Privacy Policy

This Privacy Policy outlines the policies and procedures with how, when and why Xprt Jobs collects information about you whilst using the platform. By using the platform, you agree to the collection and use of information in accordance with this document.

This document was last updated and made effective on: 2024-11-19.

Table of Contents

Definitions

• "We", "our" or "us" refers to 0x234 Pty Ltd, an Australian proprietary limited company.
• "You" or "your" refers to the person or entity accessing or using the platform.
• "Platform" refers to the website, content, application, and infrastructure specifically powering Xprt Jobs.
• "Service" refers to general services offered by us or third-party providers, including functionalities or features made available through the platform or integrated third-party tools.
• "User" refers to any person or entity accessing the platform, with or without an account.
• "Job seeker" refers to users who are searching for employment opportunities through the platform.
• "Advertiser" refers to any entity posting job opportunities on the platform. This may include employers posting directly or recruiters acting on behalf of their clients.
• "Employer" refers to the organisation or individual representing an organisation that is offering a job position and seeking candidates.
• "Recruiter" refers to an individual or agency posting jobs on behalf of an employer.
• "Account" refers to a unique account created for you to access the platform or parts of the platform.
• "Device" refers to any electronic device that can access the platform, including but not limited to a computer, a cell/mobile phone or a tablet.
• "Personal data" refers to any information that relates to an identified or identifiable individual.
• "Third-party social media service" refers to any website or any social network website through which a user can log in or create an account to use the platform.
• "Usage data" refers to data collected automatically, either generated by the use of the platform or from the platform infrastructure itself (for example, the duration of a page visit).

Collecting and Using Your Personal Data

Types of Data Collected

Personal Data

When creating an account, we will ask you to provide us with personal information that can identify you. This information is used to enhance your job search or recruitment experience and facilitate connections between job seekers and employers. Personally identifiable information may include, but is not limited to:

• Name
• Location
• Email address
• Phone number (optional)

In addition, based on your usage, we automatically collect your:

• Browser type
• Device IP address
• Platform interactions (i.e. visited pages)

Profile Data

To accelerate the job application process, users can store additional information within their profile. This data is used to pre-fill applications, but users have the opportunity to tailor it on a per-application basis. Modifying profile data during the application process will not affect the original data stored in the profile, nor will it alter data already submitted in past applications. The profile itself is not accessible by any other users except for its owner, and any data sharing within the platform must be explicitly authorised by the user.

In addition to the personal data collected, profile data may include:

• Personalised introduction
• Cover letter
• Resume/CV

You maintain full control over your profile data at all times. You can update or delete any stored profile information at any time through your account settings. All profile data is used solely to facilitate the job application process.

Usage Data

Usage data is automatically collected when you use the platform, including details such as your device's IP address, browser type, browser version, the pages of the platform that you visit, the time and date of your visit, the time spent on those pages, and other diagnostic data. We also collect information that your browser sends whenever you visit the platform or when you access the platform by or through a mobile device.

In alignment with our dedication to privacy and transparency, we employ Umami analytics, which exemplifies our approach to responsible data handling. Umami is designed to respect user privacy, gathering anonymised data without using cookies or identifying individual users. This tool aids us in understanding how the platform is used, allowing us to make informed improvements. We share this information to clearly communicate our practices and uphold our commitment to safeguarding your data.

Information from Third-Party Social Media Services

The platform allows you to create an account and log in to use the platform through the following third-party social media services:

• Facebook
• Google
• GitHub
• GitLab
• LinkedIn

When you use one of these third-party services to create an account, or link them to your account on the platform, we collect only your name and primary email address, which are necessary for account creation and authentication. However, depending on the scope of access authorised by you, other information (such as profile pictures, work history, or connections) may be made available to us. While this additional information is not utilised or stored by the platform, it may be temporarily processed during the authentication process.

Cookie Data

Cookies are small files stored on your device to enhance your experience on the platform. They can be temporary (session cookies) or persistent, depending on their purpose. Each cookie, in one way or another, distinguishes you from other users, and varies by type and lifecycle. Cookies which are considered temporary remain stored in memory of your device, only for the lifetime of your current session, and are usually destroyed when your web browser is closed. On the other hand, persistent cookies have a longer lifespan and remain on your device until you destroy them (or your browser is instructed to do so).

We rely on proprietary session cookies (or first-party cookies) to maintain session continuity on the platform which are used to designate a unique session identifier to a user and keep them connected to the platform, and provide authorisation to your account within the platform. When disabled or destroyed, access to your account will not be possible and parts of the platform may not function as intended.

We utilise third-party analytical cookies which help us collect information on a user's origin and their browsing behaviours within the platform, for the purpose of statistical analysis, which gives us the ability to improve the platform structure, content and offerings. These cookies can be disabled or destroyed, but will no longer allow us to collect data to improve the platform.

For further information on cookies used, please refer to the table below:

If the device you are using is not your own (i.e. a public device, or a device belonging to your employer), we expect you to have the owner's authorisation to agree with the use of cookies on the device.

By continuing to use the platform on any device, you are confirming to us that you are authorised to do so and are agreeing to the usage of cookies.

Local Storage Data

Similar to cookies, the platform utilises a browser's local storage mechanism which enables personal data from your account to be stored on your device for an extended period of time to enhance your session performance. This data includes, but is not limited to:

• Display preferences
• Job search preferences
• Recently viewed jobs

If the device you are using is not your own (i.e. a public device, or a device belonging to your employer), prior to ending your session, we encourage you to:

• Explicitly log out of your account, if you are logged in, destroying any local storage data associated with your account.
• Instruct your browser or device to clear data associated with the platform.

Use of Your Personal Data

We may use your personal data for the following purposes:

• Account Management and Personalisation: Manage and personalise your account to provide a tailored experience.
• Communication: Contact you via email or other electronic channels, such as push notifications, with updates, important information, and notifications related to the functionalities, products, or services you use, including security updates.
• Marketing Communications: With your explicit consent, send you news, special offers, and general information about features offered by the platform.
• Customer Support: Use your data to address and resolve inquiries, bug reports, feature requests, or other support needs.
• Analytics and Improvements: Analyse usage trends, evaluate promotional campaigns, and improve the platform, marketing strategies, and user experience.
• Tax Eligibility: Determine your eligibility for the inclusion of any local taxes as required by applicable laws.
• Fraud Prevention and Security: Monitor for fraudulent activity, ensure account security, and maintain the integrity of the platform.
• Legal Compliance: Comply with legal obligations or respond to lawful requests from authorities.
• Job Matching and Recommendations: Provide tailored job opportunities or candidate suggestions based on your profile and preferences.
• Platform Optimisation: Use anonymised data to enhance platform performance and reliability.

Non-Sale of Your Personal Data

Your privacy and trust are our top priorities. We unequivocally affirm that your personal data will never be sold, rented, or leased to third parties for marketing or any other purposes. All personal data collected is used exclusively to enhance your experience of the platform and to improve the services and features we provide.

Ownership of Your Personal Data

Your personal data belongs to you, and we respect your right to own and control it. Within the platform, you can manage the profile data you provide to streamline job applications. This data is stored securely and is accessible only by you.1

For submitted applications, while we can redact your information from the platform upon request, advertisers may have duplicated or exported this data as per their hiring process. In such cases, we are unable to remove or control these copies, and you may need to contact the advertiser directly to request deletion.

Security of Your Personal Data

We are committed to protecting your personal data from unauthorised access, alteration, disclosure, or destruction. While no method of transmission over the Internet is completely secure, we take robust measures to safeguard your data, including:

• Encryption: Industry-standard encryption for secure data transmission.
• Access Control: Restricted access to authorised personnel only.
• Regular Audits: Frequent reviews to address new threats.
• Incident Response: Protocols to handle security breaches, including notifying you as required by law.

To further protect your data, we encourage you to:

• Use strong, unique passwords for your login and email accounts.
• Enable two-factor authentication (2FA) where possible.
• Be cautious with the information you share online and keep your account details confidential.

If you have concerns about data security, contact us immediately.

Sharing Your Personal Data

While we take measures to safeguard your data within the platform, it is important to understand the following:

• Users may capture or print sensitive information, such as screenshots or hard copies. Once data is captured or printed, we cannot control its handling or distribution.
• Advertisers may capture, export, or store applicant data in third-party services outside the platform as part of their hiring processes. This data may also be shared internally within the advertiser's organisation or with authorised third parties.

Advertisers are solely responsible for handling any data they export or share in compliance with their own privacy policies and legal obligations. We strongly recommend reviewing an advertiser's privacy practices before submitting sensitive information during the application process.

Once data is captured, exported, printed, or shared, it falls under the control of the recipient or user, limiting our ability to ensure its security and privacy.

Retention of Your Personal Data

Your personal data will be retained only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your personal data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

Your usage data will also be retained for internal analysis purposes. Usage data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of the platform, or we are legally obligated to retain this data for longer time periods.

Deletion of Your Personal Data

You have the right to delete or request that we assist in deleting the personal data that we have collected about you.

You may update, amend, or delete your information at any time by logging in to your account, if you have one, and visiting the account or profile management sections that allows you to manage your personal information. You may also contact us to request access to, correct, or delete any personal information that you have provided to us and may not have direct access to.

Please note, however, that we may need to retain certain information when we have a legal obligation or lawful basis to do so.

Disclosure of Your Personal Data

Your personal data may be disclosed that such action is necessary to:

• Comply with a legal obligation through court or Government agency.
• Protect and defend our rights or property.
• Prevent or investigate possible wrongdoing in connection with the platform.
• Protect the personal safety of users of the platform or the public.
• Protect against legal liability.

Data Storage and International Transfers

Your personal data is stored on servers located in Australia. When you use the platform, you acknowledge and consent to the storage and processing of your data in Australia, regardless of your location. For international users, please be aware that the data protection laws and other laws of Australia may not be as comprehensive as those in your country.

We take measures to ensure that your data is treated securely and in accordance with this Privacy Policy, regardless of where it is processed. In cases where we need to transfer personal data outside of your jurisdiction, we do so in compliance with applicable data protection laws, ensuring that appropriate safeguards are in place.

Third-Party Services

We utilise third-party services to enhance the functionality and improve the quality of the platform. These third-party services may store data in jurisdictions other than your home country, which is outside of our control.

Google reCAPTCHA

To protect the platform from spam and abuse, we integrate the Google reCAPTCHA service. This service helps to differentiate between human users and automated bots by analysing their interactions with the platform. Google reCAPTCHA may use cookies and collect certain information as part of its analysis, which is processed by Google. For more detailed information on how Google handles your data, please refer to Google's Privacy Policy and Terms of Service.

• Website: google.com/recaptcha/about
• Privacy Policy: policies.google.com/privacy
• Terms of Service: policies.google.com/terms

Jira Cloud

We collect your display name, commonly first and/or last name, and email address through our contact forms, which are then submitted to Jira Cloud for customer support and ticket tracking purposes. This data is stored on Jira Cloud, a third-party service. For more detailed information on how Jira Cloud handles your data, we strongly encourage users to review Atlassian's Privacy Policy, and Terms of Service:

• Website: atlassian.com
• Privacy Policy: atlassian.com/legal/privacy-policy
• Terms of Service: atlassian.com/legal/cloud-terms-of-service

Sentry

To improve the reliability and performance of the platform, we use Sentry to capture error information. When an error occurs within our software, Sentry may automatically collect data including but not limited to your IP address, browser type, and the state of your application at the time of the error. This data is used solely for debugging and improving the software we provide. For more detailed information on how Sentry handles your data, we strongly encourage users to review Sentry's Privacy Policy, and Terms of Service:

• Website: sentry.io
• Privacy Policy: sentry.io/privacy
• Terms of Service: sentry.io/terms

Umami Software

For analytics tracking, we employ Umami, a tool focused on privacy. It helps us understand user engagement with the platform in a non-intrusive manner. Umami collects anonymised data, providing insights without compromising individual privacy. For more detailed information on how Umami Software handles your data, we strongly encourage users to review Umami Software's Privacy Policy, and Terms of Service:

• Website: umami.is
• Privacy Policy: umami.is/privacy
• Terms of Service: umami.is/terms

Third-Party Payment Processing

We use Stripe, a trusted third-party payment processor, to securely handle payments for job advertisements. This section explains how Stripe collects, uses, and protects personal data during payment processing.

For more detailed information on how Stripe handles personal data and payment processing, we strongly encourage users to review Stripe's Privacy Policy and Terms of Service:

• Website: stripe.com
• Privacy Policy: stripe.com/privacy
• Terms of Service: stripe.com/terms

Data Collection and Handling

When making payments, users are directed to Stripe's secure checkout session portal hosted on billing.stripe.com, which will appear in the browser's address bar. Within this portal, users enter their payment information directly on Stripe's platform. The data collected by Stripe may include:

• Credit card or bank account details.
• Billing address and country of residence.

Our platform provides Stripe with personal data required to process payments, including:

• Full name
• Email address
• Country of residence

Any additional data required by Stripe for fraud prevention or billing purposes is securely handled by Stripe and not shared back with our application.

Data Protection and Security

We prioritise security by relying on Stripe’s industry-standard encryption and data protection measures. As payment data is processed directly by Stripe, we do not store or manage sensitive payment information.

Management of Payment Information

Users are provided with access to Stripe's customer portal hosted on billing.stripe.com, which will appear in the browser's address bar. The customer portal offers convenient management of payment details, access to invoices/receipts for services and the ability to upgrade or cancel a subscription contract with us.

The customer portal can be accessed within the application through the user menu. Please note that access to the customer portal is available once a subscription agreement has been entered into and will remain accessible even if the subscription is later cancelled.

We encourage users to take advantage of the customer portal to keep payment information up to date and track billing history

Data Transfers

Stripe may process and store personal data in countries outside of your own as part of its operations. Stripe ensures compliance with applicable data protection laws and regulations regarding cross-border data transfers.

Legal Basis for Processing

The legal basis for processing personal data in relation to payment transactions is typically the necessity to perform the contract (subscription agreement) between us and the user, as well as our legitimate interests as a business entity.

Links to Other Websites

The platform may include links to third-party services and websites that are not operated by us. If you click on a third-party link, you will be directed to that third-party site. While we strive to maintain the integrity of the platform, we cannot guarantee the safety of all external links posted by users. We will make a reasonable effort to remove or block any harmful links that are identified, but we cannot assure that all such links will be found or removed before they are accessed.

We have no control over and assume no responsibility for the content, products, or services on or available from those websites or resources. You acknowledge sole responsibility for and assume all risk arising from your use of any third-party websites or resources.

We strongly encourage you to review the privacy policy and terms of service of every site you visit, especially before sharing any personal information or engaging in any transactions. Your vigilance is a critical component of safeguarding your online security and privacy.

Changes to this Privacy Policy

We reserve the right to update this Privacy Policy as necessary to reflect changes in our practices, legal requirements, or to address new features or services. Whenever we make changes, the "Last updated" date at the top of this document will be revised to reflect the latest version. We encourage you to review this policy periodically to stay informed about how we collect, use, and protect your information.

We will notify you of any material changes to this Privacy Policy by posting a prominent notice on the platform or by other means as required by applicable law. Your continued use of the platform after the effective date constitutes your acceptance of the updated policy.

Contact Us

Your privacy is important to us, and we are committed to addressing your questions, concerns, or suggestions regarding this Privacy Policy or your personal data. Please don't hesitate to reach out — we're here to help. We strive to respond to all inquiries promptly.

You can contact us via email at: [email protected]

For urgent matters, especially those related to your personal data or privacy on the platform, please include "Urgent: Privacy Concern" in the subject line to ensure priority attention.