Skip to content
Product Marketing AllianceJobs Board

Privacy notice

What the Product Marketing Jobs Board collects, why we collect it, who sees it, how long we keep it, and your rights. We've tried to keep it plain.

Last updated 19 October 2026

Version 2026-10-19. This page is a draft awaiting legal review, and it may change before the Product Marketing Jobs Board launches publicly.

1. Who we are

The Product Marketing Jobs Board is run by Product Marketing Alliance Limited, a company registered in England and Wales (company number 12181066), registered office 147 De Beauvoir Road, London, N1 4DL, United Kingdom. We're the controller of the personal data described here, and we're registered with the Information Commissioner's Office (ICO) under number ZA706305.

For anything about your data on the Product Marketing Jobs Board, email jobs@productmarketingalliance.com. You can also write to us at the address above. We haven't appointed a data protection officer. Product Marketing Alliance's main privacy policy covers its other services, such as membership, events and the newsletter.

2. If you're browsing or looking for a job

You don't need an account to browse or apply, and we don't ask for your name or email to do either. When you apply, you go to the employer's own site, and the employer handles your application.

  • Apply clicks. We record which role was clicked, where on the page and when, so employers can see how their post is doing. We don't store your IP address or anything else about you with it.
  • Page views. We keep a daily count of views per role, with nothing about who viewed it.
  • Analytics. Vercel Web Analytics tells us which pages and filters are used. It doesn't use cookies, we never send it your search text (only how long a search was), and it doesn't record your IP address. If your browser sends Global Privacy Control or Do Not Track, we send nothing at all. See our cookie notice.
  • Security checks. Forms are protected by ALTCHA, a bot check we run ourselves (self-hosted, no third party): your browser solves a small puzzle in the background. It uses no cookies and no personal data; we only keep a one-way fingerprint of the solved puzzle for a few days so it can't be used twice. Cloudflare Turnstile is only used if we ever turn it on instead, and it would then check you're not a bot using your IP address and browser details. To stop abuse we also keep short-lived counters keyed by a one-way scrambled version of your network address (never the address itself), which we delete within 2 days.
  • Reports. If you report a role, we store your reason, any details you write and a scrambled, salted version of your network address, so the same person can't report a role many times.
  • Bug reports. If you use the "Report a bug" button, we store your message, the page address, your browser type and a scrambled version of your IP address. The report goes to PMA's internal bug tracker and, without your IP address, to our private code repository on GitHub and our team's Slack.
  • Hosting logs. Our host, Vercel, processes your IP address and browser details to deliver pages and keeps short-lived request logs (a few days at most) for security and fault-finding.

3. Job alerts

If you set up a job alert, we store your email address, the filters you chose and how often you want to hear from us, plus a record of each alert email we send you (when, and your address with most of it hidden). Nothing else: no name and no IP address.

  • We email a link to confirm the alert and send nothing else until you do. Alerts you don't confirm are deleted 7 days after the last confirmation link we sent.
  • We keep a record of which roles we've sent you, so you don't get the same one twice. Rarely, if our email provider's answer is lost, a role can appear in the next email too.
  • Every alert email has a one-click unsubscribe. Unsubscribing deletes the alert and its history straight away.
  • If an alert email bounces or is marked as spam, we keep the address on a "do not email" list so we never send to it again.
  • Alerts are sent through our email provider, Resend, from the Product Marketing Jobs Board at mail.productmarketingalliance.com. We never add tracking pixels.

4. If you post a role

  • From LinkedIn, when you sign in: your LinkedIn account ID, name, profile picture link and email address, and whether LinkedIn has verified that email. We never post to LinkedIn or see your connections.
  • Your work email, which we verify with a one-time link, to confirm you work for the company. We check the email domain's mail records too.
  • Your job title, your company's details (name, website, LinkedIn page, size, industry, logo and business address) and whether you're a recruitment agency. The address is used for verification and invoicing and isn't shown on the board.
  • Your posts, including any hiring contact you choose to name (shown on the post: only name someone who has agreed), and views and apply clicks so you can see how they're doing.
  • Terms acceptance: when you accepted our terms and which version.
  • Promotions and invoices: the invoice email, purchase order number, tax ID and billing details you give us.
  • Moderation records: our decisions on your posts, spam checks, reports and any bans, with the moderator who made them.
  • Emails we send you about your posts and promotions, and whether they were delivered.

5. If you're a PMA member

PMA members can sign in to the Product Marketing Jobs Board for member features: a member account, a "happy to intro" offer, an anonymised talent profile that verified employers can search, intro requests, and optional notifications on PMA's Slack. These features are being piloted and aren't open to everyone yet. How they use your data, and the choices you have, are explained in full in the community privacy notice, which you see before you use any of them.

"PMA members work here" counts. On some company pages we show an approximate number of current PMA members who work there, such as "10+", and never fewer than 3. To work this out we ask PMA's membership records (HubSpot) how many current members have an email address at the company's web domain. We only receive the total: no names or emails are copied into the Product Marketing Jobs Board. You can ask us to leave you out of these counts at any time by emailing jobs@productmarketingalliance.com.

6. People named in roles from public careers pages

Most roles on the Product Marketing Jobs Board come from companies' public careers pages and the public job feeds of their recruitment systems (Greenhouse, Lever, Ashby, Workable, SmartRecruiters, Recruitee, Personio and Teamtailor). A job ad sometimes names a person, such as the hiring manager. We store only the title, location, salary and other job details, plus a short summary of up to 600 characters, and we remove email addresses and phone numbers from that summary before anything is shown. We link to the original ad rather than copying it. We check every role daily and close it as soon as it's gone from the careers page. If you're named in a role on the Product Marketing Jobs Board and want it removed, email jobs@productmarketingalliance.com. Companies can ask us to stop listing their roles with our listing removal form.

7. Why we use your data, and our lawful basis

Purposes and lawful bases
PurposeDataLawful basis (UK GDPR Art 6)
Running employer accounts, publishing and moderating posts, promotions and invoicesEmployer account, company, posts, ordersContract (Art 6(1)(b))
Keeping accounting and tax recordsInvoices and ordersLegal obligation (Art 6(1)(c))
Verifying employers, preventing spam, scams and abuse, moderation records, bans, security checks and rate limitsAccount, work email, moderation records, scrambled network addresses, bot-check results (Turnstile signals only if it is enabled)Legitimate interests (Art 6(1)(f)): keeping job seekers safe and the board trustworthy
Job alertsEmail, filters, send historyConsent (Art 6(1)(a)): you asked for them and confirmed. Unsubscribe any time
Showing apply clicks and views to employersCounts with no personal dataLegitimate interests: showing employers how their post performs
Site statisticsVercel Web AnalyticsLegitimate interests: improving the board
Listing roles from public careers pagesJob details and short summaries, which may name a personLegitimate interests: helping product marketers find roles. We keep only what's needed and remove contact details
Member badge countsA total count from HubSpot, no personal data copiedLegitimate interests (assessment in our records)
Bug reports and reports about rolesYour message, page, browser, scrambled addressLegitimate interests: fixing faults and acting on reports
Member featuresSee the community privacy noticeContract, consent and legitimate interests, explained there
Handling legal claims, complaints and requests from authoritiesWhatever is relevantLegitimate interests, or legal obligation

Where we rely on legitimate interests, we've weighed our interests against yours, and you can object (section 11). We don't ask for special category data, like health or ethnicity. Please don't include it in anything you send us.

8. Automated checks and how to get a person to look again

We use some automated checks. None of them makes a decision about you as a person that has a legal or similarly significant effect without a person involved, but here's how they work:

  • Role classifier. Rules read the title and description of each role from a careers page and decide whether it's a product marketing role, and which level and specialism it is. It judges roles, not people. Borderline roles go to a moderator.
  • Spam and fairness checks on employer posts. A score flags signs of spam (like asking candidates for money), and a separate check flags wording that may be discriminatory. These flags only tell our moderators where to look: a person approves, rejects or asks for changes on every post that reaches review.
  • Automatic declines. A small number of submissions that are clearly automated spam (a hidden form field filled in, or the cracked-software titles that flooded our old board) are declined without a moderator.
  • Automatic hiding. A role reported by three separate people is hidden until a moderator checks it.
  • Limits. Sign-in, posting, reports, alerts and intro requests have rate limits. If you hit one, try again later.
  • Membership check. For member features we check PMA's membership records to see whether your membership is current.

If you think one of these got something wrong, email jobs@productmarketingalliance.com and a member of the PMA team will review it, explain what happened and put it right if we made a mistake.

9. Who we share data with

We don't sell personal data. We use these service providers (processors), who act only on our instructions under a data processing agreement:

Service providers
ProviderWhat they doWhere
Vercel Inc.Hosting, request logs and Web AnalyticsUnited States, with servers worldwide
SupabaseDatabase and logo storageUnited States (AWS us-east-1, Virginia)
ResendSending emails (alerts, verification, notifications)Sent from Ireland; account data and email logs held in the United States
CloudflareTurnstile bot checks, only if we turn them on (our default bot check, ALTCHA, is self-hosted and shares nothing)Global network, including the United States
HubSpotPMA's membership records, used for member features and badge countsEuropean Union (HubSpot's EU data centre)
Slack (Salesforce)Alerts to the PMA team about new posts, bug reports and abuse limits, and, if a member links it, member notificationsUnited States
GitHub (Microsoft)Our private code repository, which receives bug reportsUnited States
GoogleStaff sign-in, and telling Google when a job page is added or removed (only the page address)United States

Other recipients, who decide for themselves how they use the data:

  • LinkedIn, which runs the sign-in and shares your details with us when you sign in with it.
  • Employers and members, but only what you choose to share: a member's details go to an employer or another member only when the member accepts that specific intro.
  • The public sees employer posts (including any hiring contact you name) and company pages. Never job-seeker, alert or member account data.
  • Our professional advisers, insurers, and the police, regulators or courts where the law requires it.
  • A buyer of our business, if PMA or the Product Marketing Jobs Board is ever sold, under the same protections.

10. International transfers

Some providers above store or process data outside the UK, mainly in the United States. Where a country doesn't have UK adequacy regulations, we rely on the provider being certified under the UK Extension to the EU-US Data Privacy Framework (the "UK-US data bridge"), or on the UK International Data Transfer Addendum to the EU standard contractual clauses in the provider's data processing agreement. Email jobs@productmarketingalliance.com for a copy of the relevant safeguards.

When a member accepts an intro from an employer outside the UK, their details go to that employer because the member chose to share them with that named company.

11. How long we keep data

Retention
DataHow long
Unconfirmed job alerts7 days after the last confirmation link
Confirmed job alerts, their send history and our record of the alert emails sentUntil you unsubscribe, then deleted at once
Record of an alert sign-up we refused because the address is on the "do not email" list12 months
"Do not email" list (bounces and spam complaints)Kept so we never email the address again, for as long as we send email
Security counters (scrambled network address)Up to 2 days
Email verification linksExpire after 24 hours
Employer accounts, company details and postsWhile the account is in use. Inactive accounts are not yet deleted automatically. Ask us any time and we'll delete what we don't need to keep
Invoices and orders6 years, as UK tax and company law requires
Moderation records and reportsKept with the post they relate to; not yet deleted automatically
Roles from careers pagesShown while open; closed roles kept so old links work, not yet deleted automatically
Apply clicks and daily view countsNo personal data; kept for employer statistics
Bug reportsNot yet deleted automatically; held in PMA's shared bug tracker
Member featuresSee the community privacy notice

12. Your rights

You have the right to:

  • ask for a copy of your personal data, and to have it in a portable format;
  • have inaccurate data corrected;
  • have your data deleted, or its use restricted, in some circumstances;
  • object to our use of your data where we rely on legitimate interests (including the member counts and analytics);
  • withdraw consent at any time (for example, unsubscribing from an alert), without affecting what we did before;
  • not be subject to a solely automated decision with legal or similarly significant effects, and to ask a person to review any automated check (section 8).

Email jobs@productmarketingalliance.com to use any of these. Members can download or delete their data themselves from their account. We'll reply within one month, and may ask you to confirm who you are first.

Complaints. If you're unhappy with how we've used your data, please complain to us first at jobs@productmarketingalliance.com. We'll acknowledge your complaint within 30 days and tell you what we've done. You can also complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint or 0303 123 1113.

13. Children

The Product Marketing Jobs Board is for adults looking for professional roles. It isn't aimed at children, and member features need you to confirm you're 18 or over. If you think a child has given us their data, email jobs@productmarketingalliance.com and we'll delete it.

14. Keeping data safe

Only our server code can reach the database, and access for the PMA team is limited to the people who run the board, through Google sign-in. Sign-in cookies are signed so they can't be forged, and we never store raw IP addresses in our database. No system is perfect: if something goes wrong that puts you at risk, we'll tell you and the ICO as the law requires.

15. Changes to this notice

We'll update this notice when what we do changes, and change the version and date at the top. If a change affects how we use data you've already given us, we'll tell you before it applies.