Privacy policy
1. Data controller
Milton Correa is the data controller for BDsniper. Contact: support@bdsniper.com.
2. Data collected
On sign-up: email address, hashed password, first and last name if you provide them, or the profile Google sends if you sign in that way.
In use: IP address, browser and system of your sessions, sign-in log, organizations and invitations, and the searches you save with the filters you set on them. For billing, if you take a paid plan: customer identifier and subscription status, the payment details staying with Stripe.
In the app: a recording of your visit, meaning the screens you open, your clicks, your scrolling and the movements of your pointer, so we can see where the tool is hard to use.
If you book a call from our healthcare staffing page: your name, your email address and the answers you give in the booking form.
What the service lists is about companies, not about you: job adverts published by companies and company details from public datasets. Where an advert names a person, that name comes from the company's own page.
3. Purposes and legal bases
Providing BDsniper and performing the contract: account, organizations, billing. Securing the service, on the basis of legitimate interest: new device detection, rate limiting, two-factor authentication.
Sending service messages: verification codes, invitations, security alerts. No marketing without consent.
Holding a call you book with us, at your request, and following up on it.
4. Recipients and processors
Hosting: Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, United States. Database: Neon. Email delivery: Resend. Error monitoring: Sentry. Session recordings in the app: Microsoft Clarity. Files, such as a logo you upload: Cloudflare R2. Background jobs: Railway. Payment: Stripe. Sign-in: Google, if you choose that provider. Each acts on instruction and accesses only the data its task requires.
Company logos are loaded by your browser from Brandfetch, which therefore sees your IP address. No data of yours is sent to it.
The booking calendar of our healthcare staffing page is loaded by your browser from Calendly, which therefore sees your IP address. If you book a call, Calendly receives what you enter in the booking form and passes it on to us to hold the call.
5. Retention periods
Account data is kept as long as the account exists, then deleted. Sessions expire after seven days of inactivity. Billing data is kept for ten years under accounting obligations. The details of a call you book are kept for as long as we work together on it, and deleted within a year after the last call.
6. Where your data is processed
The service and its database run in the United States, as do several of the providers above. These transfers rest on the standard contractual clauses of the European Commission, which each provider has signed.
7. Your rights
Access, rectification, erasure, restriction, portability and objection, exercised from the account settings or by writing to support@bdsniper.com. You may refer the matter to your supervisory authority if you consider that your rights are not respected.
8. Cookies
This site uses strictly necessary cookies only: session, trusted device for two-factor authentication, last sign-in method, language and theme preference. The app at https://app.bdsniper.com sets two more, those of Microsoft Clarity, which measure how its screens are used. No advertising cookies anywhere. The Calendly booking calendar, where it is shown, sets Calendly's own cookies, under Calendly's cookie policy.