Privacy Policy

Account data: name, email address, a securely hashed password, your role (job seeker, employer or administrator) and consent records.

Job seeker profile: headline, phone number, province, summary, skills, languages, education, work experience, profile photo and the CV files you upload.

Applications: the jobs you apply to, your cover letters, the CV attached and the status employers assign.

Employer data: organisation details, job postings, recruiter accounts, subscription and payment records.

Security and technical data: IP address, browser user agent, sign-in times and security events (such as failed sign-ins and password changes), kept to protect accounts and detect abuse.

Stored on your device only: resume builder drafts and saved (bookmarked) jobs are kept in your browser's local storage and are not sent to our servers unless you choose to upload a CV.

• To create and secure your account, including email verification and password resets.
• To show job listings, deliver your applications to employers and let you track their status.
• To let employers manage vacancies, applicants and subscriptions.
• To prevent fraud, spam and unauthorised access (rate limiting, account lockout, audit logs).
• To send service emails you need (verification, password reset, security notices).
• To comply with legal obligations.

Employers you apply to receive your profile, cover letter and the CV you attach to that application.

CV database: if "Show my profile in the employer CV database" is enabled, employers on eligible plans can find your profile and download your primary CV. You can switch this off at any time in your profile.

Service providers who host our servers, database, file storage and email delivery process data on our behalf under confidentiality obligations.

Authorities when required by applicable law.

We do not sell personal data.

Some listings are published from third-party sources. When a listing asks you to apply by email or on an external website, the information you send is handled by that employer or site under its own privacy terms.

• Passwords are hashed with bcrypt; we never store them in plain text.
• All traffic is encrypted with HTTPS; strict browser security headers are enforced.
• CVs are stored privately and can only be downloaded by you, administrators, employers you applied to, or employers with CV database access where you allow it.
• Sign-in attempts are rate-limited, accounts lock after repeated failures and sessions are revoked when passwords change.
• Security-relevant actions are recorded in an audit log.

We keep account and profile data while your account is active. Applications are kept so employers can complete their hiring process. Security logs are kept for up to 12 months. When you ask us to delete your account we remove or anonymise your personal data unless we must keep it by law.

• Access and update your profile at any time from your dashboard.
• Hide your profile from the CV database.
• Delete CV files that are not attached to applications.
• Change your password or sign out of all devices from Account security.
• Request a copy or deletion of your data by emailing privacy@wazifaha.com.

We use a strictly necessary, secure, HTTP-only session cookie to keep you signed in, and a cookie to protect forms against cross-site attacks. We do not use advertising or third-party tracking cookies. Local storage is used for resume drafts and saved jobs on your device.

Wazifaha is intended for people aged 16 and over. We do not knowingly collect data from younger children.

We may update this policy. Material changes will be announced on the site or by email before they take effect.

Questions or requests: privacy@wazifaha.com.