Privacy Policy

Vantaso (SMC-Private) Limited, a single-member private limited company registered in the Islamic Republic of Pakistan ("Vantaso," "we," "us," or "our"), operates JobMason. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our platform. By using JobMason, you consent to the practices described in this policy.

We collect the following categories of information:

Information You Provide

• Account information: name, email address, and password when you create an account
• Profile information: professional experience, education, skills, certifications, contact details, and social links you enter to generate application materials
• Job information: job titles, company names, and job descriptions you provide for Mason Pack generation
• Payment information: billing details processed securely through our third-party payment provider (we do not store your full card number)
• Communications: messages you send to us via email or support channels

Information Collected Automatically

• Usage data: pages visited, features used, actions taken, and timestamps
• Device information: browser type, operating system, device type, and screen resolution
• Log data: IP address, referral URLs, and error logs
• Cookies: session cookies for authentication and analytics cookies to understand usage patterns

We use the information we collect to:

• Provide, operate, and improve the JobMason platform
• Generate tailored application materials (resumes, cover letters, emails, questionnaire answers) from your profile data and job descriptions
• Process payments and manage your subscription
• Send important service notifications (account confirmations, security alerts, billing updates)
• Respond to your support requests and inquiries
• Analyze usage trends to improve our features and user experience
• Prevent fraud, enforce our Terms, and comply with legal obligations

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We share it only with the service providers we need to operate JobMason. Each acts as a processor on our documented instructions, is bound by a written data-processing agreement, and may not use your data for its own purposes.

Categories of recipients

• AI model providers - receive the profile fields and job descriptions you submit, solely to generate your resumes, cover letters, emails and Q&A answers and to structure imported profiles and job posts. Your data is not used to train their foundation models.
• Content-moderation providers - receive short excerpts of text you submit, to screen it against our Acceptable Use Policy before generation.
• Web-content retrieval providers - when, and only when, you paste a job-posting or profile URL, they fetch the public content of that page on our behalf. They receive the URL and return the public page text. Your profile data is not sent to them.
• Cloud hosting, database and storage providers - host the application and store your account, profile, Mason Pack and uploaded files.
• Payment processing providers - receive your email and billing metadata to take payment and manage your subscription. We never receive or store your full card number.
• Transactional email providers - receive your email address and message contents to deliver verification, password-reset and service notifications.
• Analytics and error-monitoring providers - receive usage events, a pseudonymous identifier, your email and name once you sign in, IP address, device metadata and error reports, so we can measure and fix the product. Analytics runs only if you consent via the cookie banner.
• Identity providers - only if you choose third-party sign-in, they handle the sign-in handshake and return the profile fields you authorise.

We maintain a current list of the specific sub-processors behind these categories, including the personal data and regions involved. Business customers and any individual user may request it by emailing contact@vantaso.org, and we will provide reasonable notice before engaging a new sub-processor that processes personal data.

Other disclosures

• Legal requirements: when required by law, regulation, legal process, or governmental request.
• Business transfers: in connection with a merger, acquisition, or sale of assets.

For business customers requiring a Data Processing Agreement (DPA), see /policies/dpa.

We retain your personal information for as long as your account is active or as needed to provide you with the Service. If you delete your account, we will remove your personal data within 30 days, except where retention is required for legal, accounting, or compliance purposes.

Generated application materials (Mason Packs) are stored in your account until you choose to delete them or your account is closed.

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure, access-controlled database infrastructure
• Regular security assessments and monitoring
• Strict access controls limiting employee access to personal data

While we take reasonable precautions, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: request a copy of the personal information we hold about you
• Correction: request correction of inaccurate or incomplete data
• Deletion: request deletion of your personal data (subject to legal obligations)
• Portability: request an export of your data in a structured, machine-readable format
• Objection: object to certain processing activities, such as direct marketing
• Withdraw consent: where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, contact us at contact@vantaso.org.

We use cookies and similar tracking technologies to maintain your session, remember preferences, and (with your consent) measure how you use the Service. Categories and a full list are described in our Cookie Policy. You can change your preferences at any time from the cookie banner.

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any personal information.

JobMason is not directed to children. You must be at least 16 years old to use the Service, and at least 18 (or the age of majority in your jurisdiction) to purchase a paid subscription; you confirm that you meet these requirements when you register, as set out in our Terms & Conditions. Consistent with the U.S. Children's Online Privacy Protection Act (COPPA), we do not knowingly collect personal information from children under the age of 13. If we become aware that we have collected personal data from a child below the applicable minimum age, we will take steps to delete it promptly.

We are based in Pakistan and the providers described in Section 4 are located primarily in the United States and the European Union, so your information will be transferred to and processed in countries other than your own. Where personal data is transferred out of the EEA, the UK or Switzerland, we rely on the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum with each provider, together with appropriate technical safeguards. You may request details of the safeguards applied to a specific transfer at any time.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the revised policy on this page with a new "Last updated" date. For significant changes, we may also send an email notification. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at contact@vantaso.org.