Privacy Policy

Last updated: 29 July 2026 · In accordance with the GDPR (EU 2016/679) and the LOPDGDD (Spanish Organic Law 3/2018)

At ZenitJob we take the protection of your personal data seriously. This Policy explains, clearly and without unnecessary jargon, what data we process, for what purpose, on what legal basis, with whom we share it, how long we retain it and how you can exercise your rights.

1. Data controller

2. Data we process and its origin

We do not request special categories of data (art. 9 GDPR). We ask that you do not include in your résumé any sensitive data that is not strictly necessary (health, ideology, trade-union membership, etc.).

3. Purposes of the processing

• Provide and manage the contracted service (account, CVs, job offers, applications).
• Process payments, manage the automatic renewal of the subscription and issue the corresponding invoicing.
• Handle your queries and support requests.
• Ensure the security of the platform and prevent fraudulent use.
• Comply with applicable legal obligations (tax, accounting, consumer).
• Send you commercial communications about ZenitJob, only if you have consented to this.

4. Legal basis

• Performance of the contract (art. 6.1.b GDPR): the data necessary to provide the service to you.
• Performance of the contract — AI features (Article 6(1)(b) GDPR): when you request an AI feature, we process the professional data and content you provide to generate the requested result, analysis or score.
• Compliance with legal obligations (art. 6.1.c GDPR): invoicing, accounting and tax obligations.
• Legitimate interest (art. 6.1.f GDPR): security, fraud prevention and improvement of the service.
• Consent (art. 6.1.a GDPR): marketing communications, revocable at any time.

5. Data processors and third parties

To provide the service we rely on suppliers who act as data processors, bound by a contract in accordance with art. 28 GDPR:

• Payment gateway (Stripe Payments Europe, Ltd.) — payment processing. ZenitJob does not store full card data; it is processed directly by the gateway under the PCI-DSS standard.
• Generative artificial intelligence provider: Anthropic, PBC (Claude) — it may process the professional data and text you submit to an AI feature to generate tailored content, letters, messages, translations, analyses and recommendations. Processing may involve an international transfer to the United States, subject to the safeguards described below.
• Transactional email provider (USA) — sending service emails (verification, notices). It only receives your name and email address.
• Hosting provider (EU) — servers where the platform runs, subject to the GDPR.
• Encrypted backup provider — storage of database backups, encrypted at rest.
• Web analytics (Google Ireland Ltd. — Google Analytics 4) — statistical measurement of site usage. It is only activated if you accept analytics cookies; if you decline, no analytics cookie is loaded and no data is sent. IP addresses are handled in anonymised form and your data is not shared with Google for personalised advertising.
• Advertising and campaign measurement (LinkedIn Ireland Unlimited Company — LinkedIn Insight Tag) — measuring the effectiveness of our campaigns and building advertising audiences. It is only activated if you accept marketing cookies; if you decline, no LinkedIn resource is downloaded. It is not installed on the private pages of the application: your CVs, applications and profile data are outside its reach.

5.1. Processing of data using artificial intelligence

ZenitJob uses AI to provide the features requested by the User. This processing may include AI-assisted profiling because it analyses professional information and compares it with job-posting content.

• Data used: résumé and professional-profile data, job-posting text, dictated or written answers and application data needed for the selected feature. Please do not include special categories of data that are not necessary.
• Logic and consequences: the system extracts and structures information, identifies skills and keywords, compares the profile with job requirements and generates text, recommendations or an advisory score. The result helps you prepare and prioritize your job search.
• No automated decisions with legal effect: ZenitJob does not make hiring or rejection decisions on behalf of employers. Its scores and recommendations are non-binding and do not, by themselves, produce legal or similarly significant effects on you.
• Human intervention: you can review and edit results before using them. You may also request human review, express your point of view or challenge an analysis or score by writing to privacidad@zenitjob.com.

6. Data retention

We retain your data while your account is active. When you delete your account, your data is erased within a maximum of 30 days, except for data we are required to keep by legal obligation (for example, billing data for the applicable tax and commercial periods). Security logs are kept for a maximum of 90 days.

7. Your rights

• Access: request a copy of the data we process about you.
• Rectification: correct inaccurate data, also from your profile.
• Erasure: request the deletion of your account and your data.
• Restriction: ask us to restrict the processing in certain cases.
• Portability: export your data in CSV format from the platform.
• Objection: object to processing based on legitimate interest or to marketing.
• Withdraw consent: at any time, without retroactive effect.

To exercise your rights, write to us at privacidad@zenitjob.com indicating the right you wish to exercise. We will respond within the legal period of one month. If you consider that we have not properly handled your request, you may lodge a complaint with the Spanish Data Protection Agency (aepd.es).

8. Cookies

ZenitJob uses technical cookies, necessary for the operation of the service, and third-party analytics and advertising cookies that are only installed if you expressly accept them in the cookie banner, separately. You can decline either or both without any effect on your use of the service, and change your mind at any time by clearing the site data in your browser. Advertising cookies are never installed inside the application: only on the public presentation pages.

9. Security

We apply appropriate technical and organizational measures to protect your data: passwords are stored as salted hashes (PBKDF2); communication with the server is encrypted (HTTPS/TLS); backups are encrypted at rest; and access to the data is restricted by roles. You can learn more about how we protect your payments on our fraud prevention page.

10. Minors

The service is aimed exclusively at persons over 18 years of age. We do not knowingly collect data from minors. If we detect that a minor's data has been provided, we will delete it.

11. Changes to this policy

We may update this Policy to adapt it to regulatory or service changes. We will notify you of any relevant change by email or through a notice on the platform with reasonable advance notice.

Document prepared by ZenitJob (Total Market Services, SL). Original content.