Privacy policy

Who is responsible

SOJI ("we", "us") operates hiring.sojistudio.com and is the controller of the personal data described in this policy. You can contact us at info@sojistudio.com.

What we collect, why, and for how long

Browsing and analytics. We do not require accounts to browse jobs or guides. If you accept analytics cookies in the cookie banner, Google Analytics and Microsoft Clarity collect pages visited, referrer, approximate location and device type, and Clarity records anonymised interactions (clicks, scrolling and mouse movement) so we can improve the site. If you reject analytics, these tools are not loaded. Legal basis: your consent. The data is kept by those providers under their own retention settings.

Anonymous visit counting. We count page views without cookies. For each visit we add 1 to a daily total for the page, language, traffic type (for example search, social, direct) and country. We do not store IP addresses, user agents, identifiers or anything that can single you out, and this count does not depend on the cookie banner. Legal basis: our legitimate interest in knowing how the site is used. Daily totals are kept for up to 24 months.

Job applications. When you apply through the SOJI form, we collect your first and last name, email address, LinkedIn profile and the CV/resume (PDF) you upload. We use them to send you the link to complete your application on the partner platform (e.g. Mercor, Micro1), to send up to two reminders about unfinished applications, and to record when emails were sent and when you clicked the application link or confirmed you completed it, so we can understand and improve this process. Your CV is stored in our database and can be opened only by SOJI's administrator. We do not send your CV or details to the platforms or to anyone else. Legal basis: taking steps at your request (your application) and our legitimate interest in following up. Every reminder includes a link to stop reminders. We automatically delete application data, including the CV, 12 months after you apply, or earlier if you ask us to.

CV check. If you use the free CV check, we collect your CV (PDF, DOCX or pasted text), your email address, country, language, target field and, if you add it, the role or platform you apply to. We use them only to confirm your email, run an automatic rule-based check and email you the result, on the basis of your consent. We may also process the text of your CV with AI tools to produce an analysis, only with your consent and never to train models. We keep a small, short-lived address fingerprint (not your IP address) to limit abuse. The uploaded file and the extracted text are deleted 7 days after you receive your result, and the whole record is anonymised after 30 days. You can delete everything at any time with the "Delete my data" link in the result page and in every email. Service providers involved: Hostinger (hosting) and our email delivery provider. If you tick the newsletter box, we subscribe your confirmed address to the newsletter. This service is for people aged 16 or over.

Newsletter. If you subscribe through the pop-up or a form, we store your email address and your language. We use them to send you emails with new roles. Legal basis: your consent. You can withdraw it at any time with the unsubscribe link in every email, or by writing to us. We keep your email until you unsubscribe. We do not add you to the newsletter without your consent, and applying for a job does not subscribe you. If you choose alert preferences, we also store the fields, minimum pay and country you pick, only to filter the emails we send you; you can change or clear them any time from the link in each email. We also record which page or form you signed up from, to understand what works.

Messages you send us. If you email us, we keep the conversation as long as needed to answer you and handle any follow-up.

Who processes data for us

We use service providers that process data on our behalf: web hosting (Hostinger), email delivery for application emails and, when newsletters start, an email delivery provider, and the analytics providers named above (Google and Microsoft). Some of them may process data outside the European Economic Area, relying on safeguards such as standard contractual clauses. We do not sell personal data.

Referral links and other sites

If you click an "Apply" link, you leave SOJI and apply directly on the platform's site. SOJI does not collect or store what you submit there. Apply links are referral links: the destination platform may use cookies or URL parameters to attribute your application to us, and SOJI may earn a referral reward if you are hired through them. This costs you nothing.

Cookies and browser storage

We store in your browser your language preference, your cookie choice and your choice about the newsletter pop-up, so we do not ask again. Analytics cookies are used only with your consent. You can change your choice by clearing the site's data in your browser; the cookie banner will then appear again.

Your rights

You can ask us at info@sojistudio.com for access to your data, correction, deletion, restriction of processing, a copy in a portable format, or object to the processing. You can also withdraw consent at any time. We answer within one month. If you think we have not handled your data properly, you have the right to complain to a data protection authority; in Portugal this is the CNPD (cnpd.pt), or the authority of your country of residence.

Children

The site is not directed at children under 16, and we do not knowingly collect their data.

Changes

We may update this policy. The date at the top shows the latest version.