Privacy Policy
Last updated: June 27, 2026
1. Introduction
Manifest & Match (“M&M”, “we”, “our”, “us”) is based in Ontario, Canada and respects your privacy. This Policy explains what personal information we collect, how we use and protect it, and your choices. It is written to align with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), which governs how we handle personal information in the course of commercial activity.
2. Accountability and contact
We are accountable for the personal information under our control. For any privacy question, request, or complaint, contact our Privacy Officer at jason@manifestandmatch.com.
3. Personal information we collect
- Account information — your email address (via Google Firebase Authentication) so you can sign in.
- Profile information you provide — current/target role, skills, location, experience, and résumé text if you upload one.
- Usage information — which job cards you swipe on (save / skip / apply) and how you use the slider and tabs; this powers the personalization.
- Technical information — standard log data (IP address, device/browser type) used to run and secure the service.
4. Purposes — how we use your information
- To personalize your deck of job cards and your career recommendations (the core of the product).
- To operate, secure, and improve the service.
- To show relevant ads in the app (see Advertising).
- Only if you choose it: to connect you with a training/education program (see Disclosure).
5. Consent
We collect, use, and disclose personal information with your consent. By creating an account and using M&M, you consent to the handling described here. For sensitive actions — such as sharing your contact details with an outside program — we obtain your express, opt-in consent at the time. You may withdraw consent at any time (subject to legal or contractual limits) by contacting us; this may affect our ability to provide the service.
6. AI processing
Some features (e.g., reading your résumé, drafting a cover letter) send the relevant text to a third-party AI provider to process it. We send only what that feature needs.
7. Advertising
We use Google AdSense to show ads in the app. Ads are matched to the on-screen content and the role/skills you’ve declared — this is contextual, not cross-site behavioral tracking. Google may use cookies to serve ads; you can control ad personalization in your Google account settings. We do not share your name or email with advertisers.
8. Disclosure of personal information
- Service providers that process data on our behalf — including Google (Firebase: sign-in, database, hosting), our AI provider, and our advertising and job-listing partners.
- Only with your consent: your name and email are shared with an outside program only when you explicitly opt in (e.g., “send my info to [program]”).
- We do not sell your personal information.
- Legal requirements: we may disclose information where required by law or to protect our rights, users, or the public.
9. Service providers and cross-border transfers
Some of our service providers (including Google) may store or process your information on servers located outside Canada, including in the United States. While in another jurisdiction, your information may be accessible to courts, law enforcement, and regulatory authorities under that jurisdiction’s laws.
10. Your rights — access and correction
Under PIPEDA you have the right to access the personal information we hold about you and to request corrections. Email jason@manifestandmatch.com; we will respond within the time required by law (generally 30 days under PIPEDA). You may also delete your account and data at any time. If you are in the EU/UK (GDPR) or California (CCPA), you may have additional rights (access, deletion, portability, objection), which we honour for verified requests.
11. Right to complain
If you have a concern about how we handle your personal information, please contact us first. You also have the right to file a complaint with the Office of the Privacy Commissioner of Canada (priv.gc.ca).
12. Retention
We keep your data while your account is active and as needed to fulfil the purposes above. When you delete your account or ask us to, we remove your personal information, except anything we are legally required to retain.
13. Safeguards
We protect your information with security safeguards appropriate to its sensitivity, including authentication and per-user data isolation. No system is perfectly secure, but we take this seriously.
14. Electronic messages (CASL)
If we send you commercial electronic messages, we do so in accordance with Canada’s Anti-Spam Legislation (CASL): we obtain consent, identify ourselves, and include an unsubscribe option. You can opt out at any time.
15. Children
M&M is for adults — you must be 18 or older. We do not knowingly collect information from anyone under 18.
16. Cookies
We use the cookies needed to keep you signed in and run the service, plus Google’s advertising cookies. You can manage cookies in your browser settings.
17. Changes
We may update this Policy and will post the new version here with a new “last updated” date.
18. Contact
Privacy Officer — jason@manifestandmatch.com