Privacy Policy
Privacy Policy
Global Job Cosmos operator Jung Jubin processes personal information only where needed and manages it under applicable privacy law. This policy describes the current service code and operating structure.
- Data controller
- Jung Jubin (Global Job Cosmos operator)
- Effective date
- July 31, 2026
- Google advertising
- AdSense code in use; advertising review in progress
1. Purposes and legal basis
We process personal information for account creation and sign-in, personalized opportunity preparation, organization reviews, service security, and incident response. Necessary account functions are processed to form and perform the service agreement; optional functions are processed only when a user chooses to use or configure them.
- Identify members, maintain sign-in state, reset passwords, and prevent abuse
- Store saved opportunities, preparation stages, checklists, notes, and preference profiles
- Receive, review, and publish organization reviews anonymously or under a name
- Handle and reply to service, account, privacy, and general inquiries sent by email
- Produce anonymized and aggregated usage statistics, maintain security, analyze errors, and respond to disputes
2. Data categories and retention
| Category | Data processed | Purpose | Retention |
|---|---|---|---|
| Registration and authentication | Email, name or display name, one-way password hash, email-verification status, account creation and update timestamps | Member identification, sign-in, and account protection | Until account deletion |
| Account recovery | Email, member identifier, one-time password-reset token, creation and expiry timestamps | Password reset requested by the account holder | Expires after one hour or immediately after use; expired credentials are purged daily within 24 hours |
| Optional preparation profile | Education, years of experience, interest areas and organizations, target career stage | Personalized opportunity management and preparation | Until the user deletes or changes it, or deletes the account |
| Saved opportunities and preparation | Opportunity identifier, title, organization, deadline, source, preparation stage, checklist, and opportunity notes | Save opportunities and preparation state | Until the user removes the opportunity or deletes the account |
| Organization reviews | Author account identifier, organization, rating, headline, pros and cons, optional fields, anonymous setting, and moderation status | Review intake, moderation, publication, and dispute response | Until deletion request or account deletion; may be retained separately until a dispute is resolved |
| Sign-in session | Session token, IP address, browser and device information (User-Agent), creation and expiry timestamps | Maintain sign-in, protect accounts, and prevent abnormal access | Session lifetime of 7 days; purged daily within 24 hours after expiry |
| Access and security logs | IP address, request time and address, browser information, error and security events | Service stability and security-incident prevention and response | Up to 3 months, or less where a service provider retains it for a shorter period |
| Email inquiries | Sender name and email, recipient address, subject, body, receipt time, and attachment name, type, and size | Handle and reply to service, account, privacy, general, and partnership inquiries and respond to disputes | For the period needed for inquiry handling and disputes; deleted promptly after the purpose is met or a verified deletion request is handled |
| Anonymous aggregated metrics | Search count by normalized keyword and click count by public opportunity classification | Popular-search discovery and service quality improvement | Aggregates needed for 7-day statistics; no raw event is stored by visitor, account, or IP |
We do not store password plaintext. Do not enter sensitive information or unique identifiers, such as national ID or passport numbers or health information, in profiles, notes, or reviews.
4. Processors and cross-border processing
Because the service uses global cloud and AI processing services, data can be processed or stored outside your country through encrypted networks. You can browse public opportunities without registering an account.
| Processor | Service and data | Location and method | Retention and choice |
|---|---|---|---|
| Cloudflare, Inc. | Web hosting, security, authentication, D1 database operation, password-reset email delivery, and inquiry email reception and routing. Account, profile, session, saved opportunity, review, access-log data, and email address, subject, body, and attachment metadata. | Cloudflare global network and the current D1 primary database in the Asia-Pacific (APAC) region; encrypted transfer while using the service and sending or receiving email. | The retention periods in section 2 or until the processing agreement ends. You can decline cross-border processing of account data by not using account features, but account features will then be unavailable. |
| Discord Inc. | Delivery of inquiry-email content to a Discord server operations channel: sender and recipient addresses, subject, body, receipt time, and attachment name, type, and size. | Discord-operated infrastructure. A Cloudflare Email Worker sends data through an encrypted incoming webhook to a channel accessible to authorized Global Job Cosmos Discord server members. | For inquiry handling and dispute response and under Discord's applicable policies. You can decline this processing by not sending inquiry email; public opportunity browsing remains available. |
| Google LLC (Gemini API) | Summary and display structuring of public opportunity postings. Public contact information contained in a posting can be processed with it. | Countries where Google or its processors operate facilities; encrypted server-to-server transfer. | For periods under Google's applicable terms and security-log policy. Member emails, profiles, application notes, and reviews are intentionally not sent. |
| Google LLC (AdSense) | Site ownership verification, advertising code, ad requests and delivery, fraud prevention, and performance measurement. IP address, browser/device data, cookies/ad identifiers, page visits, and ad-interaction information can be processed. | Countries where Google or its processors operate facilities; encrypted transfer when visiting the site. | Under Google's advertising-service policies. Manage personalized advertising through Google Ad Settings or block advertising cookies in your browser. |
Related information: Cloudflare D1 data location · Cloudflare Privacy Policy · Discord Privacy Policy · Discord Webhooks · Gemini API Terms
5. Generative AI
The service uses the Gemini API to make public international-organization opportunity postings easier to read and to restore source paragraph structure. AI produces supporting explanations of the source; it does not alter the source or decide final recruitment terms.
- Users do not connect directly to Gemini or supply an API key; public-posting processing runs on the service server.
- Member email, profile, saved-opportunity notes, and reviews are not used as AI inputs.
- Use for training and retention of AI inputs and outputs depends on the applicable paid or free API terms.
- AI output can be inaccurate, so the original link and preserved source text on the opportunity page remain the final reference.
- Challenge inaccurate or inappropriate output through the privacy contact below.
7. Deletion
When the processing purpose is completed or the retention period ends, personal information is deleted without delay so that it cannot be restored or reproduced. Electronic files and database records are deleted using secure deletion commands. Where law requires preservation, the information is kept separately only for that period and then deleted.
8. Your privacy rights
You may request access, correction, deletion, restriction of processing, withdrawal of consent, and account deletion for your information. You can edit a profile and remove or change saved opportunities and notes in My page; send any other request through the privacy contact below.
- We may request the minimum additional information needed to verify the requester's identity.
- A legal representative or authorized agent may need documentation showing authority.
- A request can be limited where it would infringe another person's rights or a legal obligation, to the extent law permits.
- You may decline personal-data processing or consent, but essential account features cannot be provided without processing essential account data.
9. Security measures
We apply the following measures to prevent loss, theft, leakage, alteration, and destruction of personal information:
- One-way password hashing, encrypted transport (HTTPS), session expiry, and request-rate limits
- Cloudflare security features for abnormal-traffic blocking and verification of the actual connecting IP
- Least-privilege access to the personal-data database and operational secrets
- Review of error and security events, scheduled deletion of expired credentials, and incident response
10. Children
The service does not provide account services to children under 14 and does not knowingly collect their personal information without a legal representative's consent. If we learn that such information was collected, we will verify the request from the child or legal representative and delete it without delay.
11. Privacy contact and remedies
- Data controller
- Jung Jubin (Global Job Cosmos operator)
- Privacy contact
- Jung Jubin
- support@globaljobcosmos.comAccess, correction, deletion, restriction, and account inquiries
For consultation or remedy concerning a privacy violation, you may contact the relevant authority, including:
- Korea Internet & Security Agency (KISA) Privacy Infringement Report Center: 118 · privacy.kisa.or.kr
- Personal Information Dispute Mediation Committee: 1833-6972 · kopico.go.kr
- Korean National Police Agency Cybercrime Report System: 182 · ecrm.police.go.kr
Inquiry email is handled in the Global Job Cosmos Discord operations mail channel. Do not send passwords, verification codes, national ID or passport numbers, health information, or other sensitive or unique identifiers.
12. Policy changes
We will announce policy changes through the service before they take effect. Changes that materially affect rights, including collection categories, purposes, third-party sharing, or cross-border transfer, will be highlighted before or at the time of the change.
Published and effective: July 31, 2026