Privacy policy

• Your posting and application form. Sent to our AI provider to run the check and held in memory for up to an hour so you can apply fixes. If you give a link, our server opens that page once to read the posting, and holds it the same way. A careers page audit, including the free sample, reads each posting from your public job board or careers page and handles it the same way. We don't save them, unless you turn on the archive or tick "Share this posting" when reporting a problem.
• Searches. We search the web for the employer's name and location to estimate its size (results kept 30 days), and, for pay suggestions, the job title and location (kept 7 days).
• Cookie and IP address. Used to enforce the weekly free check and free sample audit, and stop abuse. We store only keyed hashes of them, not the values, and delete them after about 8 days.
• Usage records and feedback. What each check did, how long it took, plus any rating, comment or survey answer you give. Linked to a hashed cookie, never to your posting.
• Your account, if you sign up or subscribe. Email, name, password (hashed) and sign-in codes (expire after 10 minutes), your check history (date, job title and result) and any reports you save to it. On a paid plan, also your company profiles, client workspaces, confirmed pay ranges and careers page audits (the page's address and each posting's title, place, link and result). Kept until you delete your account. A free account is then deleted entirely; a paid account's billing records stay, as described under Billing.
• Reports we send employers. We may check the open Ontario postings on an employer's public job board, and their application forms where the board shows them, and save the result on checkon.ca as a report: the company's name, the board's address, each posting's title, place, link and result, and short quotes from the postings. It opens from a private link in our email, without signing in. We count how many times it's opened and note when it was first opened, but not who opened it, and keep any answers given on it. A report nobody saves to an account is deleted 90 days after we make it; a saved one is kept until that account is deleted.
• Archive, if you turn it on. On a paid plan, you can turn on the archive for a company profile or client. We then save each posting you apply fixes to (or the edited version you save), with its date and job title, and any application form text and documents you add. Each one is deleted 3 years after the takedown date you enter, and kept until you enter one. You can delete postings at any time, and deleting a workspace or your account deletes its archive. If you cancel, you can still view and download it.
• Billing. Stripe takes your card; we never see it. We keep your Stripe IDs, plan, status, billing dates and the checks counted against your plan, for as long as tax law requires (generally six years).
• Contact form. Your name, email, company and message, saved and emailed to info@checkon.ca so we can reply.
• Browser extension. Reads the posting on the current tab (your selection, the job field or the page text) only when you click the CheckON icon or "Check with CheckON", and the application form's questions only when you click "Read form". It writes text back only when you apply a fix, and doesn't track your browsing.
• Visits and logs. Umami counts page visits without cookies. Google Cloud keeps standard server logs, such as IP address and the page requested.

Usage records, feedback, shared postings and contact messages are kept while we need them to run and improve CheckON. Ask and we'll delete them sooner.

We sometimes email a business about its public job postings, with a report as described above. We use only an email address the business publishes, such as a careers or hiring address, and the name and job title of the person who handles hiring when those are published. We keep those details, where we found them and what we sent, so we never email the same business twice. They stay on our own systems, never on the website or in the report.

Every email says who we are and how to stop. Reply "no thanks", or email info@checkon.ca, and we won't contact you again. Ask, and we'll delete what we kept about you, except a note not to contact you.

• free_check_id: a random ID for the weekly free check, kept for one year. Blocking it doesn't stop the checker.
• A sign-in token, in your browser or the extension, until you log out or it expires after 8 days.
• Your light or dark theme choice, never sent to us.

No advertising or cross-site tracking cookies.

We don't sell personal information or share it for advertising. Our service providers are:

• Anthropic (AI): postings and search terms, and the public web pages we read when preparing an email to an employer.
• Google Cloud (hosting and database, Toronto region): everything we store.
• Google Workspace (email): contact messages, and the emails we send employers.
• Resend (email delivery): the emails we send, such as sign-in codes and password-reset links to your address, and contact-form messages to our inbox.
• Stripe (payments): checkout details and extra-check counts.
• Umami Cloud (visit counts): page visits and a few actions.
• Langfuse (monitoring): for each check, which AI model ran, how long it took, what it cost and the result per rule. Never your posting, the AI's answers or anything that identifies you.

Anthropic, Langfuse and Resend are in the United States, and other providers may process data outside Canada, where it's subject to local laws.

Connections are encrypted, data is stored encrypted in Canada, cookie IDs and IP addresses are hashed, and signing in takes your password plus an emailed code. A report's link is a long random address that can't be guessed, but anyone it's forwarded to can open it. Only CheckON's administrators can see feedback, contact messages and usage records.

You can ask to see, correct or delete your information, or withdraw consent, by emailing info@checkon.ca. We reply within 30 days. You can delete your account yourself under Settings: a free account anytime, a paid one once its plan is cancelled. To have a report deleted, email us; see our terms of service. If you're not satisfied, you can complain to the Office of the Privacy Commissioner of Canada.

CheckON is responsible for the personal information it handles. Questions go to info@checkon.ca. When our practices change, we'll update this page and its date.