Privacy Policy
Effective September 1, 2026
abasync is a job board and career platform for applied behavior analysis (ABA) professionals and the companies that hire them. This policy explains what we collect when you use abasync.com and app.abasync.com, why we collect it, who we share it with, and the choices you have.
abasync is operated by [LEGAL REVIEW: legal entity name] (“abasync”, “we”, “us”). If anything here is unclear, write to us using the details in the last section.
Who this policy covers
This policy applies to visitors of our public site, to candidates who create an account to build a profile and apply for roles, and to employers who create an account to post jobs and review applicants. It does not cover the practices of employers once they receive your application, or of third-party sites we link to, such as an employer’s own careers page.
Information we collect
Account information
When you register we collect your name, email address, and a password (stored only as a salted hash). If you sign in with Google, Google sends us your name, email address, and profile picture; we never see your Google password.
Profile and resume information
Candidates may upload a resume (PDF or DOCX) and add details such as certifications (for example BCBA or RBT), work history, education, skills, location, work-mode preferences, and a phone number. The text of your resume is extracted and processed as described in the next section.
Employer information
Employers provide a company name, contact details, and the content of each job posting: title, description, location, pay range, requirements, and how to apply. Job postings are public by design and appear on abasync.com.
Billing information
If you purchase a candidate premium subscription, payment is handled by Stripe. Your card number never touches our servers; we receive a Stripe customer identifier, the last four digits and brand of your card, and the status of your subscription.
Usage and device information
Like most services we record server logs: IP address, browser type, the pages you request, timestamps, and error diagnostics. We use these to keep the service running and secure. We do not use advertising trackers or cross-site analytics cookies.
Communications
If you contact us, opt in to SMS notifications, or reply to a message from us, we keep the correspondence and the phone number or email address you used.
How we use information
We use the information above to:
- Create and secure your account and let you sign in.
- Build your candidate profile from your resume. Uploaded resumes go through automated text extraction and are then analysed by a large language model to draft a structured profile (roles, certifications, skills, experience) and coaching suggestions for improving it. You can review and edit everything the model produces; nothing is sent to an employer without your action.
- Match candidates with open roles and show relevant jobs, using the profile and preferences you provide.
- Publish employer job postings and deliver candidate applications to employers.
- Process subscription payments and manage entitlements.
- Send transactional messages about your account, applications, and matches by email and, if you opt in, by SMS.
- Respond to support requests.
- Monitor, debug, and protect the service, including detecting abuse and fraudulent postings.
- Comply with legal obligations.
We do not sell personal information, and we do not use your resume or profile to train machine-learning models.
SMS notifications
You may opt in to receive text-message notifications from abasync about your account, job matches, and application updates. Messages are sent from +1 877-692-1795. Message frequency varies. Message and data rates may apply. Consent to receive SMS is not a condition of purchasing any product or service.
Reply STOP at any time to cancel, or HELP for help. After you send STOP we will confirm your opt-out with a single message and send nothing further unless you opt in again. You can also change your notification preferences in your account settings. Carriers are not liable for delayed or undelivered messages.
We do not share phone numbers collected for SMS consent with third parties for their own marketing purposes.
Data retention
We keep your account and profile for as long as your account is open. If you delete your account, we delete or anonymise your profile, resume files, and extracted resume text within 30 days, except where we must keep records longer — for example billing records retained for tax and accounting purposes (typically seven years) or information subject to a legal hold.
Applications you have already sent to an employer remain with that employer. Server logs are retained for up to 90 days. Job postings are removed from the public site when the employer closes them.
Security
All traffic to abasync is encrypted in transit with TLS, and data at rest is encrypted using AWS-managed keys. Access to production systems is limited to personnel who need it and is protected by multi-factor authentication. Passwords are stored only as salted hashes. No system is perfectly secure; if we learn of a breach affecting your information we will notify you as required by law.
Your rights and choices
Regardless of where you live, you can:
- Access and correct your profile at any time from your account.
- Delete your account from account settings, or by emailing us. We will confirm the request from the email address on the account before acting on it.
- Export a copy of the profile data you have given us by emailing us.
- Opt out of SMS by replying STOP, and of non-essential email by using the unsubscribe link or your notification settings. We will still send messages that are necessary to operate your account.
Residents of certain U.S. states have additional rights, including the right to know what personal information we hold, to request deletion, and not to be discriminated against for exercising those rights. We do not sell or share personal information for cross-context behavioural advertising. To exercise any right, use the contact details below; we respond within the time required by applicable law and you may appeal a decision by replying to our response.
Children
abasync is a professional service. You must be at least 18 years old to create an account, and we do not knowingly collect information from anyone under 18. If you believe a minor has provided us with personal information, contact us and we will delete it.
Where your data is stored
abasync is operated from the United States and our infrastructure runs on Amazon Web Services in U.S. regions. If you use the service from outside the United States, your information will be transferred to and processed in the United States, where privacy laws may differ from those in your country.
Changes to this policy
We may update this policy as the service or the law changes. The effective date at the top tells you when it was last revised. For material changes we will notify account holders by email or with a notice in the app before the change takes effect. Continuing to use abasync after that date means you accept the updated policy.
Contact us
Questions, requests, or complaints about privacy can be sent to:
- Email: [LEGAL REVIEW: contact email — suggested privacy@abasync.com]
- Mail: [LEGAL REVIEW: legal entity name], [LEGAL REVIEW: mailing address]
Our Terms of Service describe the rules for using abasync.