| Account & identity | Name, email address, phone number, login password (stored as an irreversible hash), account role, email verification status, two-factor authentication settings, last login time | Account registration and sign-in, security verification, password recovery, and sending service notifications | Necessary for performing our contract with you (PIPL Art. 13(2)) | For the life of your account; deleted or anonymized after account deletion as required by law | Used by ZhiYin only; not shared externally |
|---|
| Candidate profile | Full name, professional title, bio, location, years of experience, education history, work history, skills and certifications, languages, expected salary range, preferred locations, preferred job types and industries, remote-work preference, availability, LinkedIn / portfolio / GitHub links | Building your candidate profile, AI job matching, and presenting your profile to employers you apply to | Necessary for performing our contract with you; profile visibility to employers follows the platform rules you agree to | For the life of your account; you can edit or delete profile content at any time | Verified employers, limited to applications you submit or access you authorize; contact details stay hidden until an employer unlocks them under the platform's rules |
|---|
| Resumes & uploaded files | Resume files and file names, parsed resume text, AI resume score | Applying to jobs, resume improvement suggestions, and AI resume analysis (cross-border AI processing requires your separate consent) | Necessary for performing our contract with you; cross-border AI processing is based on your separate consent | For the life of your account; you can delete uploaded resumes at any time | Employers you apply to; AI processing providers (see the Third-Party Sharing & SDK List) |
|---|
| Applications & cover letters | Application status and pipeline stage, cover letter, match score, application source | Processing your job applications, helping employers evaluate them, and keeping you updated on progress | Necessary for performing our contract with you | For the life of your account | The employer whose job you applied to |
|---|
| Messages | Message content, attachment file names, sent and read timestamps | Enabling in-platform communication between you and employers | Necessary for performing our contract with you | For the life of your account | The other participant in the conversation |
|---|
| Consent & privacy records | Consent type, grant and revocation timestamps, consent source, do-not-sell requests, data export request records | Recording and enforcing your privacy choices, and keeping compliance evidence | Necessary for complying with our legal obligations | Retained for the period required by applicable laws and regulations | Used by ZhiYin only; provided to regulators where legally required |
|---|
| Device & log data | IP address, browser and device identifiers (User-Agent), audit events of account actions, access timestamps | Keeping accounts and the platform secure, preventing fraud and abuse, troubleshooting, and security auditing | Necessary for performing our contract with you and complying with legal obligations | Retained for the period required by applicable cybersecurity laws (network logs are kept for at least six months), then deleted | Used by ZhiYin only; error-monitoring providers receive scrubbed fault data only (see the Third-Party Sharing & SDK List) |
|---|
| Notification records | Notification type and channel, title and content, read status | Sending you job, application-progress, and account notifications | Necessary for performing our contract with you; marketing notifications are based on your consent and can be turned off at any time | For the life of your account | Email / SMS delivery providers, solely to deliver the message (see the Third-Party Sharing & SDK List) |
|---|
| Learning records | Course and module progress, completion status and timestamps, last accessed time | Tracking your learning progress and providing interview-prep and course features | Necessary for performing our contract with you | For the life of your account | Used by ZhiYin only; not shared externally |
|---|
| Saved jobs & preferences | Saved jobs and the time they were saved | Saving jobs you are interested in for later viewing and reminders | Necessary for performing our contract with you | For the life of your account; you can unsave at any time | Used by ZhiYin only; not shared externally |
|---|
| Employer account & company info (employer users) | Company name, website, industry, company size, description, office locations and headquarters, company verification materials (e.g. business licence information) | Creating your company page, posting jobs, and verifying company authenticity | Necessary for performing our contract with you; verification is necessary for complying with legal obligations (authenticity checks) | For the life of your account; verification records are retained as required by law | Public company information is shown to platform users; verification materials are used for platform review only |
|---|
| Payment & invoicing (employer users) | Transaction records and amounts, billing contact name and email, fapiao title and taxpayer ID (when an invoice is issued); card numbers and other payment credentials are collected directly by the payment provider and never stored by us | Charging service fees, issuing invoices (fapiao), and meeting tax and accounting obligations | Necessary for performing our contract with you and complying with legal obligations | Retained for the period required by tax and accounting regulations | Payment providers (Stripe / WeChat Pay / Alipay — see the Third-Party Sharing & SDK List); tax authorities where legally required |
|---|