Privacy Policy

1. Who we are (data controller)

JobCoffin is a brand of ADHDWorks. We operate jobcoffin.com and sell digital career tools.

Data controller: ADHDWorks / JobCoffin
Email: [email protected]
Mailing address: 999 Metropolis Alley, Atlanta, GA 30309

2. Data we collect and why

a. Purchase data (email + checkout metadata)

When you buy a product, Stripe processes your payment and returns your email address, transaction ID, and product identifier. We use this to deliver your purchase via SendGrid. No payment card numbers are stored on our systems.

• Legal basis (GDPR Art. 6(1)(b)): Performance of a contract.
• CCPA categories: Identifiers (email); Commercial information (transaction record).

b. Analytics — Google Analytics 4 (consent-gated)

If you accept cookies, Google Analytics collects: pages visited, time on site, approximate location (country/region), device type, browser, and referring URL. This data is pseudonymous and does not directly identify you.

• Legal basis (GDPR Art. 6(1)(a)): Consent. You may withdraw consent at any time via the cookie banner on jobcoffin.com.
• CCPA category: Internet or electronic network activity.

c. Support messages

If you email [email protected], we retain your message and email address to respond and track resolution.

• Legal basis (GDPR Art. 6(1)(f)): Legitimate interest — responding to voluntary support requests you initiate.
• CCPA categories: Identifiers; Customer records.

3. Service providers (processors)

We share data with the following processors only to the extent needed to operate the service:

• Stripe — payment processing (stripe.com/privacy)
• SendGrid / Twilio — transactional email delivery (twilio.com/legal/隐私)
• Google Analytics (GA4) — site analytics, consent-gated (policies.google.com/privacy)
• DigitalOcean — website hosting and infrastructure (digitalocean.com/legal/privacy-policy)

Data transferred to these providers may be processed in the United States. Where required by GDPR, transfers are governed by Standard Contractual Clauses (SCCs) or equivalent adequacy mechanisms.

4. Retention

• Purchase records (email + transaction ID): 2 years from purchase date.
• Analytics data: Per Google Analytics GA4 default settings (14 months maximum).
• Support messages: 1 year from resolution.

5. Your rights

EEA, UK, and Switzerland (GDPR)

• Access: Request a copy of personal data we hold about you.
• Rectification: Request correction of inaccurate data.
• Erasure:Request deletion of your data (“right to be forgotten”).
• Restriction: Request that we limit processing in certain circumstances.
• Portability: Receive your data in a machine-readable format.
• Objection: Object to processing based on our legitimate interests.
• Withdraw consent: Revoke analytics consent via the cookie banner at any time, without affecting prior processing.

You may lodge a complaint with your national data protection authority. Find your EU authority at edpb.europa.eu.

California residents (CCPA / CPRA)

• Right to know: Request disclosure of categories and specific pieces of personal information we have collected.
• Right to delete: Request deletion of personal information we hold about you.
• Right to correct: Request correction of inaccurate personal information.
• Right to opt out of sale/sharing: We do not sell or share personal information for advertising. There is nothing to opt out of.
• Non-discrimination: Exercising your rights will not result in different pricing or reduced service.

Canada (PIPEDA)

You may request access to, or challenge the accuracy of, personal information we hold about you.

To exercise any right, email [email protected]. We will respond within 30 days (or the timeframe required by applicable law).

6. Cookies

We use cookies only with your consent. The only non-essential cookies are those set by Google Analytics (GA4). Essential cookies include session and checkout state managed by Stripe. You can accept or reject non-essential cookies via the banner shown on your first visit, and change your preference at any time by clearing your browser's local storage for jobcoffin.com.

7. Children

JobCoffin is not directed at children under 13 years of age. We do not knowingly collect personal data from children under 13. If you believe a child has submitted personal information to us, email [email protected] for immediate deletion.

8. Changes to this policy

We may update this policy to reflect changes in our practices or applicable law. For material changes, we will post a notice on “jobcoffin.com” at least 30 days before the effective date. The “last updated” date at the top of this page reflects the most recent revision.