Privacy Policy

Japan Job Scan (“we”, “us”, “our”) operates the website japanjobscan.com and its related services. We are the data controller for the personal data described in this policy.

Contact: quinn.borders@gmail.com

We collect the following categories of personal data:

• Account data — email address and password (hashed) when you create an account.
• Usage data — pages visited, searches performed, jobs clicked, filters applied, and other interactions with the site. Collected automatically via PostHog analytics.
• Payment data — billing details (card number, billing address) submitted at checkout. This data is collected and stored by Stripe directly; we never see or store raw card numbers.
• Newsletter data — email address if you subscribe to our newsletter via Beehiiv.
• Device and technical data — IP address, browser type, operating system, and referring URL, collected automatically when you visit the site.

We do not collect sensitive personal data (e.g. health, racial or ethnic origin, or financial account numbers).

We use your personal data for the following purposes:

• To provide and maintain your account and subscription.
• To send job alert emails when you have configured them.
• To process payments and manage your subscription via Stripe.
• To send our newsletter if you have subscribed (you can unsubscribe at any time).
• To improve the product — understanding which features are used, where users encounter friction, and how traffic arrives.
• To comply with legal obligations.

We do not sell your personal data to third parties. We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

If you are located in the European Economic Area, our legal bases for processing your data are:

• Contract performance — processing necessary to provide you with the service you signed up for (account management, job alerts, subscription).
• Legitimate interests — analytics and product improvement, where our interest in improving the service is not overridden by your rights.
• Consent — newsletter communications, which you can withdraw at any time.
• Legal obligation — where we are required to process data to comply with applicable law.

We share data with the following third-party processors as necessary to operate the service:

• Supabase — database and authentication infrastructure. Your account data and usage data are stored in Supabase. Supabase Privacy Policy
• Stripe — payment processing. Stripe handles all payment data and is PCI-DSS certified. We receive only a subscription status token, never raw card details. Stripe Privacy Policy
• PostHog — product analytics. Usage events, page views, and click data are sent to PostHog. Data is anonymised where possible. PostHog Privacy Policy
• Beehiiv — newsletter platform. If you subscribe to our newsletter, your email address is stored with Beehiiv. Beehiiv Privacy Policy
• Vercel — hosting and edge infrastructure. Your IP address and request metadata pass through Vercel's network. Vercel Privacy Policy

All processors are contractually bound to handle your data only as instructed and in accordance with applicable data protection law.

We use cookies and similar technologies to keep you logged in and to operate our analytics (PostHog). Specifically:

• Authentication cookies — strictly necessary to maintain your login session. These cannot be disabled without breaking the service.
• Analytics cookies — used by PostHog to track how you use the site so we can improve it. These do not identify you by name.

We do not use advertising or cross-site tracking cookies. We do not serve ads or use your data for ad targeting.

We retain your account data for as long as your account is active. If you delete your account, your personal data is removed within 30 days, except where we are required to retain it for legal or financial compliance purposes (e.g. payment records, which Stripe retains per their legal obligations).

Analytics data is retained in PostHog for 12 months before automatic deletion.

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — ask us to delete your data (“right to be forgotten”).
• Restriction — ask us to limit how we process your data.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — unsubscribe from marketing at any time using the link in any email we send.

To exercise any of these rights, email us at quinn.borders@gmail.com. We will respond within 30 days. If you are in the EU and believe we have not handled your request appropriately, you have the right to lodge a complaint with your local supervisory authority.

Our processors (Supabase, Stripe, PostHog, Vercel) may store or process data in the United States or other countries outside your own. Where data is transferred outside the EEA, we rely on standard contractual clauses or equivalent safeguards approved by the European Commission.

Japan Job Scan is not directed at individuals under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

We may update this policy from time to time. When we do, we will update the effective date at the top of this page. Material changes will be communicated via email to registered users.

For any privacy-related questions or requests, contact us at: quinn.borders@gmail.com