Privacy Policy

Information You Provide

Account and security information may include your name, email address, encrypted password, preferred language, avatar, verification state, two-factor authentication settings, trusted-device records, and account preferences.

Platform content may include saved tool results, notes, boards and cards, clients and invoices, financial records, short links, API-key labels, ATS jobs, candidate records, resumes, interview details, learning progress, quiz attempts, certificates, comments, newsletter subscriptions, contact requests, and consultation requests.

You choose what information to enter. Please avoid adding sensitive or unnecessary personal data to free-text fields and uploaded documents.

Information Collected Automatically

When you access the platform, we may process IP address, browser and device details, language, referring page, pages visited, tool usage, timestamps, session identifiers, approximate location derived from IP, and diagnostic or security events.

We use these records for session operation, fraud and abuse prevention, service reliability, aggregate analytics, and understanding which platform areas need improvement.

How We Use Information

To create and secure accounts, authenticate users, provide JPR workspaces, save work, track Academy progress, issue platform completion certificates, and operate requested tools and services.

To deliver transactional messages, verification and security notices, requested exports, support responses, and newsletters you choose to receive.

To prevent spam, investigate abuse, enforce platform rules, maintain audit records, troubleshoot errors, measure performance, improve content, and satisfy legal obligations.

ATS and Third-Party Personal Data

The applicant-tracking workspace lets account holders store information about candidates and interviews. The account holder who uploads or enters that information is responsible for having a lawful basis, providing required notices, limiting access, keeping the data accurate, and deleting it when no longer needed.

Do not upload resumes, identity documents, or other third-party information unless you are authorised to process it. ESB1995 provides the storage and workflow features but does not determine your recruitment purpose or replace your own privacy obligations.

Cookies and Consent Choices

Essential cookies and local storage support sessions, security, language preferences, account access, saved-work ownership, and your cookie choice. These are required for requested platform functions.

Analytics and advertising technologies help us understand usage and support free platform content. Where consent is required, their storage permissions default to denied until you accept. You can decline non-essential storage in the cookie notice and can clear or block cookies in your browser.

Google Analytics, Advertising, and reCAPTCHA

We use Google Analytics to measure aggregate site usage, Google AdSense to display advertising, Google Tag Manager to manage measurement tags, and Google reCAPTCHA to protect forms from spam and abuse.

Google and other advertising vendors may place or read cookies, use web beacons, process IP addresses or other identifiers, and serve ads based on prior visits, subject to your settings and applicable consent requirements.

You can manage ad personalisation in Google Ads Settings. Learn how Google uses information from partner sites in Google Privacy & Terms. Additional industry opt-outs may be available at AboutAds.

When Information Is Shared

We use service providers for hosting, email delivery, security, analytics, advertising, and related platform operations. They may process only the information needed to provide those services under their applicable terms and safeguards.

We do not sell your account or workspace personal data. We may disclose information when required by law, to protect users or the platform, to investigate fraud or security incidents, or as part of a lawful platform transfer with appropriate notice and safeguards.

Data Retention and Deletion

Active account and workspace data is retained while your account is active or while needed to provide the feature. When you schedule account deletion, a 30-day recovery period applies before the account and covered personal data are permanently deleted or anonymised.

Generated account-export files expire after 48 hours. Authentication logs are retained for up to 90 days for security and then pruned or anonymised. Guest save tokens generally expire after 30 days. Newsletter records remain until you unsubscribe, while legal, security, backup, or fraud-prevention records may be retained longer when reasonably necessary.

Your Controls and Data Rights

Account settings let you update profile and preference information, review sessions, manage security, export your account data, and schedule account deletion. Newsletter messages include an unsubscribe link.

Depending on applicable law, you may request access, correction, deletion, restriction, or cessation of certain processing. The UAE Personal Data Protection Law also provides rights and duties related to personal-data processing. Submit requests through the ESB1995 Contact page. We may need to verify your identity before acting on a request.

Security

We use HTTPS, password hashing, session protection, access controls, rate limits, anti-spam checks, audit logging, and other technical and organisational measures. No Internet service can guarantee absolute security, so use a strong unique password and enable available security controls.

International Processing

Hosting, email, analytics, security, or advertising providers may process information outside your country. Where applicable, we rely on provider safeguards and legal mechanisms for cross-border processing.

Children

ESB1995 is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided information, contact the platform so it can be reviewed and removed where appropriate.

Changes to This Policy

We may update this policy when the platform, providers, or legal requirements change. The revised version becomes effective when posted with a new update date. Material changes may also be communicated through the platform or account email.

Contact the Platform

For privacy questions or data-rights requests, use the ESB1995 Contact page and select Platform Support. This keeps the private delivery mailbox out of public pages while routing your request to the platform team.