JpSoftWorks

Data Protection and Privacy Policy while using Career Compass.

1. Purpose and principles

This tool is designed with privacy by design and privacy by default as core architectural principles.

All personally identifiable information is collected and processed solely for the purpose of providing the service requested by the individual user. Personal data is never reused for unrelated purposes, resold, or shared with third parties outside what is strictly required to operate the service.

Personal data remains strictly attached to the individual profile that initiated and controls its use.

---

2. Personal data scope

Depending on how the tool is used, we may process the following categories of data:

• Account identifiers such as name, email address, and authentication identifiers

• Profile data explicitly provided by the user, including professional information, preferences, or uploaded content

• Usage and configuration data necessary to deliver the service

• System logs required for security, abuse prevention, and operational integrity

We do not intentionally collect sensitive personal data unless explicitly provided by the user as part of their profile or content.

---

3. Data ownership and control

You remain the owner of your personal data at all times.

The tool acts solely as a processor of data on your behalf. All processing is performed at your explicit request and under your control.

No personal data is associated across users, profiles, or organizations unless explicitly configured by the user through the application.

---

4. Data retention

Personal data is retained only for as long as necessary to provide the service.

If an account remains active, associated data is preserved to ensure continuity and functionality of the tool. If an account is deleted, all associated personal data is permanently removed in accordance with applicable laws.

---

5. Right of access, export, and deletion

In accordance with applicable data protection laws, including GDPR and Quebec Law 25, you have the right to:

• Request access to your personal data

• Request an export of your personal data in a commonly used, machine-readable format

• Request permanent deletion of your personal data

Deletion requests result in the irreversible removal of all personal data associated with the profile from our databases and backups within legally permissible timeframes.

---

6. Consequences of data deletion

Once a deletion request is executed:

• All personal data linked to the account is permanently destroyed

• The account can no longer be used or recovered

• It will not be possible to resume use of the tool with the same account, profile, or historical data

If you wish to use the tool again after deletion, a new account and profile must be created from scratch.

---

7. Security measures

We implement technical and organizational measures appropriate to the sensitivity of the data processed, including:

• Logical separation of user data by profile and organization

• Access controls and authentication mechanisms

• Encryption in transit and at rest where applicable

• Monitoring and logging for security and abuse detection

No system can be guaranteed to be entirely risk-free, but security is treated as a continuous process, not a one-time feature.

---

8. Third-party services

Where third-party services are required to operate the tool, they are selected based on security, compliance, and data protection practices. Only the minimum data required to deliver the service is shared, and never for independent use by those providers.

---

9. Policy updates

This policy may be updated to reflect legal, technical, or operational changes. Material changes will be communicated through the application or website.

---

10. Contact and requests

To exercise your data rights or ask questions regarding privacy and data protection, you may contact us through the support or contact channels provided by the application.

Requests are handled in accordance with applicable legal timelines and verification requirements.