Privacy Policy

1. Information We Collect

We collect information in the following ways:

2. How We Use Your Information

We use your information to:

• Provide, operate, and improve the hiring and assessment platform
• Analyze candidate applications using AI-powered tools
• Enable assessments, mock interviews, and employer–candidate communication
• Send important notifications, including account updates and security alerts
• Enhance platform security, detect fraud, and prevent misuse
• Comply with legal requirements and enforce policies

3. Information Sharing

4. Data Security

We follow industry-standard security practices including:

• Encryption (in transit and at rest)
• Secure authentication and access control
• Firewalls, WAF (Web Application Firewall), and intrusion monitoring
• Regular audits and vulnerability testing
• Strict internal access policies

Despite our safeguards, no online platform can guarantee absolute security.

5. Data Retention

We retain personal data only as long as necessary for:

• Providing services
• Maintaining legal or business records
• Security and fraud prevention

Typically:

• Account data: kept for the duration of your account
• Business records: retained for 3 years after account closure
• Assessment and resume data: deleted upon employer request or account deletion unless legally required to retain

6. Legal Basis for Processing

Depending on your jurisdiction, we process data based on:

• Contractual necessity – to provide platform services
• Legitimate interests – improving services, security, fraud prevention
• Consent – for marketing communications
• Legal obligation – compliance with applicable laws

7. Data Processors

We use reputable third-party processors including, but not limited to:

• Amazon Web Services (AWS) – hosting, infrastructure, storage
• Stripe – payments
• Email and communication providers
• AI processing microservices (internal to COCO AI)
• ipapi.co – IP-based geolocation used on the public job search page to automatically detect your approximate country and city for a better search experience. Your IP address is sent to ipapi.co solely for this purpose; no location data is stored by us as a result of this process.

All processors follow strict data protection agreements.

8. International Data Transfers

Your data may be processed in countries outside your region.

We ensure:

• Adequate data protection safeguards
• Standard contractual clauses where required
• Compliance with GDPR, UAE PDPL, and other relevant regulations

9. Your Rights

Depending on your region, you may have rights to:

• Access your personal data
• Update or correct inaccurate information
• Delete your data
• Request data portability
• Object to processing
• Withdraw consent for marketing at any time

To exercise these rights, email us at info@cjobfit.com.

10. Cookies & Analytics

We use only essential cookies for:

• Login sessions
• Platform functionality
• Security verification

We do not use third-party advertising cookies.
We do not run invasive analytics or tracking tools.

11. Children's Privacy

Cjobfit is not intended for children under 16.
We do not knowingly collect information from minors.

12. Changes to This Policy

We may update this Privacy Policy occasionally.
The updated version will be posted with a new "Last Updated" date.

13. Privacy & Data Protection Contact

We are committed to protecting your personal data and ensuring compliance with applicable data protection laws including GDPR and UAE PDPL.

For all privacy-related inquiries, data protection questions, or to exercise your rights, please contact our privacy team:

We will respond to all privacy requests within 30 days as required by GDPR. For urgent matters, please mark your email as "URGENT".

Note: As a growing startup, we currently handle data protection matters through our dedicated privacy team. As we scale, we will appoint a formal Data Protection Officer (DPO) if required by law.

14. Automated Decision-Making & AI Processing

We use AI technology to assist in candidate assessment, including:

• Resume analysis and skill matching
• Interview transcript analysis
• Candidate scoring and recommendations
• Assessment evaluation

15. Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority:

• UAE: UAE Data Protection Authority or relevant regulatory body
• EU Residents: Your local Data Protection Authority in your country of residence
• Other Jurisdictions: Your local data protection or privacy regulatory authority

However, we encourage you to contact us first at privacy@cjobfit.com so we can address your concerns directly. We are committed to resolving any privacy issues promptly and fairly.

16. Data Breach Notification

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will:

• Notify affected users within 72 hours of becoming aware of the breach
• Inform relevant supervisory authorities as required by law
• Provide clear information about the nature of the breach
• Explain the likely consequences and mitigation measures
• Describe the steps we are taking to address the breach

We maintain robust security measures and incident response procedures to minimize the risk of data breaches and respond effectively if one occurs.