Onlano

Privacy Policy

What data we collect, why we collect it and how we protect it.

Last updated: 14 May 2026

This Privacy Policy explains how Onlano (a product of the team at Webmarkaz.net) collects, uses, stores and shares personal information when you use onlano.com and any related services (the "Platform").

We keep this short, plain and honest. If anything is unclear, write to us at onlano@onlano.com.

1. Who is responsible for your data

The data controller is the team operating Onlano under Webmarkaz.net. For any privacy question, data access request, correction request or deletion request, contact us at onlano@onlano.com. We aim to reply within seven business days.

2. What we collect

We collect only what is required to run the Platform.

Account information. Name, email address, password hash, account type (Candidate, Company, Agency) and the date you joined.

Profile information. Phone number, location, country, headline, basic CV summary, expected salary, preferred work mode, portfolio URL and the CV files you upload.

Employer information. If you post jobs, we store your company or agency name, type, location, country, website, "about" text and verification status.

Activity information. Jobs you save, applications you submit, jobs you publish and admin actions if you have an admin role.

Billing information. When you buy featured listings or posting credits, Whop processes the payment. Onlano stores only the plan ID, purchase amount, currency, payment status, the Whop receipt ID and remaining credits. We never see or store your full card number.

Technical information. Standard server logs (IP address, user agent, timestamps), session cookies for authentication and a theme preference cookie. We do not run third-party advertising trackers across the site except where Google AdSense is explicitly enabled by an admin.

3. Why we use your data

We use your data only to:

  • Create and secure your account.
  • Show you relevant jobs, applications and saved content.
  • Let employers receive your application when you submit one.
  • Process payments for posting credits and featured listings via Whop.
  • Send transactional emails such as verification, password reset and receipts.
  • Detect and block abuse, fraud and policy violations.
  • Comply with legal obligations and respond to lawful requests.

We do not sell personal data. We do not share your CV or application with anyone except the employer you applied to and the Onlano team members who need to operate the Platform.

4. Legal bases

Where the GDPR or similar law applies, we rely on:

  • Performance of a contract to provide the account, job posting and application features you sign up for.
  • Legitimate interests to keep the Platform secure, prevent abuse and improve the service.
  • Consent for optional features like marketing emails (you can withdraw consent at any time).
  • Legal obligation when the law requires us to keep records (for example, tax invoices for paid plans).

5. Who we share data with

We share data only with the providers needed to run Onlano:

  • Whop — payment processing. See the Whop Privacy Policy.
  • Transactional email provider — sending verification, reset and receipt emails.
  • Hosting and infrastructure providers — storing the database and serving the site.
  • Employers you apply to — your application content and the CV you attach.

We may also disclose information when required by law, to enforce our Terms or to protect the rights and safety of Onlano, our users or the public.

6. International transfers

Some of our providers may process data outside your country. We rely on the standard contractual clauses or equivalent safeguards offered by those providers. If you need details about a specific transfer, contact us.

7. How long we keep data

We keep account, profile and CV data for as long as your account is active. If you delete your account or ask us to delete your data, we remove it within thirty days, except where we are required by law to keep certain records (for example, billing receipts for tax purposes).

Job listings remain visible while published and are kept in our database for audit purposes after they expire.

8. Your rights

Depending on where you live, you may have the right to:

  • Access the personal data we hold about you.
  • Ask us to correct inaccurate data.
  • Ask us to delete your data ("right to be forgotten").
  • Ask us to limit how we use your data.
  • Receive a copy of your data in a portable format.
  • Object to processing based on legitimate interests.
  • Withdraw consent for marketing communications at any time.
  • File a complaint with your local data protection authority.

To exercise any of these rights, email onlano@onlano.com from the email address on your account.

9. Cookies

Onlano uses a small number of strictly necessary cookies:

  • A session cookie that keeps you signed in.
  • A theme cookie that remembers light or dark mode.
  • A CSRF cookie that protects forms from cross-site attacks.

If Google AdSense is enabled by an Onlano admin, AdSense will set its own cookies. You can manage those preferences via your Google account settings.

10. Security

We protect data using TLS in transit, hashed passwords, scoped database access, signed cookies, role-based admin permissions and routine dependency updates. No service can guarantee perfect security, so we ask that you choose a strong password and keep it private.

11. Children

Onlano is intended for adults seeking work or hiring others. We do not knowingly collect data from children under 16. If you believe a child has created an account, contact us and we will remove it.

12. Changes to this policy

We may update this Privacy Policy as the service grows or as the law changes. When we make material changes, we will update the "Last updated" date and, where appropriate, notify you in-app or by email.

13. Contact

Privacy questions, data requests and complaints can be sent to onlano@onlano.com. A human on the team reads every message.