Last updated: July 2026
1. Introduction
Medexto ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit medexto.com (the "Service"). By using the Service, you consent to the practices described in this policy.
2. Information We Collect
2.1 Information You Provide
- Newsletter signup: email address, preference selections (background, function, sector, remote preference), free-text responses, the page where you signed up, and referrer information.
- Employer inquiries: company name, your name, email address, phone number (optional), job title, apply URL, job description (optional), custom message (optional), source page, and referrer.
- Source-job context: when you subscribe from a specific job detail page, we record the job ID, title, function tag, and sector tag to understand which roles drive newsletter interest.
- Referrer and UTM attribution: we record the referring URL and UTM parameters (source, medium, campaign) to understand how users find the Service.
We do not currently collect or process payment information.
2.2 Automatically Collected Information
- Browser type and version (via User-Agent header)
- Operating system (via User-Agent header)
- Pages visited and interaction data (via Vercel Analytics)
- Referring website (via Referer header)
We do not currently implement IP-address anonymization at the application level. Vercel Analytics and Supabase may process IP addresses as part of their infrastructure services under their respective privacy frameworks.
2.3 Apply-Click Events
When you click an apply button on a job listing, we record a minimal event containing the job ID, the referring page URL, your User-Agent header, and a timestamp. This helps us measure which roles generate application interest. We do not associate apply-click events with personally identifiable information.
3. How We Use Your Information
- Provide and maintain the Service
- Send the Medexto newsletter to active, confirmed subscribers
- Respond to employer inquiries
- Analyze Service usage and improve our curation
- Prevent abuse, fraud, and security incidents
- Comply with legal obligations
4. Service Providers
We use the following third-party services to operate the Service:
- Supabase — database hosting and API infrastructure. Supabase processes data under its own privacy policy.
- Vercel — website hosting and analytics (including Vercel Analytics and Vercel Speed Insights). Vercel processes data under its own privacy policy.
- Email delivery provider — we may use a third-party email service (such as Resend) to send newsletter campaigns and transactional emails. Your email address and preferences are shared with this provider solely for the purpose of delivering email on our behalf.
We do not sell your personal information.
5. Data Retention
- Newsletter subscribers: email, preferences, and metadata are retained indefinitely for active and unsubscribed subscribers. Subscribers may request deletion at any time (see Section 6).
- Newsletter signup events and campaigns: retained for the life of the Service for operational and analytics purposes. Aggregate anonymized data may be retained longer.
- Employer inquiries: retained as long as needed for follow-up and operational reference. Underlying contact data may be deleted upon request.
- Apply-click events: retained for up to 24 months.
- Vercel Analytics data:subject to Vercel's data-retention policies.
6. Your Rights
Depending on your jurisdiction, you may have rights to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your information
- Withdraw consent or object to processing
- Unsubscribe from the newsletter (via the one-click unsubscribe link in every email, or by contacting us)
- Request a copy of your data in a portable format
To exercise any of these rights, email privacy@medexto.com. We will respond within 30 days or the period required by applicable law.
7. Cookies
We use minimal cookies for essential functionality and analytics. See our Cookie Policy for details.
8. Children's Privacy
Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Changes are posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.
10. Contact
For questions about this Privacy Policy or to exercise your rights, contact us at: privacy@medexto.com.