Privacy policy

Last updated: Aug 15, 2026

This page explains what personal information we collect, how we use it, and what rights you have. The platform is operated by Mediactive, a company based in Quebec. We comply with Quebec's Act respecting the protection of personal information in the private sector (Law 25).

What we collect

Candidates : email, first/last name, phone (optional), city (optional), résumé file (PDF, optional), and the content of your applications: cover letter and, where applicable, statement of qualification.
Employers : contact email, company name, website (optional), phone (optional), billing address (collected by Stripe at checkout, not stored on our servers).
Everyone : IP address, browser user-agent, timestamps — used for anti-fraud (rate limiting) and for the operations log.
Account holders : the IP address used when you created your account and the one used at your most recent sign-in, plus a count of how many times you have signed in. Kept as account records, separately from the security log above.

Why we collect it

To let employers contact candidates back after an application.
To send candidates job alerts. Two kinds: alerts you set up yourself under “My alerts”, and an automatic alert built from your profile — your city and the roles you are looking for — which is on by default and which you can turn off at any time from your profile or from the link in any alert email.
To process credit purchases (Stripe handles the actual card data — we never see or store it).
To defend the platform against brute-force and spam attacks.
To understand how the platform is actually used — how regularly accounts come back — and to spot fraudulent sign-ups.

Who is your information shared with?

With employers, when you apply. When you submit an application to a job offer, the information you provided — name, email address, phone number, résumé and, where applicable, cover letter and statement of qualification — is transmitted to the employer who published the offer, so they can assess your application and contact you.

This transmission is the very purpose of your application: without it, the employer could not respond to you.

Important. Once your information has been transmitted, the employer becomes responsible for it and processes it under their own responsibility, in accordance with their own practices and legal obligations. Mediactive has no control over how an employer uses the information received, nor over how long it is kept in their systems. To exercise your rights with an employer, you must contact them directly.

With technical service providers. Some information is processed by our service providers (hosting, payment, email delivery, audience measurement), listed in the "Third parties" section. They act solely on our instructions and do not use your information for their own purposes.

With authorities. We may disclose information when required by law, or to assert our rights.

Apart from these cases, we do not share your information with anyone.

Disclosure of information outside Québec

Some of our technical service providers are located outside Québec, notably in the United States. Your information may therefore be hosted or processed there.

Before engaging these providers, we assessed that the information entrusted to them receives adequate protection, considering its nature, the security measures in place and the contractual commitments made by these providers. We also limit the information disclosed to what is strictly necessary for the performance of their mandate.

If you subscribe to our newsletter, we collect your email address, whether you are an employer or a candidate, and proof of your consent: the opt-in wording shown to you, your IP address, your browser (user-agent), and the date and time of confirmation.

Legal basis: your express consent. Subscription is a two-step process (double opt-in): you sign up, then confirm by clicking the link we email you. Until you confirm, no newsletter is ever sent to you.
Purpose: to send you our newsletter — trends, news, and recruitment tips, aimed primarily at employers.
Withdrawal: you can unsubscribe at any time via the link at the bottom of every issue, or by contacting us. Your address is then removed from our mailings.
Retention: we keep your subscription until you unsubscribe. The proof of consent is kept only as long as needed to demonstrate compliance with the anti-spam law (CASL), then destroyed.

Third parties

Stripe (payment processing) — receives billing data when an employer buys a credit pack. Stripe's privacy policy.
Cloudflare (CDN and DDoS protection) — sees IP addresses and request headers in transit.
Resend (email delivery) — sends our emails (confirmations, candidate alerts, newsletter); receives the recipient's address and the message content. Resend's privacy policy.
Google (Google Analytics) — website audience measurement. Google's privacy policy.
Meta Platforms (Facebook pixel) — measures how our posts perform and shows our job offers on Facebook and Instagram. Receives nothing until you accept advertising cookies. Meta's privacy policy.
We do not sell your data. We feed no ad network anything from your account, your CV or your applications — the pixel only sees your browsing on this site, and only with your consent.

How long we keep it

Active accounts : as long as the account exists.
Job applications: 24 months after submission. After that, the free-text content is deleted — cover letter, message thread, employer notes and rejection reason. The application itself (date, position, status) is kept for the employer’s records.
Sign-up and last sign-in IP addresses, sign-in count : as long as the account exists. Both IP addresses are erased when the account is closed; only the bare count remains, which identifies no one.
Rate-limit attempt log : 30 days.
Stripe purchase records : 7 years (statutory accounting retention).

Your rights

You may exercise the following rights over your personal information at any time:

Access. Obtain the list of the information we hold about you and receive a copy of it.
Rectification. Have any inaccurate, incomplete or ambiguous information corrected.
Deletion. Request the deletion of your account and the information attached to it, subject to any legal retention obligations we may have.
Withdrawal of consent. Withdraw, at any time, the consent you gave to the collection or use of your information — for example by unsubscribing from our communications or declining audience-measurement or advertising cookies. Withdrawing consent has no retroactive effect on processing already carried out.
Portability. Receive, in a structured and commonly used technological format, the computerized information you provided to us, or ask that it be communicated to a third party.
Cessation of dissemination. Request that the dissemination of information concerning you cease, or that any hyperlink giving access to it be de-indexed, where that dissemination causes serious harm to your reputation or privacy.

To exercise any of these rights, write to the personal-information protection officer: jerome@mediactive.ca. We will respond within 30 days.

Cookies

We use three categories of cookies.

Strictly necessary cookies. A session cookie keeps you logged in to your account and ensures the site works properly. It is not used for any tracking purpose and cannot be disabled, as the site cannot function without it.

Audience-measurement cookies. We use Google Analytics to understand how the site is used (pages viewed, where visits come from, devices used) and to improve how it works. These cookies are only set after you consent, via the banner shown on your first visit. If you decline, no audience-measurement cookie is set and the site remains fully functional.

Advertising cookies. Meta (Facebook) pixel — lets us measure how our posts perform and show you our job offers on Facebook and Instagram. The information collected is sent to Meta Platforms and may be stored outside Québec. Nothing loads until you accept.

You can change your choice at any time by deleting the cookies from your browser, which will make the consent banner reappear. Declining a category takes nothing away from the site: it remains fully functional.

We never sell or rent your information, and we send Meta no contact list and nothing drawn from your account: the advertising cookie only covers your browsing on this site, and only if you accepted it.

Complaints

If you are dissatisfied with the handling of your request or with our personal-information practices, you can contact our personal-information protection officer, Jérôme Karmann, at jerome@mediactive.ca.

You may also file a complaint with the Commission d'accès à l'information du Québec:

Commission d'accès à l'information du Québec
Website: https://www.cai.gouv.qc.ca
Phone: 418 528-7741 / 1 888 528-7741