@extends('layouts.app')

@section('title', 'Privacy Policy | healthcareers.app')
@section('description', 'How healthcareers.app collects, uses and protects your information when you post a job, reply to one, get job alerts or advertise.')

@section('content')
    <article class="prose">
        <h1>Privacy policy</h1>
        <p class="muted">Last updated {{ \Illuminate\Support\Carbon::parse('2026-09-26')->format('F j, Y') }}</p>

        <p>healthcareers.app is operated by {{ config('healthcareers.company.legal_name') }} ("we", "us"). This policy explains what we collect when you use the site, why, and the choices you have.</p>

        <h2>What we collect</h2>
        <ul>
            <li><strong>Your email address</strong>, when you post a job, reply to a post, set up job alerts, advertise, or contact us. We use it to send sign-in links, forward messages and send the emails you asked for.</li>
            <li><strong>Your name and job preferences</strong>, if you are a candidate: up to five job titles and the places you would work.</li>
            <li><strong>Job posts and ads</strong> you publish, including any photos or logos you upload.</li>
            <li><strong>Messages and attachments</strong> sent through our private reply relay, such as a resume attached to a reply.</li>
            <li><strong>Payment records.</strong> Card payments are handled by Stripe. We never see or store your full card number.</li>
            <li><strong>Reports</strong> you send about a post, and the email address you give with one, if any.</li>
            <li><strong>Basic technical data</strong>, such as IP address and browser type, used to prevent spam and abuse and to keep the site secure. We count views of job posts and sponsored placements using a daily one-way hash of your IP address and browser, without cookies and without identifying you.</li>
            <li><strong>Site statistics</strong>, counted on our own server without cookies: which pages were shown, the website or email that linked to them, the kind of device and browser, the hour, and an approximate place (country, state and city) looked up from your IP address in a database kept on our server. The IP address itself is not stored with these statistics. If your browser sends Global Privacy Control, we keep no city and no visitor hash for your visits.</li>
        </ul>

        <h2>How the reply relay protects you</h2>
        <p>Job posts never show an email address. Candidates and employers write to private relay addresses, and we forward the messages. Neither side sees the other's real address unless they choose to share it.</p>

        <h2>How we use your information</h2>
        <ul>
            <li>To run the site: publish posts, forward messages, send sign-in links and job alerts.</li>
            <li>To keep it safe: detect spam, scams and prohibited content, including automated checks on posts, photos and messages. The text of new job posts (which is public anyway) is checked by an AI model from Anthropic for signs of a scam; a person reviews anything it flags. Sponsored links are checked with Google Safe Browsing.</li>
            <li>To stop abuse: we may block an email address, domain, internet address or payment card (identified by Stripe's card fingerprint, never the card number) that has been used for scams.</li>
            <li>To process payments and keep required financial records.</li>
            <li>To show employers and advertisers how their posts and ads are doing, as totals only: never who viewed them. Employers never see a place with fewer than 5 viewers. We email them a weekly summary, which they can turn off.</li>
            <li>To send reminders about your posts or ads. You can unsubscribe from reminder and offer emails at any time; account and message emails continue while you use the site.</li>
        </ul>
        <p>We do not sell your personal information, and we do not use advertising cookies. We use Google Analytics to see how the site is used (see Cookies below).</p>

        <h2>Who we share it with</h2>
        <p>Only the services needed to run the site, under agreements that protect your data: Stripe (payments), Postmark (email delivery), Cloudflare (security checks on forms), DigitalOcean (hosting), Anthropic (scam checks on the text of job posts; not used to train its models) and Google (Safe Browsing checks on advertisers' links, and Google Analytics as described under Cookies). Video players from YouTube, Vimeo, Wistia or Loom load only if you press play on a video, and those services then apply their own policies. Employers see the messages and attachments that candidates send them, and candidates see employers' replies.</p>

        <h2>How long we keep it</h2>
        <ul>
            <li>Messages and attachments: deleted 180 days after the related post closes.</li>
            <li>Sign-in link records: deleted 7 days after they expire or are used.</li>
            <li>Job posts: shown with an "ended" notice for 90 days after they close, then removed from the site; the records stay for the poster's history until the account is deleted.</li>
            <li>Reports about posts, and moderation records: kept while the post exists, to protect other users.</li>
            <li>Sponsored campaign statistics: kept with the campaign for the advertiser's records.</li>
            <li>Server logs: deleted after 14 days.</li>
            <li>Site statistics: each counted visit is deleted after 90 days; only daily totals are kept after that.</li>
            <li>Candidate job alert profiles: until you delete your account.</li>
            <li>Payment records: as long as tax law requires.</li>
        </ul>

        <h2>Your rights</h2>
        <p>You can see, correct, export or delete your information. Signed in, open <a href="{{ route('profile') }}">My profile</a> to download everything we hold about you as a file, or to delete your account. Deleting it removes your job alerts, your messages and your sign-in; ended job posts stay on the site without your email, and payment records are kept as tax law requires. If you are in the European Economic Area or the United Kingdom, you also have rights under the GDPR and UK GDPR, including the right to object to processing and to complain to your data protection authority. To make a request, <a href="{{ route('contact') }}">contact us</a>.</p>

        <h2 id="cookies">Cookies</h2>
        <p>We use cookies to keep you signed in and to protect forms. These are needed for the site to work.</p>
        <p><strong>Google Analytics.</strong> We use Google Analytics 4 to count visits and see which pages are used, so we can improve the site. It sets cookies (names starting with <code>_ga</code>) and sends Google your IP address, device and pages visited; Google doesn't keep IP addresses in Analytics. We don't use Google's advertising features, and analytics data is not used to identify you. If you are in the European Economic Area, the United Kingdom or Switzerland, Analytics only sets cookies after you choose Accept. Everywhere else it is on unless you turn it off, and we treat your browser's Global Privacy Control signal as a "no". You can change your choice at any time with <a href="#" data-cookie-settings>Cookie settings</a> (also in the footer). Google's own policy: <a href="https://policies.google.com/privacy" rel="noopener">policies.google.com/privacy</a>.</p>
        <p>Video ads load their player only when you click play.</p>

        <h2>Mobile apps</h2>
        <p>If we offer a healthcareers.app mobile app, it uses the same account and this same policy. It collects nothing beyond what is described here: no contacts, location, camera or microphone access unless you choose to attach a file or photo, and no advertising identifiers. Push notifications, if you turn them on, use a device token we store only to send the notifications you asked for, and delete when you sign out or delete your account.</p>

        <h2>Children</h2>
        <p>healthcareers.app is for adults looking for or offering work. It is not directed at children under 16.</p>

        <h2>Changes and contact</h2>
        <p>If we change this policy, we will update the date above. Questions? <a href="{{ route('contact') }}">Contact us</a>.</p>
    </article>
@endsection