Privacy policy

JobLane is built by Rumbo Labs. We respect your privacy. This policy covers the data we collect, why we collect it, how long we keep it, and the choices you have. If anything is unclear, email [email protected].

JobLane is in pre-launch. The only personal data we are collecting today is the email address you give us when you join the waitlist, together with the consent you provide at the time of signup. This policy will be expanded before the product launches to cover CV uploads, account data, billing, and AI processing. We will email anyone on the waitlist before the expanded policy takes effect.

Rumbo Labs is the data controller for personal data collected via joblane.ai. Contact: [email protected].

• Email address, when you join the waitlist.
• The fact that you gave consent to receive launch-related email from JobLane, with a timestamp.
• An optional source field — typically the referring page that brought you to the site — so we can understand which channels send waitlist signups.
• Standard server logs for the request that submitted your email (IP address, request time, status code), retained for up to 30 days for abuse prevention and operational diagnostics. These logs are not joined to your email address in any analytics product.

We do not use analytics cookies or tracking pixels on the pre-launch site.

• To email you when JobLane opens for early access.
• To email you about JobLane product updates and the beta program — only because you ticked the consent box.
• To understand which channels are bringing people to the waitlist (aggregated, no profiling).

The legal basis is your consent, given at signup. You can withdraw it at any time.

Your email and consent record are stored in a Postgres database hosted by Neon in an EU region. The website itself is hosted by Hetzner Cloud in an EU region. We do not transfer waitlist data outside the EU.

Waitlist emails are kept until you ask us to delete them, or until 24 months after we email you about launch — whichever comes first. Standard server logs are deleted after 30 days.

Under EU GDPR, you have the right to:

• Access the personal data we hold about you.
• Correct it if it is wrong.
• Have it deleted.
• Receive it in a portable format.
• Object to or restrict its processing.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, email [email protected]. We will respond within 30 days.

The following service providers may process your personal data on our behalf in the pre-launch phase:

• Neon — EU Postgres hosting for the waitlist database (and, once the product launches, for user profiles).
• Hetzner Cloud — EU compute hosting for the website.
• Cloudflare — DNS, TLS, and WAF for the website. No personal data is cached.
• Cloudflare R2 (EU jurisdiction) — object storage for CV uploads. Uploads stay in the EU; auto-deleted after 30 days.
• GitHub — source-code and container registry. No user data is stored there.

We will update this list before we activate any new processor that handles waitlist data. The full subprocessor list for the launched product will be published before launch.

The pre-launch site does not set tracking or analytics cookies. The only cookies that may be set are strictly necessary cookies required by the hosting infrastructure (e.g. Cloudflare's security cookies). These do not require consent.

We will update this page if anything material changes. The "Last updated" date at the top reflects the most recent edit. Anyone on the waitlist will receive an email summarising any changes that affect their data before the changes take effect.

For privacy questions: [email protected]. For everything else: [email protected]. Or go back to the homepage.