The short version
- We collect what you give us: your email, your password, your profile or business details, your job posts and applications, and your messages.
- Every employer we've verified can see and search job seeker profiles, even before you apply. That can include the place you work now. An employer you apply to, or have a conversation with, can see your profile too, even if you withdraw later. Other job seekers and the public never see it.
- Business profiles and live job posts are public.
- We don't sell your information, and we don't use it for ads. Our website and apps have no tracking, analytics or ad tools.
- Messages aren't private from us. Our team can read them, for example to check a report.
- You can delete your account at any time, in the phone app's Account tab or on the website's “Your account” page. It happens right away. We keep a few records without your name, for safety, for the law, or because they are part of someone else's history. See Delete your account.
Who we are
Skillet is a jobs app for the food service industry in Edmond and Oklahoma City. It connects job seekers, like servers, cooks and bartenders, with food service businesses that are hiring. It is run by [LEGAL BUSINESS NAME], based in Edmond, Oklahoma. In this policy, “we” and “us” mean Skillet.
“Employer” means a business with an employer account on Skillet. “Job seeker” means a person with a job seeker account, including after they are hired. Calling a business an employer doesn't make Skillet anyone's employer.
This policy covers our website, https://skilletjobs.com, and the Skillet app for iPhone and Android. It explains what we collect, why, who can see it, who we share it with, how long we keep it, and your choices.
What we collect
Most of what we have, you typed in yourself. We don't buy information about you from anyone.
Everyone with an account
- Your email address. You sign in with it, and we send your sign-up and password codes to it.
- Your password. We never store it ourselves. Our login provider, Supabase, keeps only a scrambled version of it (a “hash”), not the password itself.
- Your account type (job seeker or employer) and the date you joined.
- An account number we create to link your information together.
- That you agreed to our Terms of Service and this Privacy Policy: which version you agreed to, and when. We record this when you set up your profile.
- Whether we've put your account on hold, and when.
- Your sign-in session, which keeps you signed in. See Cookies and storage on your device.
If you're a job seeker
- Your name. This is required.
- Your city, if you add it.
- Your headline and About text, if you add them.
- Your work history: where you worked, job titles, and start and end dates.
- Your skills and certifications. You pick skills from our list and type in your certifications.
- Your photos, if you add them: one profile photo and up to 10 photos of your work. We save each one smaller, and without the place it was taken that phones often store in the file.
- That you're 18 or older. You check a box to confirm it, and we save the date and time you did. We don't ask for your date of birth.
- Your job applications: which jobs you applied to, when, and where each one stands.
- Job offers you get, and your answers. An offer holds the pay, whether tips are extra, the start date and any note from the employer.
- Hires: when you were hired and, if a hire was cancelled, when and by whom.
- Your shift applications: which shifts you applied to, when, and where each one stands, including shifts an employer accepted you for and any you cancelled. When an employer accepts you for a shift, what you earn for it (before tips) is also kept in that employer's fee record for the shift.
- Reviews about you. Only an employer that hired you can review you, and only once your start date has come. Reviews aren't switched on in the apps yet.
If you're an employer
- Your business name (required), address and cuisine (the type of food you serve).
- Your job posts: title, description, role, whether it's full-time, part-time or seasonal, city, address, pay (only if you choose to show it), number of openings, and the skills you want.
- Your shifts: title, role, day, start and end times, pay, whether tips are extra, and any notes you add. For each shift you fill, we keep who you accepted and the fee record: the shift's hours, what the job seeker earns for it, and the fee.
- Job offers you send, and hires.
- Whether we've verified your business, and when.
We don't ask for the name of the person who runs an employer account. The only personal detail we ask for is the email you sign in with.
Payment information
Paying for job posts isn't switched on yet, so we don't collect any payment information today. Job seekers don't pay to use Skillet.
We plan to use Stripe, a payment company, to take employers' card payments on our website. Stripe will collect card details directly. Our database has no place to store a full card number.
Things you share with each other
- Messages between an employer and a job seeker, with who sent each one and when.
- When you last read each conversation. Only you can see this. There are no read receipts.
- Blocks: who you blocked, and when.
- Reports: the conversation you reported, the reason you picked, and any details you wrote.
- Alerts about things like a new message or a job offer. They hold no message text. The apps don't show these alerts yet.
Collected automatically
- Sign-in cookies and app storage, to keep you signed in. See Cookies and storage on your device.
- Technical logs kept by our providers. Our hosting and login providers, Vercel and Supabase, keep standard logs. These can include your IP address (the number your internet connection uses, which can show roughly where you are), the type of browser or device you use, the pages you visited, and when you signed in. They help keep Skillet running and secure. Our own database doesn't store IP addresses or device details.
What we don't collect
- Your exact location, like GPS. The phone app doesn't ask for it, and our website blocks it. We only know the city or address you type in.
- Your contacts, camera or microphone. We see only the photos you choose to add, never the rest of your photo library.
- Your phone number, date of birth, gender, Social Security number or government ID.
- Other files, like certificates or business logos. You can't upload them yet.
- Full card numbers.
- When you're free to work. We don't ask for it.
- The searches you run. We don't save them in our database. On our website, your search words are part of the page address, so our hosting provider's logs may include them.
- Advertising IDs, analytics or crash reports. We don't use any tracking tools.
How we use your information
- To run your account: sign you in, send your codes, and keep your profile and posts.
- To connect job seekers and employers: show job posts to job seekers, show applications and profiles to employers, and deliver messages, offers and hires.
- To sort results: we use a job seeker's skills and city to show the best-matching jobs, and jobs in their area, first. Employers we've verified can search for job seekers by skills, area and words in their profile.
- To check employers: we check each employer before its job posts go live.
- To keep Skillet safe: review reports, hide messages or reviews that break our rules, take down posts, put accounts on hold, and limit how much one account can do in a day to slow down spam.
- To answer you when you email us.
- To take payments, once paying is switched on.
- To follow the law and to protect people's safety.
We don't sell your information. We don't use it to show you ads, and we don't share it with advertisers or data brokers.
Apart from our replies when you email us, the only emails we send today are sign-up and password codes. We don't send marketing emails.
Who can see your information
Job seeker profiles
Your job seeker profile is your name, city, headline, About text, work history, skills, certifications, photos and reviews. Your photos follow the same rule as the rest of your profile, below.
| Who | Can they see your profile? |
|---|---|
| You | Yes, always. |
| Employers we've verified | Yes, unless you blocked them. They can also find you when they search. |
| Employers we haven't verified yet | Only if you applied to one of their jobs (even if you later withdrew), or if you have a conversation with them. They can't search for job seekers. |
| Employers you blocked | No. |
| Other job seekers | No. |
| People who aren't signed in, and search engines | No. |
| Our team | Yes. See Our team below. |
To hide your profile from an employer, block it. Right now you can only block an employer from a conversation with it.
- Employers can't search for job seekers by name. Search leaves out job seekers who haven't confirmed they're 18 or older, accounts on hold, and job seekers who blocked that employer or were blocked by it.
- Employers that can see your profile can also see that you confirmed you're 18 or older.
- When you apply to a job, get an offer, are hired or message an employer, that employer sees your name with it.
Your email address
Other people on Skillet never see your email address. Only you, on your account page, and our team can see it.
Business profiles and job posts
- Business profiles are public. Anyone, even people who aren't signed in, can see an employer's business name, address, cuisine, and whether we've verified it.
- Live job posts are public too, including everything in them. Don't put anything in a job post you wouldn't want the public to see.
- Drafts are visible only to you.
Applications, offers, hires and reviews
- An application is seen by the job seeker and the employer it went to.
- A job offer or a hire is seen by that job seeker and that employer.
- A review is seen by the employer that wrote it, the job seeker it's about, and employers that can see that job seeker's profile. If we hide a review, only the employer that wrote it can still see it.
- If a job seeker deletes their account, reviews about them are deleted. If an employer deletes its account, its reviews stay on job seekers' profiles without the employer's name.
Messages, blocks and reports
- Messages are seen by the two people in the conversation, and by our team.
- Messages aren't end-to-end encrypted (scrambled so only the two people talking can read them). They are stored in our database, and our team can read them, for example to check a report.
- You can't edit or delete a message after you send it. If you delete your account, your messages are deleted, except in conversations we keep for safety. See Delete your account.
- If the other person deletes their account, their messages disappear and the conversation closes, so you can't reply. Your own messages stay. If you never replied, the whole conversation disappears, so report anything worrying straight away. A conversation we keep for safety, like one that was reported, keeps all its messages, but it still closes.
- If we hide a message for breaking our rules, neither of you can see it anymore, but we keep it as a record.
- Only you can see who you blocked.
- Only you and our team can see your reports. We don't send the other person a notice about your report. An employer can also report a job seeker's photo: that employer stops seeing it, and once two employers report the same photo, no employer sees it until we've checked it. Reporting someone also blocks them.
Our team
The people who run Skillet can see all the information in our systems, including messages. We use this to verify employers, check reports, fix problems and keep Skillet safe.
Who we share it with
We don't sell or rent your information. We share it only in these ways:
- With other people on Skillet, as described in “Who can see your information” above.
- With our service providers, listed below, who run parts of Skillet for us.
- If the law requires it, such as a valid court order, or if we believe it's needed to protect someone's safety.
- If Skillet is sold or merged, your information may pass to the new owner.
Our service providers
| Company | What it does for us | What it handles |
|---|---|---|
| Supabase | Runs our database and sign-in, and delivers new messages to the phone app as they arrive | Everything in your account: your email, your password (scrambled), your profile and photos, posts and messages. It also keeps sign-in records, which can include your IP address and device details. |
| Vercel | Hosts our website | Your visits to our website. Its logs can include your IP address and browser details. When you sign up or sign in on the website, your email and password pass through our website's code on Vercel on their way to Supabase. We don't write them to our logs. |
| Resend | Sends our sign-up and password code emails | Your email address and the code |
| Google (Google Workspace) | Runs our email inbox, hello@skilletjobs.com | Anything you email us |
| Apple App Store and Google Play | Let you download the phone app | Your download, under their own privacy policies |
| Stripe | We plan to use it for employers' card payments on our website. Not in use yet. | Nothing today |
Each provider handles your information to provide its service to us. Each also has its own privacy policy. Our website's fonts are stored on our own site. Loading a page doesn't contact any company except Vercel, which hosts our website.
Cookies and storage on your device
A cookie is a small file a website saves in your browser. Our website uses only the cookies it needs to sign you in and keep you signed in. We don't use cookies for analytics or ads, and our website doesn't load scripts from other companies.
| Cookie | What it does | How long it lasts |
|---|---|---|
sb-…-auth-token (may be split into parts ending in .0, .1 and so on) | Keeps you signed in. It holds your sign-in tokens (codes that prove you're signed in) and your account details, including your email. Scripts on the page can't read it. | Removed when you sign out. Otherwise your browser can keep it for up to 400 days. |
Names starting with sb- and ending in code-verifier | A random security value set when you sign up, ask for a new code or reset your password. It holds no personal information. | Removed when you sign out. Otherwise up to 400 days. |
skillet_pending_email | While you finish signing up or resetting your password, it remembers your email, when we last sent you a code, and a few sign-up choices, like job seeker or employer. It keeps your email out of the page address. | 1 hour, or until you confirm your email, reset your password or sign out. |
The middle part of the sb- cookie names is our account code at Supabase. If you block cookies, you can't sign in on our website.
Because we don't track you, nothing changes when your browser sends a “Do Not Track” signal. There is nothing to turn off.
On your phone
- Your sign-in session is saved in the app's own storage, encrypted. The key that unlocks it is kept in your phone's secure storage (the iPhone Keychain or the Android Keystore) and stays on that phone.
- While you're signing up or resetting your password, the app saves your email, when we sent your code and the account type you picked, so you can finish later. This part isn't encrypted, and it never includes your password. It's removed when you finish setting up your profile, finish resetting your password, sign in, or sign out.
- The app doesn't ask to use your location, contacts, camera, microphone or notifications, and it has no tracking tools. When you add photos, your phone opens its own photo picker and the app only gets the photos you choose.
How long we keep your information
We keep your information while your account is open. While it's open, we don't delete old information on a schedule. When you delete your account, we delete most of it right away. What we keep after that, and for how long, is under Delete your account.
- When you remove a work history entry, skill or certification, we delete it from our database. It can stay in our database backups for a short time.
- When you withdraw an application, we keep it. That lets you apply again later, and it means that employer can still see your profile.
- Job posts stay in our database after they close, so the employer can reopen or renew them. Only drafts can be deleted.
- While your account is open, messages, job offers, hires and reports are kept, and you can't delete them. We keep messages we hide as a record.
- An employer can change its review of a job seeker for 14 days. After that the review can't be changed. It's deleted if the job seeker deletes their account.
- We keep a record of actions our team takes, like verifying an employer, putting an account on hold or taking down a post. These records can include an employer's business name or a post's title. When an employer deletes its account, we remove its business name from them. The rest stays.
- Our providers keep their logs for as long as their own settings say.
Your choices
See and change your information
- Job seekers can change their name, city, headline and About text, and add or remove work history, skills and certifications, on the Skillet website. The phone app can't edit your profile yet.
- Employers can't edit their business details in the apps yet. Email us and we'll help.
- You can't change the email you sign in with in the apps yet. Email us and we'll help.
- Job seekers can withdraw an application before the employer makes a final decision.
- You can block or unblock anyone you're messaging.
- To get a copy of the information we have about you, email us at hello@skilletjobs.com.
Delete your account
You can delete your account yourself at any time. In the phone app, tap the Account tab, then “Delete account”. On the website, open “Your account”, then choose “Delete account”. Type DELETE to confirm. It happens right away, and it can't be undone. Our Delete your account page has the steps.
You can sign up again later with the same email. It will be a new, empty account.
What we delete right away
- Your login: your email address, your password and your sign-in sessions.
- If you're a job seeker: your profile (name, city, headline and About text), your photos, your work history, skills and certifications, and reviews about you.
- If you're an employer: your business name, address and cuisine. Your business profile is removed. Draft shifts, and draft job posts you never published or paid for, are deleted. Your other posts lose their description and address, and the notes in job offers you sent are deleted.
- Messages you sent, except in conversations we keep for safety (see below). A conversation with nothing left in it is deleted.
- Your alerts, the list of people you blocked, and when you last read each conversation.
What happens to open jobs, shifts and conversations
- Hires and accepted shifts that haven't started yet are cancelled, and the other person is told.
- If you're a job seeker: your applications, and job offers waiting for your answer, are withdrawn.
- If you're an employer: your open job posts and shifts close, and job offers waiting for a job seeker's answer are withdrawn. Shift fees follow the usual rules for a cancelled shift in our Terms of Service.
- Your conversations close. The other person sees that the account was deleted, and can't reply. If they never replied, the conversation is deleted, unless we keep it for safety.
- Anything that has to stay no longer shows your profile name, email or photo. A post's title, and words you wrote in kept messages or reviews, stay as written.
What we keep, and for how long
| What we keep | Why | How long |
|---|---|---|
| Conversations we keep for safety: ones that were reported, have a message we hid, or where the deleted account was on hold. We keep them exactly as they are, including your messages, and the other person can still read them. | So we can look into reports and keep people safe. | 2 years after the report is closed. If there was no report, 2 years after the account was deleted. |
| Reports you made, and reports about you. | So we can look into them and keep people safe. | 2 years after the report is closed. |
| Job records the other person still needs, with no name: applications, job offers, hires and shifts that are part of their history (for example, a job that already started). | They are part of the other person's history, like the jobs a job seeker got or who an employer hired. | As long as the other person's account exists. If they delete theirs too, the records stay, with no names attached. |
| For employers: the title, role, city and pay of posts that went live, and a record of each time a post went live (including free ones). | They are part of our payment records. | 7 years, like payment records. |
| A nameless account record: its account number, whether it was a job seeker or employer account, when it was created and deleted, whether it was on hold or (for an employer) verified, and which version of our terms it agreed to, and when. | Other records we keep point to it. | As long as any record above still points to it. |
| Reviews an employer wrote about a job seeker. They stay on the job seeker's profile, without the employer's name. | They are part of the job seeker's profile. | As long as the job seeker's account exists. |
| An employer's payment records: what was paid, charged and refunded. | The law requires us to keep them. | 7 years. |
| Records of what our team did, like verifying an employer, putting an account on hold or taking down a post, and a note that the account was deleted (only its account number and type). An employer's business name is removed from these records. A post's title stays. | To show what our team did, and when. | We haven't set an end date yet. These records hold no name or email. |
| Copies of our database kept as backups. | So we can recover from a mistake or an outage. | A short time, until each backup is replaced. |
| Our providers' technical logs, like sign-in records and records of the code emails we sent you. | To keep Skillet running and secure. | As long as each provider's own settings say. |
If you can't sign in
If you forgot your password, choose “Forgot your password?” on the sign-in screen to set a new one. Then sign in and delete your account yourself.
If that doesn't work, email us:
- Email hello@skilletjobs.com from the email address on your account.
- Write “Delete my account” as the subject.
- We'll reply within 7 days. Once we've checked that the request comes from you, we delete your account within 30 days. It's deleted in the same way as when you do it yourself.
If you can't get into that email any more, write to us anyway from another address and say so. Tell us the name on your profile and the email you signed up with.
Stop using Skillet
You can sign out at any time, remove details from your profile, or delete your account. The only emails we send are the codes you ask for and our replies to you, so there's nothing to unsubscribe from.
If you no longer agree to this policy, stop using Skillet and delete your account (see Delete your account). Signing out doesn't delete anything.
How we check it's you
Before we act on a privacy request you email us, we check that it comes from you. Please write from the email address on your account.
How we protect your information
- Our website and apps use encrypted connections (HTTPS).
- Our login provider stores passwords only in scrambled form. Passwords must be at least 8 characters, with a lowercase letter, an uppercase letter, a number and a symbol.
- Sign-up and password codes work only once and expire after 15 minutes.
- On our website, scripts on the page can't read your sign-in cookie, and it's sent only over encrypted connections.
- On your phone, your sign-in session is encrypted, and the key stays on your phone.
- Database rules decide who can read or change each piece of information. For example, they stop other job seekers from seeing your profile.
- Our website runs only code from Skillet itself, and other sites can't show our pages inside theirs.
- We limit how many messages, reports and new conversations one account can send, to slow down spam.
No system is perfectly safe, and messages aren't end-to-end encrypted. If you think someone has used your account without your permission, email us right away.
Children
- Skillet is for adults. It isn't meant for children.
- Job seekers must be 18 or older. They confirm this by checking a box when they set up their profile. Without it, they can't finish setting up a job seeker profile, so they can't apply for jobs or send messages. We don't ask for a date of birth or check ID.
- We don't knowingly collect information from anyone under 18.
- If you think someone under 18 has an account, email us at hello@skilletjobs.com. We can put the account on hold while we look into it.
Where your information is kept
Skillet is run from Oklahoma, in the United States. The service providers we use are companies based in the United States.
Changes to this policy
If we change this policy, we'll post the new version on this page with a new effective date. The date at the top of this page shows when it last changed. When you set up your profile, we record which version you agreed to.
Contact us
Questions or requests about your privacy? Email hello@skilletjobs.com.
You can also write to [LEGAL BUSINESS NAME], [MAILING ADDRESS]. Other ways to reach us are on our contact page.
Our Terms of Service also apply when you use Skillet. Employers can read about paying and refunds in our Refund Policy.