Privacy Policy

Pillo is a hiring platform. Job seekers use it to find work and apply for it. Employers use it to advertise roles and manage the people who apply. This policy covers the Pillo website, the Pillo mobile app, and the public careers pages we host for employers.

If you have a question about anything here, write to support@joinpillo.com.

When you create an account we collect your name, email address, password, and where you tell us, your phone number and country. Your password is stored only as a bcrypt hash; we never hold the password itself and cannot read it.

If you are a job seeker, we collect what you add to your profile and what you send with an application: your work history, the documents you upload such as a CV, and any message you write to an employer.

If you are an employer, we collect your company name, domain, website, industry, size, address, and the details of the roles you advertise.

We record activity needed to run the service: when you signed in, the pages of the admin panel an administrator opened, and an audit trail of changes made to companies, jobs and applications.

We do not collect your location in the background, we do not track you across other apps or websites, and we do not buy personal information about you from data brokers.

Payments are taken by Stripe on Stripe’s own hosted checkout page. Your card number never reaches Pillo’s servers and we could not store it if we wanted to.

What we keep is what is needed to show you which card was used: the card brand, the last four digits, and the expiry month and year. Nothing more.

Only employers pay. Job seekers are never charged to apply for a role, and we will never ask a candidate for card or bank details.

To run the service you asked for: to show your application to the employer you applied to, to show an employer the candidates for their role, and to publish a job advert you paid for.

To keep accounts secure: to verify your email address with a six digit code, to detect and slow down repeated failed sign in attempts, and to keep a record of administrative actions.

To send you service messages: an email confirming a code, a receipt for a payment, and a notification when your application moves forward. We do not sell your information, and we do not use it to build advertising profiles.

The employer you apply to. When you apply for a role, that employer sees your name, your contact details, your profile and the documents you attached. That is the point of applying, and it cannot be undone once the application is sent.

Our infrastructure providers, who process data on our instructions and nothing else: Vercel hosts the applications, Supabase hosts the database, Cloudinary stores images, Vercel Blob stores documents, Stripe processes payments, and Resend delivers email.

We share information with law enforcement only where the law requires it. We do not sell personal information to anyone.

Our providers operate in the United States and the European Union, so your information is stored and processed there, including where you use Pillo from elsewhere.

Your account details for as long as your account exists.

Applications for as long as the employer keeps them, because an employer needs a record of who applied and a candidate needs a record of where they applied. Closing a job posting does not erase the applications made to it.

When you delete your account we remove your profile, your saved jobs and your uploaded documents. We keep the minimum record of completed orders that tax and accounting law requires us to keep.

You can see and correct your own information from your profile at any time.

You can delete your account from the app, under Account, or by writing to us. Deletion is permanent.

You can ask us for a copy of what we hold about you, ask us to correct it, or object to how we use it. Write to us and we will answer within thirty days.

Pillo is for people old enough to work. It is not directed at children and we do not knowingly collect information from anyone under sixteen. If you believe a child has given us information, tell us and we will remove it.

If we change how we handle your information we will update this page and change the date at the top. Where the change is significant we will tell you in the app or by email rather than relying on you to notice.