AlongWalk 隐私政策
生效日期：2026 年 8 月 31 日
数据控制者：。隐私联系渠道：；法律通讯地址：。
1. 我们收集什么
- 账户资料：称呼、邮箱、不可逆密码哈希、邀请码使用和可选营销意愿。
- 职业资料：你上传的 CV/简历、技能、目标岗位、地点、筛选条件和个性化偏好。
- 使用记录：查看、收藏、待申请、归档、反馈、申请阶段和时间戳。
- 技术与安全资料：会话标识、IP 地址、浏览器请求、错误和安全日志。
- 付款资料：付款启用后，我们可收到 Waffo 的交易状态、金额和收据标识；完整银行卡资料由支付服务商处理，我们不保存。
2. 来源与用途
资料来自你本人、你在服务中的操作以及公开招聘来源。我们用它来建立账户、执行筛选与匹配、生成你请求的材料、维护申请记录、提供支持、保障安全、排查错误、衡量产品质量并履行法律义务。可选营销仅在你选择同意时使用，并可随时撤回。
3. AI 和第三方处理者
为完成你请求的匹配或生成任务，有限的职位文本和必要的职业资料可能发送给配置的 AI 提供商（当前可包括 Groq 托管模型）；不应发送密码。Cloudflare 可处理传输、安全和临时 tunnel 流量；付款启用后 Waffo Pancake 作为 Merchant of Record 处理结账、税务和付款。点击雇主或其他外部链接后，对方的隐私政策适用。我们不出售个人资料，也不用于第三方定向广告。
4. Cookies、本地存储与自动决策
我们使用必要的登录会话 cookie，并可在浏览器本地存储语言和界面状态。目前不使用广告 cookie。推荐排序会用规则、检索和模型评分，但不会替雇主作出招聘决定；你可通过筛选、反馈和人工判断控制结果。
5. 保存期限
- 账户、职业资料、偏好、互动和申请记录：账户有效期间保存；经核实的删除请求后通常在 30 天内从活动系统删除。
- 产品反馈：最长 24 个月，除非你更早请求删除或我们去标识化。
- 安全和访问日志：通常 90 天；调查滥用、事故或法律要求时可更久。
- 交易和税务记录：按 Waffo 及适用财税法律要求保存。
- 备份副本可在正常轮换周期内短暂保留，并限制访问。
6. 安全
我们采用 HTTPS 传输、登录与邀请码限制、HttpOnly 会话、密码哈希、最小化访问和本地隔离等措施。任何系统都不能保证绝对安全；如发生影响你的重大事件，我们会依法通知。
7. 你的选择与权利
你可请求访问、更正、导出或删除资料，撤回营销同意，或就处理提出异议。请通过上述隐私联系渠道提交；为保护账户，我们可能验证身份。所在地法律可能提供额外权利及向监管机构投诉的权利。
8. 国际传输、年龄和变更
服务商可能在美国或其他国家处理资料，并采用适用的合同或法律保障。服务仅面向 18 岁以上用户。重大政策变更将在产品内通知并更新生效日期。
AlongWalk Privacy Policy
Effective date: August 31, 2026
Data controller: . Privacy contact: . Legal correspondence address: .
1. Information we collect
- Account data: name, email, one-way password hash, invite-code use, and optional marketing interest.
- Career data: uploaded CV/resume, skills, target roles, locations, filters, and personalization preferences.
- Activity: views, saved jobs, apply intent, archives, feedback, application stages, and timestamps.
- Technical and security data: session identifiers, IP address, browser requests, errors, and security logs.
- Payment data: when enabled, we may receive transaction status, amount, and receipt identifiers from Waffo. Payment providers process full card data; we do not store it.
2. Sources and purposes
Data comes from you, your use of the Service, and public job sources. We use it to create accounts, filter and match jobs, generate requested materials, maintain application records, support users, protect security, diagnose errors, measure product quality, and meet legal obligations. We use optional marketing interest only after opt-in, which can be withdrawn.
3. AI and service providers
To perform requested matching or generation, limited job text and necessary career data may be sent to configured AI providers, currently including Groq-hosted models; passwords should never be sent. Cloudflare may process transport, security, and temporary Tunnel traffic. When payment is enabled, Waffo Pancake acts as Merchant of Record for checkout, tax, and payment processing. Employer and other external links are governed by their own privacy notices. We do not sell personal data or use it for third-party targeted advertising.
4. Cookies, local storage, and automated ranking
We use a necessary login-session cookie and may store language and interface state in your browser. We currently use no advertising cookies. Recommendations use rules, retrieval, and model scores but do not make hiring decisions for employers; you control outcomes through filters, feedback, and human review.
5. Retention
- Account, career, preference, interaction, and application data: while the account is active; normally removed from active systems within 30 days after a verified deletion request.
- Product feedback: up to 24 months unless you request earlier deletion or we de-identify it.
- Security and access logs: normally 90 days, longer when investigating abuse, incidents, or legal obligations.
- Transaction and tax records: as required by Waffo and applicable financial and tax law.
- Backup copies may remain briefly through normal rotation with restricted access.
6. Security
We use measures including HTTPS in transit, login and invite restrictions, HttpOnly sessions, password hashing, limited access, and local isolation. No system is absolutely secure; we will provide legally required notice of a material incident affecting you.
7. Your choices and rights
You may request access, correction, export, or deletion; withdraw marketing consent; or object to processing. Contact us through the privacy channel above. We may verify identity to protect the account. Local law may provide additional rights and a right to complain to a regulator.
8. International transfers, age, and changes
Providers may process data in the United States or other countries using applicable contractual or legal safeguards. The Service is for users 18 and older. We will announce material changes in-product and update the effective date.