Privacy Policy

At ZyJobs (https://zyjobs.com), we prioritize the privacy and security of your personal data. This Privacy Policy details our principles for collecting, processing, storing, and safeguarding User information in compliance with the Indonesian Personal Data Protection Law (UU No. 27/2022) and international General Data Protection Regulation (GDPR) frameworks.

We collect only the essential data required to provide intelligent career services:

• Account & Authentication Data: Valid email address, cryptographically hashed passwords (salted with bcrypt), and OTP verification status.
• Master Career Profile Data: Full name, contact information, portfolio/LinkedIn links, work histories, educational backgrounds, certifications, and technical/soft skills.
• Telemetry & Security Data: Client IP addresses (for automated brute-force rate limiting), browser User-Agent strings, and timestamp logs.
• Billing & Transaction Records: Order references, payment methods (QRIS/USDT), package tiers, and public on-chain Transaction Hashes (TxHash). We never request or store private crypto wallet keys or debit/credit card CVV details.

Your data is processed strictly for the following operational objectives:

• Synthesizing and tailoring dynamic resume bullet points to match target job descriptions.
• Computing TF-IDF semantic keyword relevance scores and positional ATS compliance ratings.
• Curating real-time verified remote job recommendations on your user dashboard.
• Delivering 6-digit email OTP verification codes and critical security notifications.

To execute advanced AI resume tailoring, user profile excerpts are securely transmitted via encrypted API endpoints:

• AI Model Providers (OpenRouter / Anthropic / Google): Processed via enterprise endpoints with strict Zero Data Retention for Training policies (User data is never used to train public LLM models).
• Email Delivery Infrastructure (Gmail SMTP TLS): Dedicated to transmitting one-time authentication passcodes via STARTTLS port 587.
• Blockchain Ledger Verification (BscScan API): Used to verify on-chain USDT deposit transactions on Binance Smart Chain.

We deploy robust cybersecurity controls to protect your career data:

• Transport Layer Security (TLS 1.3 / HTTPS): Complete end-to-end data encryption in transit via Let's Encrypt SSL certificates.
• Cryptographic JWT Sessions: Stateless authentication signed with HMAC-SHA256 algorithms and persistent server secret keys.
• Irreversible Password Hashing: Passwords are protected with high-work-factor bcrypt hashing.
• Isolated Production Database: Production SQLite storage is hardened on isolated Linux directories with restricted permissions.

Under international PDP and GDPR frameworks, you hold full authority over your data:

• Right of Access & Rectification: Inspect and update your master profile data anytime via the Profile tab in the Dashboard.
• Right to Data Portability: Download your generated ATS-optimized PDF resumes anytime without watermarks.
• Right to Erasure (Right to be Forgotten): Request permanent deletion of your account, transaction logs, and profile records by contacting our support team.

ZyJobs employs only strictly necessary cookies and session tokens:

• zy_lang: Functional cookie storing your language preference (ID / EN) for 1 year.
• token: Encrypted JWT credential stored in local/session storage to maintain secure authentication.

We do not deploy intrusive third-party cross-site advertising cookies.

We may revise this Privacy Policy periodically to accommodate platform feature enhancements, architectural upgrades, or statutory updates. The effective revision date will always be displayed at the top of this document.

For privacy inquiries, rights enforcement, or compliance clarifications, please contact our Data Protection team: