1. What information we collect
- Account information: name, email address, password (hashed), and role when you register.
- Profile information: location, skills, work experience, education, availability, salary expectations, certifications, and profile photo if provided.
- Application data: job applications, cover letters, assessment answers, and application status history.
- Employer data: company name, industry, location, verification status, and job postings.
- Quick Task data: task descriptions, location, budget, tasker assignments, and completion status.
- Career Support data: eligibility interest records, skills assessments, and funding applications.
- Communication data: messages sent between candidates and employers through the platform.
- Usage data: pages visited, search queries, job views, and feature interactions (collected server-side via analytics events).
- Device and browser information as required for security logging.
2. How we use information
- To operate your account and provide platform features.
- To match candidates with relevant job opportunities and Quick Tasks.
- To allow employers and recruiters to review applications for their job postings.
- To process Career Support eligibility assessments and funding interest.
- To send notifications about application status, messages, and platform activity.
- To improve matching quality, platform performance, and user experience.
- To detect and prevent fraud, abuse, and security incidents.
- To comply with applicable laws and respond to legal requests.
3. How information is shared
- Your profile information is shared with employers and recruiters when you apply to their job postings.
- Employer-posted jobs are publicly visible to all platform users.
- Quick Task details are visible to eligible taskers in the relevant category and location.
- We do not sell your personal data to third parties.
- We may share data with service providers (hosting, analytics, email delivery) under data processing agreements.
- We may disclose data if required by law, court order, or to protect platform safety.
4. Employer and recruiter access
- Employers can only view applications submitted for their own job postings.
- Recruiters are scoped to the employer workspace they are assigned to.
- Employers cannot access the profiles of candidates who have not applied to their jobs.
- Admin access is reserved for platform operations, support, and safety enforcement.
5. Data retention
- Account data is retained for as long as your account is active.
- Application data is retained for a minimum of 24 months for audit and dispute purposes.
- Analytics events are retained for 12 months and then aggregated.
- You may request deletion of your account and associated data through the help centre.
6. Security
- Passwords are never stored in plain text — they are hashed by Supabase Auth.
- Service-role database keys are never exposed to browser code.
- Row Level Security (RLS) is enforced at the database level to prevent unauthorized data access.
- Rate limiting is applied to sensitive API routes to prevent abuse.
- We conduct regular security reviews of authentication, authorization, and data access patterns.
7. Your rights
- Access: You can view most of your data through your dashboard.
- Update: You can update profile information through the dashboard.
- Deletion: You may request deletion of your account by contacting support.
- Export: Data export requests can be submitted through the help centre.
- Opt-out: You may opt out of non-essential communications in account settings.
8. Cookies and tracking
Kaziin uses session cookies required for authentication. We do not use third-party advertising cookies. Server-side analytics events are used to improve platform performance without cross-site tracking.
9. Children
Kaziin is not intended for users under 18 years of age. We do not knowingly collect information from minors.
10. Changes to this policy
We may update this Privacy Policy as the platform evolves. Material changes will be communicated through the platform or by email. This policy should be reviewed by qualified legal counsel before broad public launch.
11. Contact
For privacy questions, data requests, or concerns, contact us through the Kaziin Help Centre. Formal data protection inquiries should be directed to legal@kaziin.com (placeholder — replace before launch).