimate interests and legal obligation
Understand and improve JoinedMeasure use of the product, find and fix errors, test changes, and train our own rankingLegitimate interests. Analytics cookies only with your consent
Take payments and keep recordsProcess Premium payments, issue receipts, and meet tax and accounting rulesContract and legal obligation
Operate ScoutReview job leads, calculate and pay rewards, and run identity, tax, and sanctions checks before payoutsContract and legal obligation
Comply with law and protect rightsAnswer lawful requests, resolve disputes, and defend legal claimsLegal obligation and legitimate interests
We do not use your résumé, profile, or messages to build advertising profiles, and we do not sell personal information.

Automated processing, scores, and AI

Some features use automated processing. They help you find and judge jobs. People, not these tools, decide whether to hire someone.
  • Ranking and fit. We order search results and show how a job fits you using your profile (such as target roles, skills, locations, and salary floor), the jobs you save or skip, and the contents of each posting. This runs on our own servers. You can object to ranking based on your activity by writing to us.
  • Scam and quality signals. We score postings for signs of fake or low-quality jobs, and we review reports from people who flag a job. These signals are about the posting, not about you.
  • AI language models. We use AI language models to read, summarize, and check job postings and company information, such as a job description a recruiter pastes in. We do not send your résumé, profile, messages, or Google user data to third-party AI providers.
  • Training. To improve search we log which jobs were shown and what people did with them, and we use those signals to train our own ranking model. We do not use your résumé, messages, or Google user data to train generalized AI models.
  • No automated decisions with legal effect. Joined does not make hiring decisions. Scores and rankings are estimates for your information. A company decides who to interview or hire, and you can ignore any score.
  • No images. Joined does not generate or edit images, and it does not use Google APIs for AI-generated non-consensual intimate imagery.
We do not collect biometric identifiers, such as face or fingerprint templates, today. If we add identity or liveness checks, we will update this policy first and ask for your consent where the law requires it.
If you want a person to look again at something an automated tool affected, write to support@joinedhq.com.

How we share information

We share personal information only in the ways below. We do not sell personal information, and we do not share it for cross-context behavioral advertising, as California law defines those terms.

With employers, when you ask us to

  • When you apply to a job, the company sees your application: the profile details and résumé you choose to share, your answers to its screening questions, your note, and your consent record. The company’s hiring team can see it, and a company you apply to always sees your application.
  • Where recruiter search is available, you decide whether verified recruiters can find your profile. On your Profile page you can switch Appear in recruiter search, Open to work, and Hide from current employer on or off.
  • Messages you send in a conversation are visible to the company’s team members in that conversation.
An employer that receives your information is responsible for how it uses it. It handles that information under its own privacy policy and the law, and it may keep its copy after you delete your Joined account.

With service providers

We use service providers who process information on our instructions to run Joined. They may use it only to provide their service to us.
Provider typeWhat they doInformation involved
Hosting and infrastructureRun our servers, databases, and networkEverything we store, protected as described below
GoogleSign in with Google; Search Console; Tag Manager and Analytics if you allow analyticsBasic profile details for sign-in; usage data for analytics
Payment processor (Stripe)Takes payments and manages subscriptionsBilling details and plan status. Card numbers go to Stripe, not to us
Email deliverySends account emails, alerts, and noticesYour email address and the message
Location search (Geoapify)Suggests places as you type a city or addressThe text you type in a location field, sent from our servers
AI model providersRead and summarize job postings and company informationJob and company text, not your résumé, profile, or messages
Error and uptime monitoring, where enabledTell us when something breaksTechnical details about errors and requests
Payout and screening providers (Scout)Pay scouts and run identity, tax, and sanctions checksScout identity, country, tax-form type, and payout details
We disclose personal information when we believe the law requires it, to respond to valid legal process, to protect the rights, safety, and property of people and of Joined, or to detect and prevent fraud, abuse, and security problems.

In a business transfer

If Joined is involved in a merger, acquisition, financing, or sale of assets, personal information may be transferred. We will tell you before it becomes subject to a different privacy policy.

Aggregated and de-identified information

We may share or publish statistics that do not identify you, such as how many jobs were posted in a region.

Cookies and similar technologies

Joined uses a few cookies and browser storage items. Necessary ones keep the service working. Analytics ones are off unless you allow them. The cookie policy has the full details.
NamePurposeLifetime
joined_sessionNecessary. Keeps you signed in. It is HttpOnly, SameSite, and SecureUp to 30 days
google_signin_stateNecessary. Checks that the return from Google belongs to the browser that started the sign-in10 minutes
joined_modeNecessary. Remembers whether you use the job seeker or employer workspace1 year
joined_cookie_consentNecessary. Remembers your cookie choice180 days
Google analytics cookies, such as _gaAnalytics, and only if you allow it. Measure how Joined is usedSet by Google, usually up to two years
Browser storage on your device keeps your “mark applied automatically” preference, and the notes and reminders you add to an application.
We use Google Tag Manager and Google Analytics. We tell Google’s tags that analytics storage is denied until you choose Allow analytics in the cookie banner, and we keep advertising storage and ad personalization denied whatever you choose. To change your choice, clear this site’s cookies in your browser; the banner then asks again. Because analytics is off unless you allow it, Joined does not treat a Do Not Track signal differently.

How long we keep information

We keep personal information only as long as we need it for the purposes in this policy, and then we delete it or de-identify it.
InformationHow long we keep it
Account, profile, and résumésUntil you delete them or your account. We may ask whether you still want an account that has been inactive for a long time, and we may delete accounts that stay inactive for 24 months
Applications, interviews, saved jobs and searches, notes, and remindersWhile your account is open. Removed when you delete your account. Employers keep their own copies of applications they received
MessagesWhile your account is open. Removed from your account when you delete it. A message already delivered to another person, including by email, can remain with them
Google sign-in data (account ID, name, email, verified flag)While your account is open. We do not store Google passwords or access tokens
Billing recordsAs long as tax, accounting, and legal rules require, which can be up to seven years
Scout earnings, payout, and tax recordsAs long as tax, accounting, and legal rules require, which can be up to seven years
Sessions and one-time linksSessions up to 30 days. Email verification links 24 hours. Password reset links 1 hour. Google sign-in state 10 minutes
Security and server logsA short period, and longer where needed to investigate abuse or a security incident
BackupsCopies of deleted data can remain in our backups for a limited time, until older backups are replaced
Cookie choice180 days
De-identified or aggregated statisticsMay be kept, because they no longer identify you
When you delete your account we remove your personal information from our live systems right away in most cases, and in any event within 30 days. We keep only what the law requires, such as payment and tax records, and what we need to resolve a dispute or prevent abuse.

How we protect information

We use administrative, technical, and organizational measures to protect personal information, including:
  • Encryption in transit. Joined is served over HTTPS, so traffic between your browser and our servers is encrypted.
  • Passwords. Passwords are salted and hashed with Argon2id. We never store them in plain text. After repeated failed sign-in attempts, sign-in is paused for 15 minutes.
  • Sessions. The session cookie is HttpOnly, SameSite, and, in production, Secure. Sessions end after 30 days, and you can sign out at any time.
  • One-time links. Email verification links expire after 24 hours and password reset links after 1 hour. Google sign-in uses a state check and a code verifier, and the state expires after 10 minutes.
  • Request checks. Email sign-in and sign-up requests are accepted only from our own site.
  • Limited access. We limit access to personal information to staff who need it to run, support, and secure Joined. Our staff tools are protected by sign-in with a staff Google Workspace account, and their sessions last 12 hours.
  • Separation. Our services run in separate containers, and each service keeps its own configuration.
  • Monitoring and recovery. We monitor the service for errors and abuse, and we keep switches that let us turn off risky features quickly.
No system is perfectly secure. If you think your account or data is at risk, or you find a security problem, write to support@joinedhq.com. If a breach affects your personal information, we will notify you and the authorities as the law requires.

Your choices and rights

You are in control of your information. You can do many things yourself, in Settings and on your Profile page.
  • See and export your data. In Settings, under Privacy & data, choose Export everything to download your profile, résumés, applications, and messages as a JSON file. You can request one export per hour.
  • Correct your data. Edit your profile and résumés at any time. Write to us if you cannot fix something yourself.
  • Delete your account. In Settings, choose Delete account. This permanently removes your profile, applications, interviews, messages, and saved jobs. If you created a company page on Joined, deleting your account also deletes that company, its jobs, and the activity on those jobs. Export your data first, because deletion cannot be undone.
  • Choose who can find your profile. On your Profile page, switch Appear in recruiter search, Open to work, and Hide from current employer on or off. Companies you apply to always see your application.
  • Control alerts and email. Turn a job alert off, change how often it arrives, or delete the saved search, from your saved searches on the home page or in Settings under Job alerts. Write to us to stop any other optional email. We still send emails we need to send, such as security notices and receipts. Email is the notification channel Joined uses today.
  • Choose your cookies. Allow or decline analytics in the cookie banner.
  • Remove Google access. Review or remove Joined’s access in your Google Account.
  • Object, restrict, or withdraw consent. This includes objecting to ranking based on your activity. Where the law gives you these rights, write to us and we will act on your request. Withdrawing consent does not affect what we did before.
To use a right that Settings does not cover, write to support@joinedhq.com from the email address on your account. We may ask you to confirm your identity before we act. We aim to answer within 30 days, and we will tell you if we need more time. We do not charge a fee unless a request is clearly unfounded or excessive, and we will not treat you differently for using your rights. You can ask an authorized agent to make a request for you, and we may ask for proof of the authorization.
If we cannot resolve your concern, you can also contact your local data protection authority.

Employers and hiring features

Employer accounts collect information about the company and its team: the company’s name, website, logo, size, and locations; team members and their roles; the jobs it posts; its hiring settings; and its billing. Employers also see the applications they receive and the messages they exchange with candidates.
An employer decides why and how it uses the applicant information it receives, so it is responsible for that use. Our terms of use require employers to use applicant information only for hiring, to follow equal-opportunity and privacy laws, and not to sell it. Joined does not collect facial images or run face recognition.
If you are an applicant and you want an employer to delete the application it received, contact that employer. You can also write to us and we will help where we can.

Scout accounts

Scout lets people submit job leads and earn rewards when a qualifying outcome lands on a job they submitted. Scout accounts are covered by this policy, and Scout’s independent-contractor terms govern the work.
For Scout we collect your account details, the job leads you submit and their review status, your earnings, and what we need to pay you: your legal name, country, tax-form details, and payout method. Before a payout we run identity, tax, and sanctions checks. The screening provider receives only your user ID, country, and tax-form type. A payout provider handles the transfer.
The Scout browser extension reads job details from the page you choose to capture, and only when you start a capture. It does not read your browsing history or run in the background. It sends data only to Joined’s own Scoutwell website and Scout API, and it does not include advertising or unrelated analytics.
We keep Scout earnings, payout, and tax records for as long as tax, accounting, and legal rules require.

Where we process information

Joined is run from servers and by service providers that can be in the United States and in other countries. If you use Joined from outside the country where our servers are, your information is transferred to and processed there, and the laws there can differ from the laws where you live.
When we transfer personal information out of the European Economic Area, the United Kingdom, or Switzerland, we use a lawful transfer mechanism, such as the European Commission’s Standard Contractual Clauses, where one is required.

Region-specific information

European Economic Area, United Kingdom, and Switzerland

Joined is the controller of the personal information described in this policy. You have the right to access your personal information, to have it corrected or deleted, to restrict or object to certain processing, to receive it in a portable format, and to withdraw consent at any time. The legal bases for our processing are in How we use your information. You can write to us to use these rights, and you have the right to complain to your local data protection authority.

California

California law gives California residents the right to know what personal information we collect, to access and delete it, to correct it, and to limit the use of sensitive personal information. Over the past 12 months we collected the categories below. We do not sell personal information and we do not share it for cross-context behavioral advertising.
CategoryExamplesWhy we collect itShared with
IdentifiersName, email address, IP address, account IDProvide and secure the serviceService providers; employers you apply to
Customer recordsPhone number and other profile details you give usProvide the serviceService providers; employers you apply to
Professional and education informationWork history, education, skills, résumés, target rolesProvide the service and rank jobsEmployers you apply to
Commercial informationPlan and subscription statusProvide paid features and keep recordsPayment processor
Internet and activity informationSearches, jobs viewed, saved, and applied to, device and browser detailsRank jobs, secure and improve the serviceService providers
InferencesFit and ranking signalsShow relevant jobsNot shared
Sensitive personal informationWork authorization or immigration status, if you provide itShow jobs that fit and send your applicationEmployers you apply to
We use sensitive personal information only to provide the features you ask for. California residents can use their rights through Settings or by writing to us, as described in Your choices and rights.

Other U.S. states

Residents of other states with privacy laws, such as Colorado, Connecticut, Oregon, Texas, Utah, and Virginia, can ask to access, correct, delete, and obtain a copy of their personal information, and to opt out of the sale or targeted advertising of it, which we do not do. If we decline your request, you can ask us to reconsider by writing to us with the subject line “Appeal.”

Everywhere else

Other countries give residents similar rights. Write to us and we will honor them where the law applies to you.

Children’s privacy

Joined is not for children. You must be at least 16 years old to use Joined, or older if the law where you live sets a higher age to work, to enter into a contract, or to consent to the processing of your data. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, write to support@joinedhq.com and we will delete it.

Changes to this policy

We may update this policy as Joined changes or as the law changes. When we make a material change, we will update the effective date at the top, and we will tell you in the product or by email before the change takes effect where the law requires it. The latest version is always at /privacy.

Contact us

Questions, requests, and concerns about privacy are welcome at support@joinedhq.com. Please say whether you use Joined or Scout, and write from the email address on your account so we can find it.