Candidate privacy policy

Why we process your data

• To assess how well you fit the role you applied for, contact you and schedule interviews.
• To suggest another SOZO role that fits your profile better, within the retention period below.
• To measure how well each hiring channel works, in aggregate only, never tied to an individual.
• To fight spam and abuse of the application form.

What we collect

• What you give us: your name, year of birth, phone number, email, the position, your experience, expected salary, where you live, when you could start, your introduction, a profile link (portfolio, GitHub, LinkedIn), who referred you, and your CV file if you attach one.
• Recorded automatically when you submit: the time, the page language, an estimated country from your connection, and how you reached the site (for example a shared link) if known. Your IP address is stored only as a one-way hash to block mass submissions — we never store the IP itself.
• We do not need your ID number, photos of identity documents, health or religious information, or any other sensitive personal data to assess you. Please leave them out of your CV and introduction.

Where it is stored and who can see it

• Applications live in a recruiting system that is separate from the SOZO software and its customer data, running on Cloudflare's cloud infrastructure. Your data may be stored and processed on the infrastructure provider's servers outside Vietnam.
• CVs are kept in private file storage with no public link; they can only be downloaded from the recruiting admin.
• Only people with recruiting permissions at SOZO can see applications. The admin requires passkey sign-in, and actions on applications are logged.
• Please do not email your CV; apply through the form so your application is protected under this policy. Emails you send to tuyendung@sozoplatform.com (questions, data requests) are kept in the company mailbox — outside the recruiting system, so they are not deleted automatically after 365 days like applications sent through the form; to have an email you sent deleted, make a request as described under Your rights.
• Every hour, the company's owners receive an email digest containing only the number of new applications per position and per block, with a link to the recruiting admin. The digest does not include your name, phone number, email address, CV or how you reached the site.
• The application page uses Cloudflare Turnstile to tell people from automated programs. This careers site carries no third-party advertising or tracking code; browser storage is used only to remember your language, your recent searches and how you reached the site.

How long we keep it

• Your application — with its CV, notes and processing history — is kept for at most 365 days from the day you apply, then the system deletes it automatically.
• The only exception: if you are hired, your application becomes part of your employee record as labour regulations require.
• You can ask us to delete it sooner at any time (see Your rights).
• To recover from incidents, application data (not CV files) is backed up in encrypted form; backups rotate after at most 30 days (daily copies) and 12 months (monthly copies), so a deleted application may remain inside an encrypted backup until it rotates out. Backups are used only to recover from incidents, never for recruiting.

Never sold, never shared

• SOZO does not sell, trade or share candidate data with third parties for commercial purposes.
• Data is provided to competent authorities only when the law requires it.

Your rights

• To be informed about how your personal data is processed, and to consent or not.
• To view, or ask for a copy of, the data we hold about you.
• To have incorrect information corrected, or your application updated.
• To have your application deleted; to restrict processing; to object to processing.
• To withdraw the consent you gave when submitting — withdrawal does not affect processing already carried out.
• To complain, report or take legal action as provided by law.

Send your request to tuyendung@sozoplatform.com with the subject "Candidate data request", including your application reference (if you have one) and the phone number you used, so we can verify it is really you. We respond within the time limits set by law. You can also call 083 268 0927 for guidance.

Changes to this policy

• This policy may be updated; the latest version is always on this page. Last updated: 12 November 2026.