Privacy Policy
This policy explains what personal data Landed holds, why, who helps us process it, how long we keep it, and how you can see, correct or delete it. It covers two groups of people: people who use Landed, and people whose public job posts appear in Landed.
1. Who is responsible
Landed is operated by its founder, based in Tunisia, who is the controller of the data described here. For any privacy question or request, write to the support chat on this site.
2. If you use Landed: what we hold
| Data | Why | Legal basis |
|---|---|---|
| Account: email, username, password (stored only as a one-way hash), Google account id if you sign in with Google, the date you accepted these terms | To run your account and sign you in | Contract |
| Your applicant profile and answers to the start questions: name, job title, short description, sign-off, city, level, goals | To fill in your emails and suggest searches | Contract |
| Your CV files | To attach them to the applications you send | Contract |
| Your Gmail address and Google app password, encrypted | To send your campaigns from your own account | Contract |
| Your contacts, groups, messages and campaigns, and a log of each email sent | To send your campaigns and show their progress | Contract |
| Discovery searches: keywords, sources and dates you chose | To run the search and count your plan's allowance | Contract |
| Plan and billing status: plan, billing cycle, renewal date, and Paddle's customer and subscription ids. Never your card number | To give you the plan you pay for | Contract, and legal obligation for accounting records |
| Support conversations in the chat | To answer you | Legitimate interest in helping you |
| Technical logs: IP address, pages requested, errors | To keep the service secure and fix problems | Legitimate interest in security |
We do not sell your data, show advertising, or use your content to train AI models.
3. Email tracking
On plans that include it, each email a campaign sends carries a small image unique to that email. When the recipient's mail app loads it, Landed records the time and a count of opens, and nothing else: no IP address, device or location. Your own views of your sent mail are not counted. When you send from Landed, you are responsible for telling recipients about it where the law requires.
4. If your public job post appears in Landed
Landed helps job seekers apply to posts that invite applications by email. If you published such a post publicly on LinkedIn, Facebook, X, Hacker News or a similar platform, Landed may hold:
- your name, headline and public profile link as shown on the post;
- the company named in the post;
- the post's public text and link, and the email address you published in it.
Where it comes from. Public posts found through search engines and public pages, read without signing in anywhere, or imported by a job seeker from a file. Why. So job seekers can send you the application your post asked for. Our legal basis is legitimate interest: yours in receiving applications and theirs in applying. What is public. The job board shows the post's title, company and an excerpt. It never shows your email address or phone number.
Your choice. You can ask us at the support chat on this site to remove your post and your address. We then remove them from the job board and from the Landed accounts that hold them. If a job seeker contacts you through Landed, you can also ask them directly to stop; our terms oblige them to.
5. Who else processes the data
| Provider | What for | Where |
|---|---|---|
| Amazon Web Services | Servers, database and nightly backups | Stockholm, Sweden (European Union) |
| Sending your emails through your own Gmail account; "Continue with Google" sign-in; web fonts | Worldwide, including the US | |
| Paddle | Payments, invoices, taxes and refunds, as the reseller and merchant of record, under its own privacy policy | UK, EU and US |
| Resend | Account emails: verification, sign-in links, password resets | US |
| tawk.to | The support chat. When you are signed in it receives your username and email so we know who is asking | US and EU |
| Cloudflare | Turnstile, the check that a sign-up or sign-in form is sent by a person. It sees your IP address and signals from your browser, not your answers | Worldwide, including the US |
| Serper | Web search for discovery. It receives your search keywords, never your personal data | US |
| jsDelivr and cdnjs | Delivering page styles and scripts to your browser, which shares your IP address with them | Worldwide |
Where data leaves the European Union or Tunisia, we rely on these providers' data processing terms and safeguards such as the European Commission's standard contractual clauses. The operator of Landed administers the service from Tunisia.
6. Cookies
Landed sets a session cookie to keep you signed in and a security token that protects forms. Both are necessary for the service to work. The support chat stores its own cookies and browser storage to keep a conversation going. Landed uses no advertising or analytics cookies.
7. How long we keep it
- Your account data: until you delete your account. Deleting it removes your account, CVs, contacts, campaigns and settings from the live database at once.
- Backups: nightly database copies are kept for up to 30 days, then deleted, so deleted data disappears from them within that time.
- Billing records: as long as tax and accounting law requires, detached from your account once it is deleted.
- Technical logs: a few weeks.
- Job board posts: they leave the board when they are no longer recent.
8. Your rights
You can ask to see the data we hold about you, correct it, delete it, receive a copy in a portable format, restrict or object to its processing, and withdraw any consent you gave. Most of this is in the app: correct your details in Settings, and delete everything from Profile, Delete my account. For anything else, write to the support chat on this site and we answer within 30 days. You may also complain to a data protection authority: in Tunisia the Instance Nationale de Protection des Données Personnelles (INPDP), in the European Union the authority of the country where you live.
9. Security
All traffic uses HTTPS. Passwords are stored as one-way hashes, Google app passwords are encrypted, backups sit in a private storage bucket, and access to the servers is limited to the operator.
10. Children
Landed is not for anyone under 18, and we do not knowingly hold data about children.
11. Changes
If we change this policy in a way that matters, we tell you by email or in the app before it takes effect.