Version 2026-10-19. This page is a draft awaiting legal review, and it may change before the Product Marketing Jobs Board launches publicly.
1. Who we are
The Product Marketing Jobs Board is run by Product Marketing Alliance Limited, a company registered in England and Wales (company number 12181066), registered office 147 De Beauvoir Road, London, N1 4DL, United Kingdom. We're the controller of the personal data described here, and we're registered with the Information Commissioner's Office (ICO) under number ZA706305.
For anything about your data on the Product Marketing Jobs Board, email jobs@productmarketingalliance.com. You can also write to us at the address above. We haven't appointed a data protection officer. Product Marketing Alliance's main privacy policy covers its other services, such as membership, events and the newsletter.
2. If you're browsing or looking for a job
You don't need an account to browse or apply, and we don't ask for your name or email to do either. When you apply, you go to the employer's own site, and the employer handles your application.
- Apply clicks. We record which role was clicked, where on the page and when, so employers can see how their post is doing. We don't store your IP address or anything else about you with it.
- Page views. We keep a daily count of views per role, with nothing about who viewed it.
- Analytics. Vercel Web Analytics tells us which pages and filters are used. It doesn't use cookies, we never send it your search text (only how long a search was), and it doesn't record your IP address. If your browser sends Global Privacy Control or Do Not Track, we send nothing at all. See our cookie notice.
- Security checks. Forms are protected by ALTCHA, a bot check we run ourselves (self-hosted, no third party): your browser solves a small puzzle in the background. It uses no cookies and no personal data; we only keep a one-way fingerprint of the solved puzzle for a few days so it can't be used twice. Cloudflare Turnstile is only used if we ever turn it on instead, and it would then check you're not a bot using your IP address and browser details. To stop abuse we also keep short-lived counters keyed by a one-way scrambled version of your network address (never the address itself), which we delete within 2 days.
- Reports. If you report a role, we store your reason, any details you write and a scrambled, salted version of your network address, so the same person can't report a role many times.
- Bug reports. If you use the "Report a bug" button, we store your message, the page address, your browser type and a scrambled version of your IP address. The report goes to PMA's internal bug tracker and, without your IP address, to our private code repository on GitHub and our team's Slack.
- Hosting logs. Our host, Vercel, processes your IP address and browser details to deliver pages and keeps short-lived request logs (a few days at most) for security and fault-finding.
3. Job alerts
If you set up a job alert, we store your email address, the filters you chose and how often you want to hear from us, plus a record of each alert email we send you (when, and your address with most of it hidden). Nothing else: no name and no IP address.
- We email a link to confirm the alert and send nothing else until you do. Alerts you don't confirm are deleted 7 days after the last confirmation link we sent.
- We keep a record of which roles we've sent you, so you don't get the same one twice. Rarely, if our email provider's answer is lost, a role can appear in the next email too.
- Every alert email has a one-click unsubscribe. Unsubscribing deletes the alert and its history straight away.
- If an alert email bounces or is marked as spam, we keep the address on a "do not email" list so we never send to it again.
- Alerts are sent through our email provider, Resend, from the Product Marketing Jobs Board at mail.productmarketingalliance.com. We never add tracking pixels.
4. If you post a role
- From LinkedIn, when you sign in: your LinkedIn account ID, name, profile picture link and email address, and whether LinkedIn has verified that email. We never post to LinkedIn or see your connections.
- Your work email, which we verify with a one-time link, to confirm you work for the company. We check the email domain's mail records too.
- Your job title, your company's details (name, website, LinkedIn page, size, industry, logo and business address) and whether you're a recruitment agency. The address is used for verification and invoicing and isn't shown on the board.
- Your posts, including any hiring contact you choose to name (shown on the post: only name someone who has agreed), and views and apply clicks so you can see how they're doing.
- Terms acceptance: when you accepted our terms and which version.
- Promotions and invoices: the invoice email, purchase order number, tax ID and billing details you give us.
- Moderation records: our decisions on your posts, spam checks, reports and any bans, with the moderator who made them.
- Emails we send you about your posts and promotions, and whether they were delivered.
5. If you're a PMA member
PMA members can sign in to the Product Marketing Jobs Board for member features: a member account, a "happy to intro" offer, an anonymised talent profile that verified employers can search, intro requests, and optional notifications on PMA's Slack. These features are being piloted and aren't open to everyone yet. How they use your data, and the choices you have, are explained in full in the community privacy notice, which you see before you use any of them.
"PMA members work here" counts. On some company pages we show an approximate number of current PMA members who work there, such as "10+", and never fewer than 3. To work this out we ask PMA's membership records (HubSpot) how many current members have an email address at the company's web domain. We only receive the total: no names or emails are copied into the Product Marketing Jobs Board. You can ask us to leave you out of these counts at any time by emailing jobs@productmarketingalliance.com.
6. People named in roles from public careers pages
Most roles on the Product Marketing Jobs Board come from companies' public careers pages and the public job feeds of their recruitment systems (Greenhouse, Lever, Ashby, Workable, SmartRecruiters, Recruitee, Personio and Teamtailor). A job ad sometimes names a person, such as the hiring manager. We store only the title, location, salary and other job details, plus a short summary of up to 600 characters, and we remove email addresses and phone numbers from that summary before anything is shown. We link to the original ad rather than copying it. We check every role daily and close it as soon as it's gone from the careers page. If you're named in a role on the Product Marketing Jobs Board and want it removed, email jobs@productmarketingalliance.com. Companies can ask us to stop listing their roles with our listing removal form.
7. Why we use your data, and our lawful basis
| Purpose | Data | Lawful basis (UK GDPR Art 6) |
|---|---|---|
| Running employer accounts, publishing and moderating posts, promotions and invoices | Employer account, company, posts, orders | Contract (Art 6(1)(b)) |
| Keeping accounting and tax records | Invoices and orders | Legal obligation (Art 6(1)(c)) |
| Verifying employers, preventing spam, scams and abuse, moderation records, bans, security checks and rate limits | Account, work email, moderation records, scrambled network addresses, bot-check results (Turnstile signals only if it is enabled) | Legitimate interests (Art 6(1)(f)): keeping job seekers safe and the board trustworthy |
| Job alerts | Email, filters, send history | Consent (Art 6(1)(a)): you asked for them and confirmed. Unsubscribe any time |
| Showing apply clicks and views to employers | Counts with no personal data | Legitimate interests: showing employers how their post performs |
| Site statistics | Vercel Web Analytics | Legitimate interests: improving the board |
| Listing roles from public careers pages | Job details and short summaries, which may name a person | Legitimate interests: helping product marketers find roles. We keep only what's needed and remove contact details |
| Member badge counts | A total count from HubSpot, no personal data copied | Legitimate interests (assessment in our records) |
| Bug reports and reports about roles | Your message, page, browser, scrambled address | Legitimate interests: fixing faults and acting on reports |
| Member features | See the community privacy notice | Contract, consent and legitimate interests, explained there |
| Handling legal claims, complaints and requests from authorities | Whatever is relevant | Legitimate interests, or legal obligation |
Where we rely on legitimate interests, we've weighed our interests against yours, and you can object (section 11). We don't ask for special category data, like health or ethnicity. Please don't include it in anything you send us.
8. Automated checks and how to get a person to look again
We use some automated checks. None of them makes a decision about you as a person that has a legal or similarly significant effect without a person involved, but here's how they work:
- Role classifier. Rules read the title and description of each role from a careers page and decide whether it's a product marketing role, and which level and specialism it is. It judges roles, not people. Borderline roles go to a moderator.
- Spam and fairness checks on employer posts. A score flags signs of spam (like asking candidates for money), and a separate check flags wording that may be discriminatory. These flags only tell our moderators where to look: a person approves, rejects or asks for changes on every post that reaches review.
- Automatic declines. A small number of submissions that are clearly automated spam (a hidden form field filled in, or the cracked-software titles that flooded our old board) are declined without a moderator.
- Automatic hiding. A role reported by three separate people is hidden until a moderator checks it.
- Limits. Sign-in, posting, reports, alerts and intro requests have rate limits. If you hit one, try again later.
- Membership check. For member features we check PMA's membership records to see whether your membership is current.
If you think one of these got something wrong, email jobs@productmarketingalliance.com and a member of the PMA team will review it, explain what happened and put it right if we made a mistake.
9. Who we share data with
We don't sell personal data. We use these service providers (processors), who act only on our instructions under a data processing agreement:
| Provider | What they do | Where |
|---|---|---|
| Vercel Inc. | Hosting, request logs and Web Analytics | United States, with servers worldwide |
| Supabase | Database and logo storage | United States (AWS us-east-1, Virginia) |
| Resend | Sending emails (alerts, verification, notifications) | Sent from Ireland; account data and email logs held in the United States |
| Cloudflare | Turnstile bot checks, only if we turn them on (our default bot check, ALTCHA, is self-hosted and shares nothing) | Global network, including the United States |
| HubSpot | PMA's membership records, used for member features and badge counts | European Union (HubSpot's EU data centre) |
| Slack (Salesforce) | Alerts to the PMA team about new posts, bug reports and abuse limits, and, if a member links it, member notifications | United States |
| GitHub (Microsoft) | Our private code repository, which receives bug reports | United States |
| Staff sign-in, and telling Google when a job page is added or removed (only the page address) | United States |
Other recipients, who decide for themselves how they use the data:
- LinkedIn, which runs the sign-in and shares your details with us when you sign in with it.
- Employers and members, but only what you choose to share: a member's details go to an employer or another member only when the member accepts that specific intro.
- The public sees employer posts (including any hiring contact you name) and company pages. Never job-seeker, alert or member account data.
- Our professional advisers, insurers, and the police, regulators or courts where the law requires it.
- A buyer of our business, if PMA or the Product Marketing Jobs Board is ever sold, under the same protections.
10. International transfers
Some providers above store or process data outside the UK, mainly in the United States. Where a country doesn't have UK adequacy regulations, we rely on the provider being certified under the UK Extension to the EU-US Data Privacy Framework (the "UK-US data bridge"), or on the UK International Data Transfer Addendum to the EU standard contractual clauses in the provider's data processing agreement. Email jobs@productmarketingalliance.com for a copy of the relevant safeguards.
When a member accepts an intro from an employer outside the UK, their details go to that employer because the member chose to share them with that named company.
11. How long we keep data
| Data | How long |
|---|---|
| Unconfirmed job alerts | 7 days after the last confirmation link |
| Confirmed job alerts, their send history and our record of the alert emails sent | Until you unsubscribe, then deleted at once |
| Record of an alert sign-up we refused because the address is on the "do not email" list | 12 months |
| "Do not email" list (bounces and spam complaints) | Kept so we never email the address again, for as long as we send email |
| Security counters (scrambled network address) | Up to 2 days |
| Email verification links | Expire after 24 hours |
| Employer accounts, company details and posts | While the account is in use. Inactive accounts are not yet deleted automatically. Ask us any time and we'll delete what we don't need to keep |
| Invoices and orders | 6 years, as UK tax and company law requires |
| Moderation records and reports | Kept with the post they relate to; not yet deleted automatically |
| Roles from careers pages | Shown while open; closed roles kept so old links work, not yet deleted automatically |
| Apply clicks and daily view counts | No personal data; kept for employer statistics |
| Bug reports | Not yet deleted automatically; held in PMA's shared bug tracker |
| Member features | See the community privacy notice |
12. Your rights
You have the right to:
- ask for a copy of your personal data, and to have it in a portable format;
- have inaccurate data corrected;
- have your data deleted, or its use restricted, in some circumstances;
- object to our use of your data where we rely on legitimate interests (including the member counts and analytics);
- withdraw consent at any time (for example, unsubscribing from an alert), without affecting what we did before;
- not be subject to a solely automated decision with legal or similarly significant effects, and to ask a person to review any automated check (section 8).
Email jobs@productmarketingalliance.com to use any of these. Members can download or delete their data themselves from their account. We'll reply within one month, and may ask you to confirm who you are first.
Complaints. If you're unhappy with how we've used your data, please complain to us first at jobs@productmarketingalliance.com. We'll acknowledge your complaint within 30 days and tell you what we've done. You can also complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint or 0303 123 1113.
13. Children
The Product Marketing Jobs Board is for adults looking for professional roles. It isn't aimed at children, and member features need you to confirm you're 18 or over. If you think a child has given us their data, email jobs@productmarketingalliance.com and we'll delete it.
14. Keeping data safe
Only our server code can reach the database, and access for the PMA team is limited to the people who run the board, through Google sign-in. Sign-in cookies are signed so they can't be forged, and we never store raw IP addresses in our database. No system is perfect: if something goes wrong that puts you at risk, we'll tell you and the ICO as the law requires.
15. Changes to this notice
We'll update this notice when what we do changes, and change the version and date at the top. If a change affects how we use data you've already given us, we'll tell you before it applies.