Last updated: October 24, 2026
This Privacy Policy explains what information Mondo Pizzaiolo ("we," "us") collects when you use our marketplace, how we use it, and the choices you have — including how to delete your data. It applies to Pizzaioli and Pizzerias alike.
Verification evidence is reviewed privately through our Gmail inbox or your restricted file link; the website keeps only the admin checklist and dates. To request correction or removal of this material, email mondopizzaiolo@gmail.com. Account deletion does not automatically remove email attachments or copies in your own file service. We request a redacted ID showing name and photo, a CV, original work photos/video and evidence for claimed employment to review an optional verification request. These materials are not published, forwarded to employers or included in automated translations. Only the badge outcome is public. Google Gmail processes email submissions; restricted file links remain with your chosen provider.
When you create an account, we collect your name, email address, and profile photo through Google Sign-In or Sign in with Apple. As you use the Platform, we also collect what you add to your profile (bio, experience, specialties, location, social links) and what you do with it — job applications, messages sent to connections, connection requests, and job postings you create. If you claim a Pizzeria listing, we collect the verification proof you submit (a Google Business Profile link or a business document). We also collect basic usage information, such as which pages and listings you view, to keep the Platform running well and to show you and business owners simple stats like profile and job views.
We use your information to operate the marketplace: to show your public profile to other users, to connect Pizzaioli with job opportunities, to let Pizzerias review applicants, to enable messaging between connected users, to review ownership claims, and to detect and prevent spam and abuse. We do not sell your personal information to third parties, and optional advertising measurement is controlled by your cookie choice.
Your profile (name, photo, location, bio, experience or business details) is visible to anyone browsing the Platform, similar to other professional networking or job sites. Your email address is not shown publicly — it's only used for account access and, if you claim a listing, to identify you as the verified owner. Messages you send are only visible to you and the recipient.
To help visitors read public profiles and job posts in their language, we send their public descriptions, job titles and requirements to OpenAI through Netlify AI Gateway. We cache translated versions separately; the original remains available. Private messages, account credentials, private contact fields and uploaded documents are not included in translation requests. Automatic translations may contain mistakes.
We use Google Sign-In and Sign in with Apple to authenticate accounts, and Netlify to host the Platform and store data. These providers process data on our behalf to keep the Platform running — they don't use it for their own purposes.
In the iPhone app, notifications are optional. If you enable them, we store your Apple push device token, the account and session it belongs to, your category preferences and delivery status. We use Apple Push Notification service to send generic alerts about messages, applications, interviews and reminders; notification text does not contain private message contents or CV details. You can change these preferences in Account > Notifications or iPhone Settings. Device registrations expire unless renewed and are invalidated when their session is revoked.
Sign in with Apple provides an identity token and, in the latest app, an authorization code. The server exchanges that code with Apple and stores an encrypted authorization token to revoke Apple authorization when you delete your account. Older Apple-linked accounts may need to link Apple again using the latest app before deletion can be completed. These credentials are not published or shared with employers or sponsors.
Blocking a member prevents new messages and connection requests in both directions and keeps your existing conversation history. Reports are stored for administrator review; reporting does not automatically suspend another account. You can manage your own blocked members in Account.
With a fresh acceptance of our cookie notice, we use Microsoft Clarity on selected public website pages to understand clicks, scrolling and navigation through heatmaps and masked session replays. This helps us improve buttons, page layouts and access to resources. Clarity does not load before acceptance or after you choose necessary cookies only. We exclude signed-in visits, profiles, account and application pages, messages, CVs, verification and admin areas, and pages or referring URLs containing query strings or fragments. Browser Do Not Track and Global Privacy Control signals also disable Clarity. All page content is masked; we do not send names, emails, account identifiers or form values through custom events or the Identify API. Custom events use fixed action labels such as clicking a sign-up button, not successful registration claims.
Microsoft processes Clarity usage data under the Microsoft Privacy Statement. Clarity may receive browser/device information, page URLs and network information as described there. We grant analytics storage only and deny advertising storage in Clarity. Microsoft states that ordinary playback data is retained for 30 days; click/heatmap data and labeled or favorited recordings can be retained for 9 months. Use “Cookie preferences” in the footer to withdraw consent; the page reloads to unload optional tracking. Data already sent is not undone by changing the browser preference. This website integration does not add Clarity to the native iPhone app.
If you accept analytics cookies, we keep a source category (such as ChatGPT, Claude, Google or unknown) in this tab for up to 30 minutes. We use it to count page views and successful registrations, applications, enquiries and job posts by source. This report stores daily totals, not your search queries, full referring URLs or a visitor identifier. Declining leaves successful actions unattributed. These source measurements also respect browser Do Not Track and Global Privacy Control signals.
The optional Meta Pixel loads only after you accept cookies, to measure advertising activity. Choosing necessary cookies only keeps it disabled. We use your browser's local storage to keep you signed in between visits — this stays on your device and is cleared when you log out. We also save your preferred reading language on your device until you change it or clear site data.
We keep your account information for as long as your account is active, so the Platform can function (showing your profile, your work history, your applications). If you delete your account, we remove your profile and personal data as described below.
You can review and update most of your information at any time from your profile settings. You can permanently delete your account and personal data using the "Delete my data" option on your profile settings page — this removes your profile, work history links, messages, connections, and (for Pizzerias) closes your job postings. This action can't be undone. If you'd rather we handle a deletion or access request manually, you can also reach out through the contact options on the Platform.
Mondo Pizzaiolo is intended for people 18 and older. We don't knowingly collect information from anyone under 18.
Mondo Pizzaiolo connects users worldwide, so your information may be processed in a country other than your own. Wherever it's processed, we apply the protections described in this policy.
We take reasonable measures to protect your information, including rate-limiting and spam protections on public forms and restricting access to administrative tools. No system is completely secure, so we can't guarantee absolute security.
We may update this Privacy Policy from time to time. We'll update the "Last updated" date above when we do.
Questions about this policy or your data? Reach out through the contact options available on the Platform.
See also our Terms of Service.
Welcome perk codes are linked to a hashed marketplace account identifier so each account receives one code per sponsor. The sponsor verifies the code without receiving your email address. First-time customer eligibility is self-declared; the sponsor’s stated perk conditions apply. Authorized brand representatives use a separate Google login and can see only their own contract, aggregate reports and opted-in business information.
Sponsor introductions are labeled Sponsored and stored in your private Mondo partner inbox. Withdrawing contact permission blocks new introductions; it does not erase an introduction already received. Managed outreach is sent by Mondo, not by exporting a recipient list to a sponsor. An unsubscribe creates a permanent suppression record keyed by a hashed email address; there is no sponsor or operator feature to clear that record. Reports distinguish recorded analytics, perk claims and SMTP acceptance from unique visitors, sales or inbox delivery.
Marketplace access remains free. Partner-offer consent is separate from account registration and newsletter preferences. Offers are sent by Mondo Pizzaiolo; sponsors do not receive a raw member database or email addresses. Direct sponsor contact requires a verified, claimed pizzeria and a separate opt-in. Current flour, oven and monthly volume are optional private fields, shared only with explicit permission after ownership verification. Manage or withdraw these choices in Partner preferences.
Sponsor placement views and clicks are recorded only when you accept analytics. These records contain the sponsor, placement, action and time; they exclude member identities, email addresses and profile or job identifiers. Counts measure recorded interactions, not independently verified unique people or sales.
In the private Work permissions area you may submit your own relevant evidence for a country review. Copies are encrypted and available only to you and authenticated Mondo administrators, not employers or public profiles. They are not sent to analytics or advertising services. Hide unnecessary document numbers, addresses and barcodes. Copies become inaccessible after 30 days and are removed by existing maintenance; you may remove your copy earlier. A minimal country decision and review date remain until account deletion. Removing a copy does not itself revoke an existing decision. EU citizenship is an explicit declaration, not inferred from origin or residence. Marketplace review does not replace employer checks, certify immigration status or grant a visa.