Privacy Policy

This Privacy Policy ("Policy") constitutes a legally binding agreement between you ("User", "you", "your") and Infosistema — Sistemas de Informação, S.A. ("Infosistema", "Company", "we", "us", "our"), a corporation registered in Portugal, operating the bizApply platform at bizapply.ai and all related services, applications, and APIs. By accessing or using bizApply in any manner, you acknowledge that you have read, understood, and agree to be bound by this Policy in its entirety.

1. Scope and Applicability

This Policy applies to all personal data and non-personal data collected, processed, stored, transferred, or otherwise handled through the bizApply platform, including but not limited to: the bizApply website (bizapply.ai), all sub-domains, mobile applications, browser extensions, APIs, third-party integrations, widgets, embedded content, and any other services or tools provided by or on behalf of bizApply (collectively, the "Platform"). This Policy applies regardless of how you access the Platform, whether through a web browser, mobile device, API client, automated system, or any other means.

2. Data Controller

The data controller for the purposes of the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the Portuguese Law No. 58/2019, and any other applicable data protection legislation is:

Infosistema — Sistemas de Informação, S.A.
Email: privacy@bizapply.ai
Supervisory Authority: Comissão Nacional de Proteção de Dados (CNPD) — www.cnpd.pt

3. Information We Collect

We collect and process the following categories of data:

3.1 Information You Provide Directly

• Account registration data (name, email address, password, profile information)
• Authentication data from third-party providers (Google, LinkedIn, GitHub, or other OAuth providers), including but not limited to unique identifiers, profile names, email addresses, profile images, and access tokens
• Job search queries, filters, preferences, and saved searches
• CVs, resumes, cover letters, and any documents uploaded for processing
• Application data, including employment history, education, skills, and qualifications
• Communications with us (support tickets, feedback, surveys)
• Payment and billing information (processed by third-party payment processors)
• Employer/recruiter data including company information, job postings, and candidate evaluations

3.2 Information Collected Automatically

• Device information (browser type, operating system, screen resolution, device identifiers)
• IP addresses, geolocation data (city/region level), and timezone
• Usage data (pages visited, features used, clicks, scroll depth, session duration, navigation paths)
• Referral sources, search engine queries, and campaign tracking parameters
• Cookies, local storage, session tokens, and similar tracking technologies
• API usage data (endpoints called, request frequency, response times, error rates)
• Performance and diagnostic data (crash reports, system activity, hardware settings)

3.3 Information from Third Parties

• Public job listing data scraped or aggregated from third-party job portals and employer websites worldwide
• Publicly available company data, employer reviews, and salary information
• Data from authentication providers when you link third-party accounts
• Data from analytics providers, advertising networks, and search information providers
• Data received from business partners, recruiters, and ATS integrations

3.4 AI-Processed and Derived Data

We use artificial intelligence, machine learning, and automated processing systems (including large language models and document processing services) to analyze, extract, classify, enrich, match, score, rank, and otherwise process your data. This may result in the creation of derived data, including but not limited to: skill assessments, job compatibility scores, candidate rankings, extracted resume fields, normalized job categories, and predictive analytics. You expressly consent to such automated processing by using the Platform.

4. Legal Basis for Processing

We process your personal data on the following legal bases under the GDPR:

• Consent (Art. 6(1)(a)): Where you have given explicit consent, including by accepting this Policy, creating an account, or using the Platform
• Contract Performance (Art. 6(1)(b)): Where processing is necessary for the performance of our services and the fulfillment of our obligations to you
• Legitimate Interests (Art. 6(1)(f)): Where processing is necessary for our legitimate business interests, including platform improvement, fraud prevention, security, analytics, research and development, and direct marketing, provided these interests are not overridden by your fundamental rights
• Legal Obligation (Art. 6(1)(c)): Where processing is necessary to comply with applicable laws, regulations, court orders, or governmental requests

5. How We Use Your Information

We use the data we collect for the following purposes, without limitation:

• Providing, operating, maintaining, and improving the Platform and all its features
• Personalizing your experience, including job recommendations, search results, and content
• Processing job applications, matching candidates with opportunities, and facilitating recruitment
• AI-powered document processing, including CV/resume parsing, skill extraction, and candidate matching
• Generating, training, improving, and refining our algorithms, machine learning models, and AI systems using aggregated and/or anonymized data derived from your usage
• Conducting analytics, research, statistical analysis, and generating aggregate reports and insights
• Sending service notifications, job alerts, newsletters, and marketing communications
• Detecting, preventing, and addressing fraud, abuse, security incidents, and technical issues
• Enforcing our Terms of Service and other policies
• Complying with legal obligations and responding to lawful requests from authorities
• Developing new products, services, features, and functionalities
• Any other purpose disclosed at the time of collection or with your subsequent consent

6. Data Sharing and Disclosure

We may share, transfer, or disclose your data to the following categories of recipients:

• Group Companies: Infosistema affiliates, subsidiaries, parent companies, and other entities within our corporate group, both nationally and internationally
• Service Providers: Third-party vendors who perform services on our behalf, including cloud hosting (GCP, AWS), database management, email delivery, analytics, payment processing, AI/ML services, document processing (OCR/IDP), and customer support
• Employers and Recruiters: When you apply for jobs or opt into candidate visibility features, your profile data and application materials may be shared with relevant employers and recruitment professionals
• Business Partners: Third-party partners with whom we operate co-branded services, integrations, or marketplace offerings
• Aggregated/Anonymized Data: We may share aggregated, anonymized, or de-identified data with any third party for any purpose, including research, analytics, industry reports, and commercial purposes. Such data cannot reasonably be used to identify you
• Legal Requirements: We may disclose data when required by law, regulation, legal process, governmental request, or to protect the rights, property, or safety of Infosistema, our users, or the public
• Business Transfers: In connection with any merger, acquisition, restructuring, sale of assets, financing, or transfer of all or a portion of our business, your data may be transferred as a business asset
• With Your Consent: We may share your data for any other purpose with your explicit or implicit consent

We do not sell your personal data to third parties for their direct marketing purposes. However, we reserve the right to share anonymized, aggregated, or derived data without restriction.

7. International Data Transfers

Your data may be transferred to, stored in, and processed in countries outside the European Economic Area ("EEA"), including but not limited to the United States and other jurisdictions where our service providers operate. Where such transfers occur, we implement appropriate safeguards as required by applicable law, including Standard Contractual Clauses (SCCs), adequacy decisions, or other legally recognized mechanisms. By using the Platform, you explicitly consent to the transfer of your data to jurisdictions that may not provide the same level of data protection as your home country.

8. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes described in this Policy, comply with our legal obligations, resolve disputes, enforce our agreements, and protect our legitimate business interests. Specific retention periods vary by data type:

• Account data: Retained for the duration of your account and for up to 5 years after account closure or last activity
• Usage and analytics data: Retained for up to 3 years from collection
• Application and recruitment data: Retained for up to 3 years after the relevant application process concludes
• Aggregated/anonymized data: Retained indefinitely, as it does not constitute personal data
• Legal compliance data: Retained for the period required by applicable law (which may exceed the above periods)

After the applicable retention period, data will be securely deleted or irreversibly anonymized. We reserve the right to retain data in anonymized or aggregated form beyond these periods for research, analytics, and platform improvement purposes.

9. Cookies and Tracking Technologies

We use cookies, web beacons, pixels, local storage, and similar tracking technologies to operate the Platform, remember your preferences, understand usage patterns, deliver personalized content, and measure advertising effectiveness. By using the Platform, you consent to the use of these technologies as described herein. You may manage cookie preferences through your browser settings, though disabling cookies may impair Platform functionality.

10. Your Rights Under GDPR

If you are located in the EU/EEA, you have the following rights under the GDPR:

• Right of Access (Art. 15): Request a copy of the personal data we hold about you
• Right to Rectification (Art. 16): Request correction of inaccurate or incomplete data
• Right to Erasure (Art. 17): Request deletion of your personal data, subject to legal retention obligations
• Right to Restriction (Art. 18): Request restriction of processing in certain circumstances
• Right to Data Portability (Art. 20): Receive your data in a structured, commonly used, machine-readable format
• Right to Object (Art. 21): Object to processing based on legitimate interests or direct marketing
• Right to Withdraw Consent: Withdraw consent at any time, without affecting the lawfulness of processing prior to withdrawal
• Right to Lodge a Complaint: File a complaint with the CNPD (www.cnpd.pt) or your local supervisory authority

To exercise any of these rights, contact us at privacy@bizapply.ai. We will respond within 30 days. We may request identity verification before processing your request. Certain requests may be subject to applicable exemptions or limitations under law.

11. Children's Privacy

The Platform is not intended for individuals under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected data from a child under 16, we will take steps to delete such data promptly. If you believe a child has provided us with personal data, please contact us at privacy@bizapply.ai.

12. Security

We implement commercially reasonable technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption in transit and at rest, access controls, audit logging, and regular security assessments. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security. You acknowledge and accept that you transmit data to the Platform at your own risk, and we shall not be liable for any unauthorized access, data breach, or security incident except to the extent caused by our gross negligence or willful misconduct.

13. Third-Party Links and Services

The Platform may contain links to third-party websites, services, and integrations. We are not responsible for the privacy practices, content, or security of any third-party sites or services. Your interactions with third-party services are governed solely by their respective privacy policies. We strongly encourage you to review the privacy policies of any third-party services you access through the Platform.

14. Automated Decision-Making

We use automated systems, including AI and machine learning algorithms, to process data for job matching, candidate scoring, document analysis, fraud detection, and content personalization. These automated processes may produce decisions that significantly affect you. You have the right to request human review of automated decisions, express your point of view, and contest such decisions by contacting us at privacy@bizapply.ai. Notwithstanding, you acknowledge that the core functionality of the Platform relies on automated processing and that opting out of all automated decision-making may limit your ability to use certain features.

15. Changes to This Policy

We reserve the right to modify, amend, or update this Policy at any time at our sole discretion. Changes become effective immediately upon posting to the Platform. Material changes will be communicated via email or a prominent notice on the Platform at least 14 days before taking effect, except where changes are required by law or relate to new features or security measures, in which case they take effect immediately. Your continued use of the Platform after any changes constitutes your acceptance of the revised Policy.

16. Governing Law and Jurisdiction

This Policy shall be governed by and construed in accordance with the laws of Portugal. Any disputes arising from or relating to this Policy shall be subject to the exclusive jurisdiction of the courts of Lisbon, Portugal, without prejudice to your right to lodge a complaint with the competent data protection authority.

17. Contact

For any questions, concerns, or requests regarding this Privacy Policy or our data practices, contact us at:

bizApply — Operated by Infosistema, S.A.
Email: privacy@bizapply.ai
General: support@bizapply.ai
Website: bizapply.ai/contact