Privacy Policy

In the past twelve (12) months we may have collected the following categories of personal information from or about you:

1. Identifiers—Name, email address, phone number, ZIP code, IP address, and a unique account identifier we generate.
2. Commercial information—Jobs you have viewed, applied to, or saved; offers you have clicked.
3. Internet or other electronic network activity—Browsing history on the Site, search queries, referring URLs, and cookie or device identifiers (only when you grant analytics consent).
4. Geolocation data—Approximate location derived from your IP address (city or region level only) and any ZIP code you provide.
5. Professional or employment information—Desired job type, salary range, work preference, education level, and interests you submit through our forms.
6. Inferences—Categories or interests we derive from the above to suggest relevant jobs or content.

We do not knowingly collect Social Security numbers, government-issued identification numbers, financial account numbers, biometric data, precise geolocation, or information from anyone under the age of sixteen (16).

1. Directly from you—When you complete a form, click an opt-in link, or update your preferences.
2. Automatically—Through cookies, analytics tools, and server logs as you interact with the Site.
3. From service providers—Our job-feed partner Appcast supplies the job listings; we do not collect your personal data through them.

We use the information we collect to:

• Operate the Site and match you to relevant job opportunities;
• Send you job alerts, career resources, and other communications you have opted in to;
• Personalize the content and offers you see, including advertising-supported listings;
• Measure and improve performance, debug, and prevent fraud or abuse; and
• Comply with legal obligations and enforce our Terms of Use.

The CCPA defines “sale” and “sharing” broadly to include exchanges of personal information for monetary or other valuable consideration, and disclosures for cross-context behavioral advertising. We disclose information to the following categories of third parties:

1. Analytics providers (Google Analytics)—Page views and engagement events. By default we use Google Consent Mode in cookieless mode, so no persistent identifier is sent until you explicitly opt in. When you opt in, this disclosure may constitute 'sharing' under the CCPA.
2. Affiliate networks (e.g., Impact, FlexOffers, MaxBounty)—When you click an affiliate offer, we may pass an account identifier to track conversion attribution. This constitutes a 'sale' or 'sharing' under the CCPA. You may opt out via the preferences page.
3. Education partners—Only when you explicitly opt in. We share your contact information so accredited training programs can reach out about scholarships and tuition assistance. This is a 'sale' under the CCPA.
4. Email service provider (Amazon Simple Email Service)—For delivering the emails to which you have subscribed. Acts as our service provider; not a sale.
5. Hosting and infrastructure (AWS, Vercel)—Process data on our behalf to operate the Site. Service providers; not a sale.
6. Job listings partner (Appcast)—When you click “Apply” on a job listing, you are redirected to Appcast and then to the employer's application page. We do not pass your personal information to them; Appcast collects its own data through the redirect under its privacy policy. They act as our service provider for click attribution; not a sale.
7. Lead buyers—Only when you have opted in to education-partner outreach and have not exercised your right to opt out of sale.
8. Legal authorities—When required by law, subpoena, or to protect our rights or others' safety. Not a sale.

We do not sell or share the personal information of consumers we know to be under sixteen (16) years of age.

Depending on your state of residence, you may have the following rights:

1. Right to know—What personal information we have collected about you, the sources, the purposes, and the categories of third parties with whom we have shared it.
2. Right to access—A copy of the specific pieces of personal information we hold about you.
3. Right to delete—Request that we delete the personal information we have collected from you, subject to legal exceptions.
4. Right to correct—Request that we correct inaccurate personal information.
5. Right to opt out of the sale or sharing—Of your personal information for cross-context behavioral advertising or any other valuable consideration.
6. Right to limit the use of sensitive personal information—We do not collect sensitive personal information as defined under the CCPA.
7. Right to non-discrimination—We will not deny you services, charge you different prices, or provide different quality because you exercised any of these rights.

How to exercise your rights

All of these rights can be exercised at our preferences page. We verify your identity by sending a one-time link to the email address on file before showing or modifying your data.

You may also email us at info@vastpathway.com. We will respond within forty-five (45) days as required by the CCPA, with one (1) forty-five (45)-day extension if reasonably necessary. There is no charge to exercise these rights, and you may use an authorized agent.

We honor the Global Privacy Control browser signal as a valid universal opt-out of sale and sharing. When your browser sends the Sec-GPC: 1 header, we automatically apply the “Do Not Sell or Share My Personal Information” opt-out without requiring you to take any additional action.

We use cookies and similar technologies to keep the Site functional and to measure performance. By default, our analytics run in cookieless mode (Google Consent Mode v2), so no persistent tracking cookie is set unless you explicitly opt in via the preferences page. Functional cookies (such as the session cookie that remembers your preferences) are always required for the Site to operate.

You may clear cookies via your browser settings at any time. The Site will continue to function — you will simply appear as a new visitor on your next session.

We send job alerts and related emails only to addresses that have explicitly subscribed. Every email contains a one-click unsubscribe link. You may also manage subscriptions at our preferences page.

We do not currently send SMS messages. If we add SMS in the future, we will request separate consent at the time of opt-in.

• Active leads: retained for as long as you remain subscribed plus thirty (30) days after you unsubscribe.
• Deleted accounts: fully removed from our active database; only a hashed record is retained on a suppression list to prevent silent re-creation if the same email address is later submitted.
• Audit logs of consent events: retained for up to twenty-four (24) months to satisfy CCPA recordkeeping obligations.
• Job listings and aggregated analytics:retained indefinitely; these contain no personal information.

We use industry-standard administrative, technical, and physical safeguards including TLS encryption in transit, encryption at rest for our databases and backups, role-based access controls, and regular security reviews. No method of transmission or storage is perfectly secure; we cannot guarantee absolute security but we work continuously to improve.

The Site is not directed to children under sixteen (16), and we do not knowingly collect personal information from anyone under sixteen (16). If you believe we have collected information from a child, please contact us so we may delete it.

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this document reflects the most recent change. For material changes affecting your rights, we will notify you via email or a prominent notice on the Site.

For questions about this Privacy Policy, requests for information, or to exercise your rights, please email info@vastpathway.com or visit our contact page.