Data Residency Statement
Last updated (draft)
This document is a draft and may change before the service launches.
Where FastFindRemoteJobs stores and processes your information
FastFindRemoteJobs (fastfindremotejobs.com) is a service of Conner Strategic Systems LLC, a Pennsylvania limited liability company ("we", "us", "our").
Effective date: [EFFECTIVE DATE]. Last updated: [LAST UPDATED DATE].
This statement explains where we store and process the information we hold about you. It is part of our Privacy Policy ([PRIVACY POLICY URL]). The Privacy Policy covers what we collect, why we collect it, how long we keep it, and your choices. This statement describes our current practices.
In short
- One region. Except for the items listed below, the information about you that we store in Google Cloud stays in one Google Cloud region: us-central1, in Iowa, USA. That includes your profile, alert rules and matches. The software that runs FastFindRemoteJobs also runs there. (A Google Cloud "region" is a group of Google data centers in one geographic area.)
- Listed exceptions. Google's Firebase Authentication holds your sign-in account in Google data centers in the United States. A few other Google services can't be limited to one region, and some outside companies help us run the service. Each one is listed below, with the information it handles.
- No second region. We don't copy your data to another region. Our backups are also kept in us-central1.
What we keep in us-central1
| What | Examples |
|---|---|
| Database | Your profile; your alert rules, keywords, industries and remote-eligibility settings; your delivery schedule and time zone; your notification settings and optional separate alert email; your SMS phone number and text-message consent records; your subscription status and your checkout auto-renewal consent record; your dashboard matches and match history (saved, dismissed, applied and problem reports); waitlist and contact-form entries; and employer opt-out requests. It also holds the public job and company data our crawler collects. |
| Files | Database backups and exports. |
| Logs | System and security logs. |
| Secrets | The keys our software uses to connect to other services, such as Stripe and Twilio. |
| Analytics | Product analytics. These use coded (hashed) user IDs, not names or email addresses. |
| Computing | Our application servers and scheduled tasks. These scan employers' career sites, match jobs to your alert rules and send your alerts. Also in us-central1: the load balancer and security certificate for our website, our web firewall, and our software release system. |
Your connection to our website. When you visit fastfindremotejobs.com, our load balancer in us-central1 receives your encrypted connection. Cloudflare runs the domain name system (DNS) for our domain, which tells your browser where to find us. Cloudflare does not sit in the middle of your connection to our website.
How we keep it there. We use Google Cloud organization policy settings to block new storage and computing resources from being created outside us-central1. We also set the location of our logs, secrets and backups to that region directly. These are settings we manage ourselves; they have not been certified by Google or anyone else.
Backups, and why there is no second region
We keep these recovery copies, all in us-central1:
- point-in-time recovery covering the last 7 days;
- daily backups, kept for 14 days;
- weekly exports, kept for 90 days.
When you delete information or delete your account, the deleted information drops out of these copies within the time frames above. Our Privacy Policy explains how long we keep each type of information.
We don't keep a copy in a second region. Your data stays in one place, but there is a trade-off. A major outage in us-central1 could make the service unavailable until the region recovers. Because our backups are in the same region, a severe regional event could affect them too. Our status page is hosted outside Google Cloud so that we can keep you informed during an outage.
Exceptions: Google services that can't be limited to us-central1
| Service | What we use it for | What it handles | Where it runs |
|---|---|---|---|
| Firebase Authentication (Google Identity Platform) | Signing you in and protecting your account | Your sign-in email address and name, your password credentials (if you sign in with email and password), sign-in provider identifiers and multi-factor settings. It also sends sign-in emails: verification, password reset and sign-in links. | Google data centers in the United States. Google doesn't let customers choose a region for this service. Some sign-in helper pages come from Firebase's global network; we pass them through our own website address. |
| reCAPTCHA Enterprise and App Check | Blocking bots and abuse at sign-up and sign-in, and protecting our database and API | Technical information about your browser, device and connection | Google's global infrastructure |
| Google Workspace (Gmail) | For now, sending alert, digest and account emails. Also our support@, billing@, privacy@, abuse@ and bot@ mailboxes. | Your email address or addresses, the emails we send you (job titles, companies and links, never full job descriptions), and any messages you send us | Google's global Workspace infrastructure, which is not limited to one region or country |
| Gemini on Vertex AI (Google's AI service) | Sorting employers into industries and double-checking whether some job postings are fully remote. Later, it may also read the public careers pages of employers that don't publish a job feed. | Public company and job information only. It never receives your account details, keywords, alert rules or any other subscriber information. | Google's "US multi-region": Google data centers in any of several US regions |
| Google Cloud's global management services | Running our cloud account: access permissions, billing, policies, network settings, monitoring and uptime checks | Our account settings, our own bills from Google, and information about whether the service is working. Not your profile, alert rules or matches. | Google's global infrastructure |
Exceptions: outside companies
These companies process information on their own systems, under their own terms and privacy policies. Our us-central1 settings don't control where they store data, and some of them may process it outside the United States.
| Provider | What we use it for | What it handles |
|---|---|---|
| Stripe | Card payments, subscriptions, sales tax, invoices and the billing portal | Your name, email address, billing address, card details (we never see your full card number), and your subscription and payment history. Stripe keeps invoices as tax law requires. |
| Twilio | Text-message alerts, only if you add the SMS add-on | Your mobile number, the texts we send you (job title, company and a short link), delivery status, and your replies such as STOP and HELP. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, except the service providers we use to deliver our text-message program (such as Twilio). See our Privacy Policy. |
| Postmark (planned) | Taking over alert, digest and account emails from Google Workspace as the service grows | Your email address, the emails we send you, and delivery and bounce information. We will use the shortest message-content retention Postmark offers. |
| Cloudflare | Our domain registration and DNS; cookie-free visitor statistics on our marketing pages; and Turnstile bot checks on public forms (waitlist, contact and employer opt-out) | DNS lookups, page-view statistics (no cookies), and technical browser information for bot checks |
| [STATUS PAGE PROVIDER] | Our public service-status page, hosted outside Google Cloud so it works during an outage | [CONFIRM: no personal information, unless visitors can sign up for status updates by email] |
| [HELP DESK PROVIDER] (only if we add one) | Managing support requests. Until then, support email stays in Google Workspace. | Your name, email address and support messages |
| [UPTIME MONITOR PROVIDER] | Alerting us if our systems stop running | No subscriber information |
Other things to know
- Signing in with another account. You might sign in with Google, Microsoft, GitHub, Facebook, X or Yahoo. If you do, that company handles the sign-in on its own systems and shares basic account details with us: your name, your email address and an account identifier. That company's privacy policy applies to its part.
- After an alert reaches you. Your email and mobile providers hold copies of the alerts we send you. If you export data from your dashboard, the file is stored wherever you save it.
- Who can see your information. Your information is stored in us-central1. Authorized personnel of Conner Strategic Systems LLC may access it remotely over encrypted connections when they need to: to run the service, provide support, keep it secure, or meet legal obligations.
- Information in transit. Connections between your browser and our website, dashboard and sign-in services are encrypted. Like most internet traffic, they may pass through network equipment in other places on the way. Alert texts travel over mobile carrier networks, and alert emails over the internet's email system; we don't control either. Your dashboard also connects directly to Google's Firebase services. Google may route that connection through its network locations outside Iowa before it reaches our database in us-central1.
- Our development tools. When we build and test our software, on our own computers and on GitHub, we use test data only. We never use subscriber data.
Changes to this statement
If we change where we store or process your information, we will update this statement and its "Last updated" date. Before we move stored subscriber information out of us-central1, or start using a new provider that receives subscriber information, we will [ATTORNEY/OWNER TO CONFIRM: give at least [30] days' notice by email and on this page, unless a faster change is needed for security or legal reasons].
Questions
Email privacy@fastfindremotejobs.com, or write to Conner Strategic Systems LLC, [MAILING ADDRESS].