Privacy policy

What we collect

• Account: your email and password (stored as a one-way hash; we never see your password). If you sign in with Google, we receive your name, email and profile picture from Google.
• Job seeker profile: name, role or speciality, skills, preferred province, experience, education, about me, desired salary, contact email and phone, your “open to work” setting, and your résumé (PDF) if you upload one.
• Consents: your acceptance of our principles (and, for company accounts, the employer commitment) with the time you accepted, and your per-company answer on whether that company may see your team fit.
• Reports you send, and invitations to apply that companies send you.
• Teams: teams a company creates, the email it invited you with, your seat and years in the team, when you joined, and the team readings computed (kept for at most 30 days).
• The interview date and time an employer records on your application, the times a company offers, and the one you pick.
• Your answers to screening questions, and the messages between you and the company on each application.
• For employers: the notes, stars and tags you keep about applicants.
• Job views: kept as daily totals per source (e.g. search or email), never tied to a visitor. Repeat-visit checks use codes that can’t be turned back into an IP and are deleted within 2 days. Totals are kept for 13 months.
• Applications: the job, your cover letter, the time you chose to send it, and its status.
• Employer details: company name, website, size, benefits, address, workplace photos and job postings (all public on the company page).
• Birth details for the astrology tools: date of birth, birth time or time slot, province of birth and gender, plus results calculated from them such as your elements and the careers, places and times that favour you.
• Technical data: cookies needed to keep you signed in, server logs (such as IP address and browser type) kept briefly by our hosting provider, anti-spam usage counters (stored as codes that can’t be turned back into an IP or account), and system error logs (the error message and the page) kept for 30 days.

How we use it

• To run the service: accounts, job postings, applications, and delivering applications to employers at the time you choose.
• To send account and application emails, such as telling an employer about a new applicant, telling an applicant their status changed, and password reset links.
• To send new-job alerts, only for alerts you set up yourself, at most one email a day per alert, each with an unsubscribe link. We never send marketing email.
• To calculate the astrology tools and suggest jobs that suit your elements.
• To keep the service secure and fix problems.

We do not sell personal data, show ads, or use third-party tracking or analytics.

Who can see your data

• Employers see an applicant’s profile, résumé and application only for their own jobs you applied to, and only after it has been sent. A scheduled application stays hidden until its send time. Résumés open through links that expire within an hour, and you can delete yours at any time from My account.
• Your birth details and chart results are visible only to you. We never share them with employers. A company you applied to sees only whether you allowed it to see your team fit.
• When you switch on “open to work”: companies with a HappyJob account can find you and see your name, role, skills, province, experience, education and desired salary. Never your email, phone, résumé or birth data. They reach you with “Invite to apply”, which we email to you. Switch it off any time on your profile.
• Reports: read by HappyJob staff only to review them. The reported company or person never learns who reported.
• Stats and the fast-reply badge: employers see total views of their own jobs. Everyone sees a "Replies fast" badge on companies that usually first answer within 3 days, worked out from overall reply times, never revealing anyone’s application.
• Screening answers and messages: only you and the company of that application. An employer’s notes, stars and tags are seen by the employer only, never by the applicant.
• Team fit when you apply: only if you allowed that company to see it. The company sees words (e.g. fits well, workable) and one strength, never your birth date or a score. It is never used to rank or filter applicants, and is deleted as soon as you withdraw permission.
• When you join a company’s team: the company sees your name, seat and how you fit with the team, such as how well you suit your seat, your strengths and how you work with a teammate. Never your birth date, birth time or personal chart. Leave any time from My account; the readings made with you are deleted at once.

Service providers who process data on our behalf:

• Supabase: database, résumé file storage and sign-in (servers in Singapore).
• Vercel: website hosting.
• Resend: notification emails (receives the recipient address and the email content).
• Protocol API: astrology calculations. It receives birth date, birth time, birth province coordinates and gender, never your name or email.
• Google: only if you choose to sign in with Google.
• Stripe: employer payments. It receives the email, company name and payment details (we never see card numbers).

Some providers may process data outside Thailand. We choose providers with appropriate data protection safeguards.

Data from your Google account

When you sign in with Google we request only basic profile information: your name, email address and profile picture. We use it only to create and verify your account. We do not access any other Google data, do not share it with anyone except the providers listed above, and do not use it for advertising. HappyJob’s use of information received from Google adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Cookies

We use only the cookies needed to keep you signed in. The sign-in and sign-up pages load Google’s script to show the Sign in with Google button, which is covered by Google’s privacy policy.

How long we keep data

We keep your data while you have an account. You can withdraw an application yourself on My account, and delete your account yourself on the Delete account page. When an account is deleted, everything tied to it is deleted at once, including the profile, résumé, applications, birth details, consents, reports, company details, logo and job postings. System error logs are deleted automatically after 30 days.

Your rights

You may ask to access, copy, correct or delete your data, restrict or object to its processing, move it to another service, and withdraw consent. You can change your birth details yourself on the Careers page, and download your data (JSON), delete your account and withdraw any company’s access yourself on My account. For anything else, email us at the address below. We reply within 30 days. You may also complain to Thailand’s Personal Data Protection Committee.

Changes to this policy

If we make an important change, we will update the effective date on this page and let users know by email or on the website.