Privacy Policy
Last updated: March 28, 2026
1. Information We Collect
Formulate collects minimal personal information to provide our job board service:
- Job Alert Subscriptions: When you sign up for job alerts, we collect your email address and filter preferences (therapeutic areas, departments, locations).
- Usage Data: We use cookie-free analytics (Vercel Analytics) to understand aggregate traffic patterns. No personal data is collected through analytics.
- Server Logs: Standard web server logs may temporarily record IP addresses and request data for security and performance purposes.
2. How We Use Your Information
- To send job alert emails matching your selected criteria
- To improve site performance and user experience
- To detect and prevent abuse or security threats
3. Data Sources
Job listings on Formulate are aggregated from publicly available sources including company career pages and applicant tracking system (ATS) public APIs. We do not collect or store job applicant data. When you click "Apply," you are redirected to the company's own application page.
4. Cookies
Formulate uses only essential cookies for theme preferences (light/dark mode). We do not use advertising cookies, tracking cookies, or third-party analytics cookies.
5. Third-Party Services
- Vercel: Hosting and cookie-free analytics
- Neon: Database hosting (PostgreSQL)
- Resend: Email delivery for job alerts
6. Data Retention
Job alert subscriptions are retained until you unsubscribe. You can unsubscribe at any time using the link in any alert email. Server logs are retained for up to 30 days.
7. Your Rights
You have the right to:
- Unsubscribe from job alerts at any time
- Request deletion of your email address from our system
- Request information about what data we hold about you
8. Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data under the following legal bases:
- Legitimate Interest: We aggregate publicly available job listings from company career pages to operate our job board. This processing is necessary for our legitimate interest in providing a useful job search service.
- Consent: When you sign up for job alert emails, we process your email address and preferences based on your explicit consent. You may withdraw consent at any time by unsubscribing.
- Legal Obligation: We may process data where required by applicable law.
9. Data Subject Rights (GDPR)
If you are in the EEA or UK, you have the following rights under the GDPR:
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate personal data.
- Right to Erasure: Request deletion of your personal data ("right to be forgotten").
- Right to Data Portability: Request your data in a structured, machine-readable format.
- Right to Object: Object to processing based on legitimate interest.
- Right to Restrict Processing: Request that we limit how we use your data.
- Right to Withdraw Consent: Withdraw consent at any time for consent-based processing.
To exercise any of these rights, contact us at privacy@formulatesearch.com. We will respond within 30 days.
10. Data Retention Periods
- Job alert subscriptions: Retained until you unsubscribe or request deletion.
- Community contributions (interview reports, compensation data, discussions): Retained while your account is active. Upon account deletion, your contributions may be anonymized and retained for community value, or deleted entirely at your request.
- Payment records: Stripe customer ID, subscription ID, and trial dates are retained for 3 years after account closure for tax and dispute resolution purposes, then deleted.
- Usage/analytics data: Retained for up to 2 years in aggregate form.
- Server logs: Retained for up to 30 days, then deleted.
- Search logs: Retained for 90 days for product improvement, then aggregated or deleted.
- Job listing data: Refreshed on a rolling basis; expired listings are archived after 180 days.
- Account deletion: You can delete your account at any time via hello@formulatesearch.com or using our self-service deletion endpoint. Data is permanently removed within 30 days.
11. International Data Transfers
Your data may be transferred to and processed in the United States, where our infrastructure is hosted:
- Database: Neon PostgreSQL hosted in the United States.
- Hosting: Vercel Edge Network (global CDN with origin in the US).
- Email: Resend (US-based email delivery).
Where data is transferred outside the EEA, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission or other appropriate safeguards to ensure your data is adequately protected.
12. Cookie Policy
Formulate uses only essential cookies:
- Theme preference cookie: Stores your light/dark mode choice. Essential for site functionality. No expiry until cleared.
We do not use advertising cookies, tracking cookies, or third-party analytics cookies. Vercel Analytics is cookie-free. You can manage cookies through your browser settings. Disabling cookies may affect theme preferences but will not impact core functionality.
13. Right to Lodge a Complaint
If you are in the EEA or UK and believe your data protection rights have been violated, you have the right to lodge a complaint with your local data protection supervisory authority. A list of EU supervisory authorities is available at edpb.europa.eu.
14. California Privacy Rights (CCPA)
California residents have additional rights under the CCPA. We do not sell personal information. To exercise your rights, contact us at the email below.
15. Changes to This Policy
We may update this policy from time to time. Changes will be posted on this page with an updated date.
16. Contact
For privacy-related inquiries, email us at privacy@formulatesearch.com.