| Account & identity | Name, email address, phone number, login password (stored as an irreversible hash), account role, email verification status, two-factor authentication settings, last login time | Account registration and sign-in, security verification, password recovery, and sending service notifications | Necessary for performing our contract with you (PIPL Art. 13(2)) | For the life of your account; deleted or anonymized after account deletion as required by law | Used by ZhiYin only; not shared externally |
|---|
| Candidate profile | Full name, professional title, bio, location, years of experience, education history, work history, skills and certifications, languages, expected salary range, preferred locations, preferred job types and industries, remote-work preference, availability, LinkedIn / portfolio / GitHub links | Building your candidate profile, AI job matching, and presenting your profile to employers you apply to | Necessary for performing our contract with you; profile visibility to employers follows the platform rules you agree to | For the life of your account; you can edit or delete profile content at any time | Verified employers, limited to applications you submit or access you authorize; contact details stay hidden until an employer unlocks them under the platform's rules |
|---|
| Resumes & uploaded files | Resume files and file names, parsed resume text, AI resume score | Applying to jobs, resume improvement suggestions, and AI resume analysis (cross-border AI processing requires your separate consent) | Necessary for performing our contract with you; cross-border AI processing is based on your separate consent | For the life of your account; you can delete uploaded resumes at any time | Employers you apply to; AI processing providers (see the Third-Party Sharing & SDK List) |
|---|
| Applications & cover letters | Application status and pipeline stage, cover letter, match score, application source | Processing your job applications, helping employers evaluate them, and keeping you updated on progress | Necessary for performing our contract with you | For the life of your account | The employer whose job you applied to |
|---|
| Messages | Message content, attachment file names, sent and read timestamps | Enabling in-platform communication between you and employers | Necessary for performing our contract with you | For the life of your account | The other participant in the conversation |
|---|
| Consent & privacy records | Consent type, grant and revocation timestamps, consent source, do-not-sell requests, data export request records | Recording and enforcing your privacy choices, and keeping compliance evidence | Necessary for complying with our legal obligations | Retained for the period required by applicable laws and regulations | Used by ZhiYin only; provided to regulators where legally required |
|---|
| Device & log data | IP address, browser and device identifiers (User-Agent), audit events of account actions, access timestamps | Keeping accounts and the platform secure, preventing fraud and abuse, troubleshooting, and security auditing | Necessary for performing our contract with you and complying with legal obligations | Retained for the period required by applicable cybersecurity laws (network logs are kept for at least six months), then deleted | Used by ZhiYin only; error-monitoring providers receive scrubbed fault data only (see the Third-Party Sharing & SDK List) |
|---|
| Notification records | Notification type and channel, title and content, read status | Sending you job, application-progress, and account notifications | Necessary for performing our contract with you; marketing notifications are based on your consent and can be turned off at any time | For the life of your account | Email / SMS delivery providers, solely to deliver the message (see the Third-Party Sharing & SDK List) |
|---|
| Learning records | Course and module progress, completion status and timestamps, last accessed time | Tracking your learning progress and providing interview-prep and course features | Necessary for performing our contract with you | For the life of your account | Used by ZhiYin only; not shared externally |
|---|
| Saved jobs & preferences | Saved jobs and the time they were saved | Saving jobs you are interested in for later viewing and reminders | Necessary for performing our contract with you | For the life of your account; you can unsave at any time | Used by ZhiYin only; not shared externally |
|---|
| Identity verification (mainland China) | Legal name, ID type, masked government ID number and irreversible comparison hash, private ID-document upload, stored account phone used for a three-element match, verification status and provider reference | Verifying candidate identity for mainland China recruitment, preventing impersonation and supporting legally required authenticity checks | Your separate consent to processing sensitive personal information; you can withdraw consent subject to legal retention requirements | Pending evidence is deleted when you withdraw. Raw evidence for rejected submissions is deleted after 30 days and for approved submissions after 90 days; minimized status and legally required audit records may be retained separately. | Authorized ZhiYin reviewers; only when explicitly configured, an approved mainland-China identity provider receives name, PRC ID number and stored phone for the match check. Identity evidence is never shown to employers. |
|---|
| Employer account & company info (employer users) | Company name, website, industry, company size, description, office locations and headquarters, company verification materials (e.g. business licence information) | Creating your company page, posting jobs, and verifying company authenticity | Necessary for performing our contract with you; verification is necessary for complying with legal obligations (authenticity checks) | For the life of your account; verification records are retained as required by law | Public company information is shown to platform users; verification materials are used for platform review only |
|---|
| Payment & invoicing (employer users) | Transaction records and amounts, billing contact name and email, fapiao type, title and taxpayer ID; VAT special fapiao requests also include registered address and phone, bank name and corporate account. Card numbers and other payment credentials are collected directly by the payment provider and never stored by us. | Charging service fees, issuing invoices (fapiao), and meeting tax and accounting obligations | Necessary for performing our contract with you and complying with legal obligations | Retained for the period required by tax and accounting regulations | Payment providers (Stripe / WeChat Pay / Alipay — see the Third-Party Sharing & SDK List); tax authorities where legally required |
|---|