Who can see your profile
New profiles are unlisted, and unlisted is closed rather than quiet. You do not appear in the directory, in on-site search, or in search engines — and a stranger who has your profile link gets a "not found" page. Sharing the URL does not work around it.
You can still browse, apply and message. Making the profile public is an explicit choice in your settings, and turning it back off stops new visitors seeing it.
One thing to understand about turning it off: people you have already contacted still know who you are. Applying to a job shows the employer your profile; withdrawing later does not unsend that. Visibility controls discovery, not memory.
Your password and email address
Forgot your password? Use "Forgot your password?" on the sign-in page and we email a link to the address you sign in with. The link works once and for an hour. Setting a new password signs you out on every device, so anyone who had your old password is signed out too. We give the same answer whether or not an account uses the address you typed, so the page cannot be used to find out who has an account.
Changing your password is under Workspace → Security, if you sign in with a password. It asks for your current one, and signs out every other device. If you only sign in with Google, Apple, Microsoft or GitHub, there is no password to change.
Where you are signed in is listed under Workspace → Security: each device by its browser and system, when it was last active, and which one you are using now. Sign out any you do not recognise, one at a time or all at once, and then change your password.
Security emails go to your account's address when it is signed in to from a combination of browser, system and network it has not used in the last 90 days, and when its password changes, two-factor authentication is turned off, a passkey is added or removed, or a way of signing in (such as Google) is added or removed. You cannot switch them off: they are how you hear about someone else in your account. If one describes something you did not do, open Workspace → Security straight away, sign out every device you do not recognise, remove any sign-in method or passkey you did not add, and change your password. If the email is about your password and you did not change it, use "Forgot your password?" on the sign-in page.
Changing your email address is under Workspace → Email, and asks you to sign in again if you have not just done so. We email a link to your current address first; its page asks you to confirm, and then we email a second link to the new address. Your address changes once you confirm that one too, which also signs you in. Opening a link changes nothing until you press its button, and each link works once and for an hour. Afterwards the old address gets one last email saying the account no longer uses it. If you did not ask for a change, ignore the first link and change your password.
Notifications
You get notified about things that happen to you — an application status moving, a new enquiry, a reply on a thread. Notifications appear in the app, and some also go to your email address.
Replies by email. When someone replies in an application or enquiry conversation you are part of, we email you, at most once per conversation every 15 minutes. The email says how many replies you have not read and links to the conversation; it never quotes them. If you read them in the app before it is due, it is not sent.
Choosing which emails you get is under Workspace → Email. Each kind of notification email — new applications, application updates, new enquiries, enquiry updates, replies in conversations and listing reminders — can be switched off there, or with the unsubscribe link at the bottom of the email itself. These emails always reach you, whatever you choose there:
- links to verify an email address, and password reset links;
- security alerts, such as a sign-in from a new device, a changed password or passkey, or two-factor authentication turned off;
- links to confirm a change of your email address, and a notice once it has changed;
- data export and account deletion links;
- our reasons when we hide your content or suspend your account;
- replies to a report or a message you send us;
- invitations to help manage a company;
- notice of changes to our policies, and a warning before we delete an inactive account.
We do not send marketing.
Your data
The full detail is in the Privacy Policy, linked in the footer. The short version:
- You can export everything. A machine-readable copy of your data, on request, from your account settings.
- You can delete your account. Deletion is real, not a hidden flag — the data goes, subject to the retention periods the Privacy Policy sets out for things like moderation records. If you are the only owner of a company, make another member its owner, or close it, first: the privacy page lists each such company with both options.
- You always keep one way to sign in. A password, a connected account such as Google, or a passkey each counts, so you can remove your password or a connected account while you have a passkey, and the last one stays. A passkey always asks for your device's PIN, fingerprint or face; one added before that rule counts once you have signed in with it. If you lose every way in, "Forgot password" on the sign-in page sends a link to your email address and lets you set a new password.
- We tell you before we act on inactivity. An account that has not been used in a long time gets a warning email well before anything is deleted.
If you lose your authenticator app
Two-factor authentication asks for a code from your authenticator app each time you sign in. If the phone is gone, there are three ways back in, quickest first:
- Sign in with a passkey, if you have one on any of your devices. A passkey does not ask for a code.
- Use a backup code — "Use a backup code instead" on the code screen. Each one works once.
- Restore the app from its backup. Most authenticator apps sync their codes to a new phone.
Once you are in, turn two-factor off and on again from Settings → Security, or generate new backup codes there, and keep them somewhere other than your phone.
If none of those works, write to us through the Contact link in the footer from the email address on your account. We will reply to that address, and ask for one detail only the account's owner would know — roughly when you joined, a company you belong to, or how you usually sign in. Once that checks out we turn two-factor off, and you sign in with your password or Google and set it up again. We never do this on the strength of a phone call, a different email address, or a request made for someone else.
Reporting content
Every job, company page and profile has a report link at the bottom of its page. Signed in, choose Report and pick a reason. A person on our team reviews every report, and hides the content if it breaks the law or our Terms of Service.
Illegal content needs no account. Signed out, choose Report illegal content; signed in, choose Report and the reason Illegal content. The form asks what the EU Digital Services Act asks a notice to contain: which law you believe the content breaks and why, and a statement that you believe in good faith that what you tell us is accurate and complete. Without an account, your name and email address are optional — give your email if you want to hear back, and leave both out if your notice is about child sexual abuse material. We delete them six months after our decision.
Hearing back. We email you when your report arrives, and again once we have decided: whether we hid the content, and that a person on our team made the call. Signed in, the emails go to your account's address; without an account, only to the address you gave, if you gave one. If you disagree with the decision, write to the address it gives within six months and tell us why, and a person will look at it again.
Our point of contact
For anything the forms do not cover, and for authorities of the EU Member States, the European
Commission and the European Board for Digital Services, our single point of contact is
legal@jobpuul.com. Write in English or Czech; a person reads every message. The same address
is on the Report illegal content page in the footer, and in section 1.5 of the Terms of
Service.
Getting help
If something here does not answer your question, use the Contact link in the footer. It reaches a person.