Built to protect the people who need it most.
A plain-language statement of every protection TruJob provides, what we collect, what we never collect, and why every decision was made the way it was.
"If this database were fully exposed in a breach, could any record be used to harm a specific user?"
If the answer is yes, the design is wrong. This is the question asked about every table, every field, and every data flow in TruJob's architecture, and the standard applied to every future decision. The people who most need TruJob's protection are often the people who can least afford to be identified.
What TruJob never does
These are absolute commitments. There is no circumstance, no business pressure, and no legal request that changes any of them.
TruJob extracts signal data from email metadata and discards the email immediately. No email text, subject line, sender name, or body is ever stored anywhere.
TruJob does not sell, rent, license, or trade any user information to any third party for any purpose. Ever. There is no circumstance under which this changes.
TruJob does not know whether you are employed, how you are paid, whether you are documented, or what your tax situation is. We do not ask. We do not infer. We do not store.
If TruJob surfaces a resource card for the National Human Trafficking Hotline, tapping it creates no record anywhere in TruJob's systems. The connection goes directly from your device to the Hotline. TruJob is not involved and does not know what you did.
The anonymous signal data TruJob shares with anti-trafficking organizations describes fraudulent operations, not people. No user ID, no device fingerprint, no IP address, no session token is ever included.
What TruJob does collect, and why
TruJob is honest about what it retains. Pretending we collect nothing would be inaccurate and would undermine the trust we are trying to build.
When a formally employed job seeker scans an email, TruJob stores anonymized scan scores linked to a random account identifier. This does not include email content or anything that describes your personal situation. This data trains our fraud detection model so future users are better protected.
If you indicated you are looking for cash or informal work, TruJob is designed so that nothing about you ever leaves your device. Nothing that could identify you is stored anywhere. The one exception: if the scan detects patterns consistent with fraudulent recruitment, an anonymous signal is created describing the fraudulent operation only. That signal contains no information about you whatsoever. It describes the scam, not the person who found it.
When a scan detects patterns consistent with fraudulent recruitment, TruJob sends an anonymous signal to a completely separate database. This signal describes the fraudulent operation only. It contains no information about you, no name, no email, no device, no account reference. The person who found the scam is never part of what gets shared.
Your controls
Delete all scan history from your account at any time. One action, immediate effect, no questions asked.
Permanently delete your TruJob account at any time from your account page. Removes your profile, all scan history, and cancels any active subscription immediately. Any infrastructure-level backups expire within 7 days and are inaccessible to TruJob staff for anything other than disaster recovery. If the automated process fails, TruJob will complete the deletion manually within 24 hours.
The informal worker scan pathway works without an account and without transmitting anything about you. You can use it without creating any record of your existence in TruJob's systems.
Special protections for vulnerable users
Informal and cash workers
Local-only processing. Zero server storage. Permanently free. No upgrade prompts. No data collected about you, ever.
Workers with trafficking-adjacent signals
TruJob surfaces the National Human Trafficking Hotline when patterns warrant it. Accessing it creates no record. TruJob never makes a trafficking determination.
Agricultural and H-2A workers
Specific protection against fake employer schemes, visa fraud, and upfront fee scams. Spanish language support is on the roadmap.
Military veterans in transition
TruJob's signal detection is calibrated to fake defense contractor and government position scams that specifically target veterans separating from service.
What we share and with whom
TruJob is building data sharing relationships with organizations whose mission is to stop trafficking and protect workers. All data shared describes criminal operations only. No user is ever identifiable in anything TruJob shares, now or in the future.
Questions about our commitments?
Email privacy@trujob.io with any concern, question, or request related to how TruJob handles your data. Colin Malcolm, founder, responds personally.
Contact privacy team