Privacy Policy & Terms of Service

This Privacy Policy explains how Ksaitor Media Pte. Ltd. ("we", "us") collects, uses, stores and shares personal information when you use our Site. It forms part of these Terms.

Information we collect

We collect the following categories of personal information:

Account information — name, email address, password hash (or, for Google Sign-In users, the Google account identifier instead of a password), and profile picture URL.
Profile information you choose to provide — job title, location, skills, salary expectations, social links, CV/resume, video introductions and similar content.
Submissions — job listings, company information, and any other content you upload as described in "Uploading Submissions to our Site" above.
Usage data — IP address, browser/device identifiers, pages viewed, referrer, and similar log data collected automatically.
Communications — messages you exchange with employers, recruiters or our support team through the Site.

When you choose to sign in with Google, we use the Google OAuth API and request only the following scopes:

openid
email — your Google account email address
profile — your name and profile picture URL

We do not request access to Gmail, Google Drive, Google Calendar, Google Contacts or any other Google service, and we do not read, write, or store any data from those services.

How we use Google user data. The email, name and profile picture URL are used solely to:

Create and authenticate your CryptoJobsList account.
Match a Google login to an existing CryptoJobsList account when the email addresses match.
Display your name and avatar inside the product (e.g. on your profile, in messages with recruiters, and on job applications you submit).

We do not use Google user data for advertising, do not sell it, and do not transfer it to AI/ML models for generalized training. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How we use your information

We use personal information to:

Operate, maintain and improve the Site and our services.
Authenticate you and secure your account.
Match candidates with employers and surface relevant job listings.
Send transactional emails (e.g. account, application, payment) and, where you have opted in, newsletters and job alerts. You can unsubscribe at any time using the link in any marketing email.
Process payments for paid job postings and other paid services.
Detect, investigate and prevent fraud, abuse and violations of our Acceptable Use Policy.
Comply with legal obligations.

We do not sell personal information. We share it only as follows:

Employers and recruiters — when you apply to a job, the information you submit (including your profile, CV and any message) is shared with the employer posting that role.
Other users of the Site — limited profile information you choose to make public (e.g. name, headline, avatar) is visible to other users.
Service providers (sub-processors) that process data on our behalf under contractual confidentiality obligations, including: Google Cloud (hosting), MongoDB Atlas (database), Cloudflare (CDN/DDoS protection), Vercel (frontend hosting), Stripe and crypto payment processors (payments), and our transactional email and analytics providers.
Legal and safety — when required by law, subpoena, court order or governmental request, or to protect the rights, property or safety of us, our users, or the public.
Business transfers — in connection with a merger, acquisition, reorganisation or sale of assets, in which case personal information may be transferred subject to standard confidentiality undertakings.

Data storage and security

Personal information is stored in encrypted databases hosted on Google Cloud and MongoDB Atlas. All traffic to and from our Site is encrypted in transit using TLS 1.2 or higher. Access to production systems is restricted to authorised personnel and protected by multi-factor authentication. Passwords (where applicable) are stored as bcrypt hashes; Google Sign-In users do not have a password stored at all.

No method of transmission or storage is 100% secure, but we take reasonable and industry-standard measures to protect your information.

Data retention and deletion

We retain personal information for as long as your account is active and for as long as needed to provide the Site, comply with legal obligations, resolve disputes and enforce our agreements.

You can delete your account and all associated personal data at any time by either:

Visiting https://cryptojobslist.com/settings/account-deletion while signed in, or
Emailing [email protected] from your registered email address.

We will action deletion requests within 30 days. Upon deletion we erase your profile, applications, messages and authentication tokens from production systems. Encrypted backups are purged on a rolling 30-day cycle. Note that anonymised, aggregated data and data we are required to retain by law (e.g. financial records) may be kept beyond this period.

Your rights

Depending on where you live, you may have rights under data protection laws including the right to access, correct, delete or port your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise any of these rights, email [email protected] from your registered email address.

Cookies

We use first-party cookies and similar technologies to keep you signed in, remember preferences and measure usage. You can control cookies through your browser settings; disabling them may affect functionality.

Children

Our Site is not directed to children under 18 and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us and we will delete it.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be notified via the Site or by email where appropriate. The "last updated" date at the top of these Terms reflects the most recent revision.

Contact

For privacy questions or to exercise your rights, email [email protected].