Privacy Policy
Last updated: March 28, 2026
1. Information We Collect
Formulate collects minimal personal information to provide our job board service:
- Job Alert Subscriptions: When you sign up for job alerts, we collect your email address and filter preferences (therapeutic areas, departments, locations).
- Usage Data: We use cookie-free analytics (Vercel Analytics) to understand aggregate traffic patterns. No personal data is collected through analytics.
- Server Logs: Standard web server logs may temporarily record IP addresses and request data for security and performance purposes.
2. How We Use Your Information
- To send job alert emails matching your selected criteria
- To improve site performance and user experience
- To detect and prevent abuse or security threats
3. Data Sources
Job listings on Formulate are aggregated from publicly available sources including company career pages and applicant tracking system (ATS) public APIs. We do not collect or store job applicant data. When you click "Apply," you are redirected to the company's own application page.
4. Cookies
Formulate uses only essential cookies for theme preferences (light/dark mode). We do not use advertising cookies, tracking cookies, or third-party analytics cookies.
5. Third-Party Services & Sub-Processors
We use the following sub-processors to operate Formulate. Each processes only the data necessary for its function:
- Vercel: Hosting and cookie-free analytics
- Neon: Database hosting (PostgreSQL)
- Resend: Email delivery for job alerts and account notifications
- Stripe: Payment processing and subscription billing for Pro accounts (name, email, and payment details handled directly by Stripe)
- Anthropic: AI processing for company and product intelligence enrichment. We do not send your account or personal data to Anthropic; only publicly sourced company/product information is processed.
6. Data Retention
Job alert subscriptions are retained until you unsubscribe. You can unsubscribe at any time using the link in any alert email. Server logs are retained for up to 30 days.
7. Your Rights
You have the right to:
- Unsubscribe from job alerts at any time
- Request deletion of your email address from our system
- Request information about what data we hold about you
8. Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data under the following legal bases:
- Legitimate Interest: We aggregate publicly available job listings from company career pages to operate our job board. This processing is necessary for our legitimate interest in providing a useful job search service.
- Consent: When you sign up for job alert emails, we process your email address and preferences based on your explicit consent. You may withdraw consent at any time by unsubscribing.
- Legal Obligation: We may process data where required by applicable law.
9. Data Subject Rights (GDPR)
If you are in the EEA or UK, you have the following rights under the GDPR:
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate personal data.
- Right to Erasure: Request deletion of your personal data ("right to be forgotten").
- Right to Data Portability: Request your data in a structured, machine-readable format.
- Right to Object: Object to processing based on legitimate interest.
- Right to Restrict Processing: Request that we limit how we use your data.
- Right to Withdraw Consent: Withdraw consent at any time for consent-based processing.
To exercise any of these rights, contact us at privacy@formulatesearch.com. We will respond within 30 days.
10. Data Retention Periods
- Job alert subscriptions: Retained until you unsubscribe or request deletion.
- Community contributions (interview reports, compensation data, discussions): Retained while your account is active. Upon account deletion, your contributions may be anonymized and retained for community value, or deleted entirely at your request.
- Payment records: Stripe customer ID, subscription ID, and trial dates are retained for 3 years after account closure for tax and dispute resolution purposes, then deleted.
- Usage/analytics data: Retained for up to 2 years in aggregate form.
- Server logs: Retained for up to 30 days, then deleted.
- Search logs: Retained for 90 days for product improvement, then aggregated or deleted.
- Job listing data: Refreshed on a rolling basis; expired listings are archived after 180 days.
- Account deletion: You can delete your account at any time via hello@formulatesearch.com or using our self-service deletion endpoint. Data is permanently removed within 30 days.
11. International Data Transfers
Your data may be transferred to and processed in the United States, where our infrastructure is hosted:
- Database: Neon PostgreSQL hosted in the United States.
- Hosting: Vercel Edge Network (global CDN with origin in the US).
- Email: Resend (US-based email delivery).
Where data is transferred outside the EEA, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission or other appropriate safeguards to ensure your data is adequately protected.
12. Cookie Policy
Formulate uses only essential cookies:
- Theme preference cookie: Stores your light/dark mode choice. Essential for site functionality. No expiry until cleared.
We do not use advertising cookies, tracking cookies, or third-party analytics cookies. Vercel Analytics is cookie-free. You can manage cookies through your browser settings. Disabling cookies may affect theme preferences but will not impact core functionality.
13. Right to Lodge a Complaint
If you are in the EEA or UK and believe your data protection rights have been violated, you have the right to lodge a complaint with your local data protection supervisory authority. A list of EU supervisory authorities is available at edpb.europa.eu.
14. California Privacy Rights & Your Privacy Choices (CCPA)
California residents have the following rights under the CCPA/CPRA:
- Right to Know: Request the categories and specific pieces of personal information we have collected about you.
- Right to Delete: Request deletion of personal information we hold about you.
- Right to Correct: Request correction of inaccurate personal information.
- Right to Opt Out of Sale/Sharing: We do not sell or share your personal information for cross-context behavioral advertising, so there is no opt-out to exercise — but you retain the right.
- Right to Non-Discrimination: We will not discriminate against you for exercising any of these rights.
To exercise any of these rights, or to make a "Do Not Sell or Share My Personal Information" request, email us at privacy@formulatesearch.com. We will respond within 45 days.
15. Changes to This Policy
We may update this policy from time to time. Changes will be posted on this page with an updated date.
16. Contact
For privacy-related inquiries, email us at privacy@formulatesearch.com.