Privacy policy

Before 8am ("we", "us", "our") operates a marketplace for full-time, contract, freelance, consulting, interim, and fractional opportunities (the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using the Service you agree to this policy.

1. Information we collect

• Account data: name, email, password hash, and profile details you provide.
• Activity data: opportunities you view, save, click, or apply to; searches you run; alerts you configure.
• Employer submissions: company information, job details, and contact information submitted for listings.
• Billing data: subscription status and transaction identifiers. Card details are processed by Stripe — we do not store them.
• Technical data: IP address, device/browser info, and hashed identifiers used to enforce fair-use limits and prevent abuse.
• Cookies: essential cookies for authentication and session state, plus limited analytics cookies. See "Cookies" below.

2. How we use information

• Operate, secure, and improve the Service.
• Personalize search results and deliver alert digests you configure.
• Process subscriptions and employer listing payments.
• Detect fraud, spam, and abuse, and enforce our Terms.
• Send transactional emails (auth, receipts, alerts). We do not send marketing emails without consent.

3. Legal bases (EEA/UK)

Where GDPR/UK GDPR applies, we rely on: (a) performance of a contract to provide the Service; (b) legitimate interests to secure and improve the Service; (c) consent for optional analytics or marketing; and (d) compliance with legal obligations.

4. Sharing

We share data with service providers acting on our behalf: Supabase (database & auth), Stripe (payments), Resend/our email provider (transactional email), and hosting/CDN providers. We do not sell personal information. We may disclose information to comply with law or protect rights, safety, and security.

5. External links and employers

Applying to an opportunity takes you to the original employer or authorized source. Their privacy practices govern once you leave Before 8am. We are not the employer and do not control third-party sites.

6. Cookies

We use strictly necessary cookies for sign-in and session management, and limited first-party cookies for usage analytics and abuse prevention. You can control cookies through your browser settings; disabling essential cookies may break sign-in.

7. Data retention

We keep account data while your account is active and for a reasonable period afterward to comply with legal, accounting, and dispute-resolution needs. Usage events used for fair-use limits are retained for up to 90 days. Billing records are retained as required by tax law.

8. Your rights

Depending on your location, you may have the right to access, correct, delete, port, or restrict processing of your personal information, and to object to processing or withdraw consent. California residents have rights under the CCPA/CPRA including the right to know, delete, correct, and opt out of "sharing" (we do not sell personal information). Submit requests to privacy@before8am.com; we will verify and respond within the timelines required by law.

9. Children's privacy

The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us data, contact us and we will delete it.

10. International transfers

We may process data in the United States and other jurisdictions. Where required, we rely on Standard Contractual Clauses or equivalent safeguards.

11. Security

We use industry-standard measures including TLS in transit, row-level security in our database, and least-privilege access. No system is perfectly secure; you use the Service at your own risk.

12. Changes

We may update this policy. Material changes will be announced in-app or by email. Continued use after the effective date constitutes acceptance.

13. Contact

Privacy questions: privacy@before8am.com.