Privacy Policy

1. Introduction

This Privacy Policy describes the policies and procedures of CME Jobs Inc. ("CME," "we," "us," or "our") regarding the collection, use, and disclosure of your personal information when you use the CME Jobs platform (the "Platform"), available at cmejobs.com, and informs you of your privacy rights and how the law protects you.

CME Jobs is a video-first employment marketplace connecting job seekers, employers, and Business Improvement Areas ("BIAs") across Canada. We are headquartered in Ontario, Canada and committed to protecting your privacy in compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA), Canada's Anti-Spam Legislation (CASL), Ontario's Working for Workers Act (Bill 190), the General Data Protection Regulation (GDPR) for users in the European Economic Area, and the California Consumer Privacy Act (CCPA) for California residents.

By using the Platform, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Definitions

• Account: A unique account created for you to access our Platform.
• Company: CME Jobs Inc., operating as CME Jobs, located in Ontario, Canada.
• Personal Data: Any information that relates to an identified or identifiable individual.
• Service Provider: Any person or company who processes data on our behalf.
• Usage Data: Data collected automatically from your use of the Platform.
• SmartMatch: Our proprietary algorithmic matching system that scores compatibility between job seekers and job postings.
• GeoAds: Location-based advertisements served through the Platform.
• BIA: Business Improvement Area, a designated commercial district administered by a local board.

3. Information We Collect

3.1 Personal Data You Provide

When using the Platform, we may ask you to provide certain personally identifiable information, including but not limited to:

• Account Information: First name, last name, email address, phone number, password, postal code, and country.
• Job Seeker Profiles: Resume/CV, work history, education, skills, certifications, language proficiency, work preferences (schedule, commute distance, salary expectations), volunteer experience, and professional achievements.
• Video Content: CME Clips, cover videos, video boost responses, and video reference submissions that you voluntarily record or upload through the Platform.
• Employer Profiles: Company name, industry, business description, office locations (including address and coordinates), hiring preferences, and company media.
• Application Data: Cover letters, screening question responses, interview availability, offer responses (including acceptance or decline with reasons), and withdrawal reasons.
• Reference Data: Information provided by individuals you designate as professional references, including written and video testimonials.
• BIA Data: Business listings, district boundaries, and business contact information submitted by BIA administrators.
• Referral Information: When you use our referral program, we collect the referral recipient's email address to send a one-time invitation on your behalf.

3.2 Usage Data (Collected Automatically)

We automatically collect certain information when you access the Platform, including:

• Device Information: Browser type, browser version, device type, and unique device identifiers for platform integrity and fraud prevention.
• Log Data: IP address, pages visited, time and date of visits, time spent on pages, and other diagnostic data.
• Platform Events: We log interactions such as application submissions, profile updates, feature usage, and engagement metrics to improve our services and generate anonymized analytics.

3.3 Location Data

With your permission, we collect and use precise geolocation data from your device to:

• Match you with nearby job opportunities
• Calculate commute distances for SmartMatch scoring
• Serve location-relevant GeoAds
• Provide local business directory results

You may enable or disable location services at any time through your device or browser settings. Disabling location services may reduce the accuracy of job matching and local features.

3.4 Camera and Media Access

With your explicit permission, the Platform may access your device's camera and photo/video library to enable CME Clip recording, video boost responses, and video reference submissions. This access is only activated when you initiate a recording or upload. We do not access your camera or media library in the background.

3.5 Payment Data

Payment information (credit card numbers, billing details) is collected and processed directly by our payment processor, Stripe, Inc. We do not store your full credit card numbers on our servers. We retain transaction records including subscription type, transaction amounts, dates, and billing status.

3.6 Cookies and Tracking Technologies

We use authentication tokens (JSON Web Tokens) stored in secure, httpOnly cookies to maintain your session. We do not use third-party advertising cookies or cross-site tracking pixels. We may use local storage for user preferences such as theme settings.

4. How We Use Your Information

We use your personal information for the following purposes:

• To provide and maintain the Platform, including account creation, authentication, and core employment marketplace functionality.
• To facilitate employment matching through our SmartMatch algorithm, which analyzes your skills, experience, preferences, and location to calculate compatibility scores with job postings (see Section 5).
• To process applications and facilitate the hiring pipeline between job seekers and employers, including interviews, offers, and hiring decisions.
• To communicate with you, including sending transactional notifications (application updates, interview reminders, offer notifications, security alerts), service announcements, and with your consent, promotional communications.
• To provide career coaching through SmartCoach, including personalized profile optimization suggestions, application feedback, and career guidance.
• To maintain trust and safety, including calculating trust and reputation scores, awarding badges, detecting fraudulent or abusive behavior, enforcing platform integrity policies, and applying penalties for policy violations.
• To process payments for subscriptions, credits, GeoAds, and other Platform purchases through our payment processor.
• To generate analytics including anonymized, aggregated reports about hiring trends, industry benchmarks, labour market conditions, and economic impact for municipalities and BIAs.
• To operate community features including the ballot and contest system, referral program, The Village founding members program, and Community Impact Engine (CIE) donation tracking.
• To comply with legal obligations, including maintaining hiring records as required by Ontario's Bill 190 (Working for Workers Act) and responding to lawful requests from government authorities.

5. SmartMatch Algorithm and Automated Decision-Making

CME uses a proprietary algorithmic matching system called SmartMatch that scores the compatibility between job seekers and job postings on a 100-point scale across up to 10 dimensions, including: skills match, location proximity, experience level, schedule compatibility, salary alignment, industry relevance, language fit, cultural preferences, education, and community engagement.

Important disclosures about SmartMatch:

• SmartMatch scores are informational tools designed to help employers and job seekers identify potential fits. They do not make hiring decisions.
• All hiring decisions are made solely by employers. CME does not determine who gets hired.
• SmartMatch does not use race, ethnicity, gender, age, religion, sexual orientation, disability status, marital status, or any other protected characteristic under the Canadian Human Rights Act or Ontario Human Rights Code as matching factors.
• Match breakdowns showing the contribution of each scoring dimension are available to users (subject to subscription tier).
• We monitor SmartMatch accuracy by tracking outcomes (hires, rejections) against scores to identify and correct potential biases.

If you believe a SmartMatch score is inaccurate or has resulted in unfair treatment, you may contact us to request a review at info@cmejobs.com.

6. How We Share Your Information

6.1 With Employers (When You Apply)

When you submit a job application, the employer receives your profile information, resume, cover letter, video content, SmartMatch score, and screening question responses. Employers cannot view your applications to other companies.

6.2 Through the Talent Pool (Opt-In Only)

If you opt into the Talent Pool after a job closes, participating employers may view a limited profile including your skills, experience summary, and match score. All contact is initiated through the Platform — employers cannot see your direct contact information until you engage. Talent Pool participation requires your explicit, dual opt-in consent.

6.3 With Job Seekers (Employer Data)

Job seekers can view your company profile, job postings, trust score, response rates, and publicly displayed badges. Internal hiring notes, voting records, and team deliberations are never shared with candidates beyond status updates.

6.4 With BIA Administrators

BIA administrators can view aggregated hiring statistics, business listings, and district-level analytics for their area. They do not have access to individual job seeker profiles, applications, or personally identifiable hiring data.

6.5 With Service Providers

We share data with the following third-party service providers who process it on our behalf:

• Stripe, Inc. — Payment processing. Subject to Stripe's Privacy Policy.
• Amazon Web Services (AWS) — Cloud hosting, data storage, and content moderation services.
• Twilio / SendGrid — Email delivery and SMS verification services.
• Google Maps Platform — Map display, geocoding, and address autocomplete services.

6.6 For Legal Purposes

We may disclose your personal information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency), or if we believe in good faith that disclosure is necessary to:

• Comply with a legal obligation
• Protect and defend the rights or property of CME Jobs Inc.
• Prevent or investigate possible wrongdoing in connection with the Platform
• Protect the personal safety of users or the public

6.7 Aggregated and Anonymized Data

We share anonymized, aggregated data with BIAs, municipal governments, and research partners for economic impact reporting, labour market analysis, and community development. This data cannot be used to identify individual users.

6.8 Business Transfers

If CME Jobs Inc. is involved in a merger, acquisition, or asset sale, your personal data may be transferred. We will provide notice before your data is transferred and becomes subject to a different Privacy Policy.

6.9 No Sale of Personal Information

We do not sell, rent, or trade your personal information to third parties for their marketing or advertising purposes.

7. Data Retention

We retain your personal information according to the following schedule:

• Active Accounts: We retain your data for as long as your account is active and for a reasonable period afterward to fulfill any remaining contractual obligations.
• Bill 190 Compliance Records: Under Ontario's Working for Workers Act, CME retains compliance archives — including job posting versions, application communications, interview records, and hiring decisions — for a minimum of three (3) years after the hiring process concludes. These records are sealed and immutable once a job posting is closed.
• Financial Records: Transaction and billing records are retained for seven (7) years in accordance with Canadian tax and accounting requirements.
• Platform Event Logs: Usage events and analytics data are retained for up to 24 months, after which they are anonymized or deleted.
• Deleted Accounts: Upon account deletion request, we remove your personal information within 30 days, except where retention is required by law (e.g., Bill 190 compliance records, financial records, or active legal proceedings).
• Video Content: Videos are deleted when you remove them or when your account is deleted, except where they form part of a sealed compliance archive.

8. Your Privacy Rights

8.1 Rights Under PIPEDA (All Canadian Users)

Under the Personal Information Protection and Electronic Documents Act, you have the right to:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete personal information.
• Withdrawal of Consent: Withdraw consent for certain processing activities. Note that withdrawing consent for core services may limit Platform functionality.
• Deletion: Request deletion of your account and personal information, subject to legal retention requirements.
• Complaint: File a complaint with the Office of the Privacy Commissioner of Canada.

8.2 Rights Under GDPR (European Economic Area Users)

If you are located in the European Economic Area, you have additional rights under the GDPR:

• The right to access, rectify, or erase your personal data
• The right to restrict or object to processing
• The right to data portability
• The right to withdraw consent at any time
• The right not to be subject to decisions based solely on automated processing (including profiling) that produce legal or significant effects
• The right to lodge a complaint with a supervisory authority

Our legal bases for processing under GDPR include: consent, performance of a contract, legitimate interests (improving our services, fraud prevention), and legal obligations.

8.3 Rights Under CCPA (California Residents)

If you are a California resident, you have the following rights under the CCPA:

• The right to know what personal information is collected, used, shared, or sold
• The right to delete personal information held by us (subject to exceptions)
• The right to opt-out of the sale of personal information — we do not sell your personal information
• The right to non-discrimination for exercising your CCPA rights

8.4 Exercising Your Rights

To exercise any of your privacy rights, contact us at info@cmejobs.com. We will respond within 30 days (or sooner if required by applicable law). We may need to verify your identity before processing your request.

9. Consent

By creating an account and using the Platform, you consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy. Where required by law, we obtain explicit consent before:

• Recording or collecting video content (camera access)
• Collecting precise geolocation data
• Sending promotional or marketing communications (CASL compliance)
• Sharing your profile through the Talent Pool (dual opt-in required)
• Processing sensitive personal information

You may withdraw consent at any time by updating your account settings or contacting us. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

10. Electronic Communications (CASL)

CME complies with Canada's Anti-Spam Legislation (CASL). We categorize our electronic communications as follows:

• Transactional Messages (no additional consent required): Application status updates, interview reminders, offer notifications, security alerts, account verification, password resets, Bill 190 compliance communications, and payment confirmations.
• Service Messages (implied consent for active users): Platform updates, feature announcements, policy changes, and subscription-related communications.
• Promotional Messages (express consent required): Marketing emails, contest promotions, and special offers. You may unsubscribe at any time using the link provided in each message.

Every commercial electronic message from CME includes our identity, mailing address, and a functioning unsubscribe mechanism as required by CASL.

11. Data Security

The security of your personal data is important to us. We implement industry-standard technical and organizational measures to protect your information, including:

• Encryption of data in transit (TLS/HTTPS) and at rest
• Secure password hashing using bcrypt
• JWT-based authentication with secure, httpOnly cookies
• Role-based access controls limiting data access to authorized personnel
• Device integrity checks and anomaly detection for fraud prevention
• Immutable compliance archives protected by database-level triggers
• Regular security reviews of platform code and infrastructure

However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.

12. Children's Privacy

The Platform is not intended for individuals under the age of 16. We do not knowingly collect personally identifiable information from anyone under 16 years of age. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at info@cmejobs.com. If we become aware that we have collected personal data from anyone under 16 without verification of parental consent, we will take steps to remove that information promptly.

13. International Data Transfers

CME is a Canadian platform and your data is primarily stored and processed in Canada. Some of our service providers (including Stripe and AWS) may process data in other jurisdictions, including the United States. Where data is transferred outside of Canada, we ensure that adequate safeguards are in place through contractual data processing agreements with our service providers to protect your information to a standard comparable to Canadian and, where applicable, European privacy law.

Your consent to this Privacy Policy followed by your submission of personal information represents your agreement to such transfers.

14. Links to Third-Party Sites

The Platform may contain links to other websites or services that are not operated by us. If you click on a third-party link, you will be directed to that party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For material changes, we will provide notice through the Platform or by email before the change becomes effective.

You are advised to review this Privacy Policy periodically for any changes. Changes are effective when they are posted on this page.

16. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us:

If you are a Canadian resident and are not satisfied with our response, you may file a complaint with the Office of the Privacy Commissioner of Canada.

If you are an EU resident, you may lodge a complaint with your local data protection supervisory authority.