Privacy Policy

ZiaJobs, based in Brazil, is the controller of the personal data described here. For anything about your data, write to support@ziajobs.io.

• When you click Apply without an account: your first name, last name, email address, optionally your LinkedIn profile URL, and the job you were applying to.
• When you create an account: your email address. If you sign in with Google, Google also shares your name, your email address and, if you have one, your profile picture. We never receive your Google password.
• Your profile, if you fill it in: name, country, phone number (optional), LinkedIn URL (optional), native and other languages with your level, your education, what you do today, what you are looking for (extra income, main income or a career change), part-time or full-time, hours available per week, the areas you are interested in and whether you want job alerts.
• Apply clicks: which job you opened on the company's site and when. The application itself happens on the company's site, not on ZiaJobs.
• Your application tracker: the jobs you save, the status you give each application, the notes you write and when you change them. Notes are private to you.
• When you use Luzia: the messages you send, Luzia's replies, your feedback on a reply, and any image or PDF you choose to attach. We also record the number of messages, files and AI-model tokens used, so we can enforce the plan limits and monitor the cost and reliability of the service.
• How you found us and when you visit: the campaign tags of the first link you opened (for example utm_source=youtube), the domain that sent you (for example youtube.com, never the full address) and the first page you landed on. With an account, we also note when you last used ZiaJobs.
• If you buy a Pro pass: the dates of the pass, the amount, currency and tax charged, the identifiers Stripe gives to the payment, and a record that you ticked the box accepting that the pass starts now and that you lose your 14-day right of withdrawal, with the time Stripe confirmed it. Your card number and billing details are typed on Stripe's page and never reach ZiaJobs.
• Technical data: IP address, browser type and request logs, kept by our hosting providers to run the service and protect it from abuse.

You can choose to send a CV to the CV Builder or Luzia. Do not send ID documents, passports, passwords, bank or card details, or sensitive personal data in a Luzia message or attachment. We never receive your card number.

• To run your account and send you to the jobs you choose, including the sign-in emails. Legal basis: performance of our service to you (GDPR Art. 6(1)(b)).
• To show which jobs you are likely eligible for, using your country, languages and experience. Legal basis: performance of our service to you.
• To email you job alerts and new opportunities similar to the ones you looked at. Legal basis: our legitimate interest in telling people who asked about a job about comparable jobs (GDPR Art. 6(1)(f)). Every email has an unsubscribe link, and you can change the frequency or turn alerts off in your Profile at any time.
• To sell you a Pro pass and prove it: to take the payment, calculate and declare the tax on it, switch the pass on, revoke it after a full refund or a dispute, and keep proof that you accepted the waiver of your right of withdrawal. Legal basis: performance of our contract with you, our legal obligations on tax and accounting (GDPR Art. 6(1)(c)), and our legitimate interest in defending ourselves if the purchase is questioned.
• To provide Luzia: to keep your conversation history, send your message and chosen attachments to the AI service, return its reply, remember recent context, enforce the Free or Pro allowance, and investigate failures. Legal basis: performance of our service to you. Token totals and abuse controls also support our legitimate interest in operating the service securely and sustainably.
• To keep ZiaJobs secure, for example blocking disposable email addresses and automated abuse. Legal basis: legitimate interest.
• To publish aggregated insights about companies, such as typical response times. These are only shown as ranges built from at least five independent reports, and never identify you.

We do not sell your personal data, and we do not use it for automated decisions that have legal or similarly significant effects on you. Eligibility labels are only an estimate to help you search; the company you apply to makes its own decision.

We use a small number of providers, each bound by a data processing agreement:

• Supabase: database and sign-in. Data stored in the European Union (Ireland).
• Vercel: hosting of the website, and anonymous usage statistics (pages visited, country, device and the site that sent you), collected without cookies. Server functions run in the European Union (Ireland); pages may be delivered from a location near you.
• Stripe: takes the payment for the Pro pass and calculates the tax on it. Stripe also keeps some of this data under its own privacy policy, for example to prevent fraud.
• Resend: sending sign-in and alert emails.
• Cloudflare: domain name service and network security.
• Google: only if you choose to sign in with Google.
• n8n: orchestrates Luzia's messages, recent conversation context and tools.
• fal.ai and the selected AI model provider: process the prompt and any attachment you choose to send so Luzia can generate a reply. Luzia currently uses an Anthropic Claude model routed through fal.ai.

Some of these companies are based in the United States. Where your data leaves the European Economic Area, the transfer relies on the EU-U.S. Data Privacy Framework or the European Commission's Standard Contractual Clauses.

When you apply to a job, you go to the company's own website. What you share there is governed by that company's privacy policy, not this one.

• Account and profile: for as long as your account exists. When you ask us to delete it, we delete it within 30 days.
• Details from the Apply form without an account: up to 24 months after you last used them, then deleted.
• Pro pass payments: the record of each pass, including your acceptance of the waiver, for as long as tax and accounting law requires. If you delete your account, the record stays without any link to your account.
• Luzia conversations: messages and replies stay with your account until you delete the conversation or your account. The model uses up to the latest 20 turns as recent context. Deleting a conversation also deletes its model memory.
• Luzia attachments: the file itself is deleted from storage three days after it is sent. The conversation keeps the file name and the fact that an attachment existed until you delete the conversation or your account.
• Luzia usage records: message, file and token totals stay with your account until the account is deleted.
• Technical logs: kept by our providers for short periods, usually days to weeks.

We only use what is needed for ZiaJobs to work:

• Sign-in cookie (sb-…), which keeps you signed in. It renews on every visit and expires after up to 400 days without one, or when you sign out.
• Sidebar cookie (sidebar_state), which remembers whether the side menu is open.
• Theme preference, stored in your browser, which remembers light or dark mode.
• First visit, stored in your browser, which remembers how you first found ZiaJobs until you apply or sign in, and is then saved with your details.
• Cookie choice, stored in your browser the first time you visit, which remembers whether you chose Accept or Essential only. We ask once.

The first time you open ZiaJobs, a notice at the bottom of the page lets you accept cookies or keep essential cookies only. We remember that choice in your browser and do not ask again. Every cookie we set today is essential. We do not use advertising or analytics cookies. Our usage statistics work without cookies. If we add optional cookies later, they load only after you choose Accept.

You can ask us, at any time and free of charge, to:

• give you a copy of your personal data, including in a portable format;
• correct data that is wrong or incomplete;
• delete your data and your account;
• restrict or object to how we use it, including for job alert emails;
• tell you who we have shared it with.

Write to support@ziajobs.io from the email address on your account. We answer within 30 days. You can also complain to your data protection authority: in the EU, the authority of the country where you live; in Brazil, the ANPD.

ZiaJobs is for people aged 18 or over. We do not knowingly collect data from anyone younger. If you believe a minor has given us their data, contact us and we will delete it.

Data is encrypted in transit, access to the database is restricted by row-level security so each person can only read their own profile, and the links to company job pages are only resolved on our servers. No system is perfectly secure; if a breach affects your data, we will tell you and the competent authorities as the law requires.

When we change this policy, we update the date at the top. If a change is significant, we tell you by email before it takes effect. See also our Terms of Service.