Effective Date: March 23, 2026
This Data Retention Policy describes how Cynternet (“we,” “us,” or “our”) retains, manages, and deletes personal data collected through the Cynternet platform (the “Platform”). This policy should be read in conjunction with our Privacy Policy and Terms & Conditions.
1. Retention Principles
We retain personal data only for as long as necessary to:
- Fulfill the purposes for which it was collected.
- Comply with legal, regulatory, and contractual obligations.
- Resolve disputes and enforce our agreements.
- Maintain Platform security and prevent fraud.
When data is no longer needed for any of these purposes, it is securely deleted or anonymized.
2. Data Retention Schedule
2.1 Active Accounts
| Data Category | Retention Period | Justification |
|---|---|---|
| Account information (name, email, password hash) | Duration of account activity | Required to maintain and operate the account |
| Job Seeker profile (resume, experience, skills) | Duration of account activity | Required for job matching and application processing |
| Recruiter & company information | Duration of account activity | Required for job posting and candidate management |
| Job postings | Duration of account activity + 12 months after expiry | Historical reference for applicants and compliance |
| Job applications | Duration of account activity + 24 months after submission | Compliance with employment regulations and dispute resolution |
| Uploaded files (resumes, documents, images) | Duration of account activity | Required for profile and application functionality |
| Messages & communications | Duration of account activity + 12 months | Support, dispute resolution, and audit purposes |
2.2 After Account Deletion
| Data Category | Retention Period After Deletion | Justification |
|---|---|---|
| Account identifiers (anonymized) | 6 months | Fraud prevention and abuse detection |
| Transaction & payment records | 7 years | Tax and financial regulatory compliance |
| Job application records (anonymized) | 24 months | Employment law compliance and equal opportunity reporting |
| Uploaded files (resumes, documents) | Deleted within 30 days | No further purpose after account deletion |
| Support tickets & correspondence | 12 months | Ongoing dispute resolution |
| Security & audit logs | 12 months | Security investigations and compliance |
2.3 Automatically Collected Data
| Data Category | Retention Period | Justification |
|---|---|---|
| Server & access logs | 90 days | Security monitoring and debugging |
| Analytics data (aggregated) | Indefinite | Cannot identify individuals; used for Platform improvement |
| Session cookies | Until session ends or 30 days | Authentication and security |
| Preference cookies | 1 year | User experience personalization |
3. Inactive Accounts
An account is considered inactive if no login or Platform activity has occurred for a continuous period of 24 months.
- First notification: After 18 months of inactivity, we will send an email reminder to the registered email address.
- Second notification: After 22 months of inactivity, a final warning email is sent.
- Account deactivation: After 24 months of inactivity, the account will be deactivated and personal data will be scheduled for deletion per the retention schedule above.
Users can reactivate their account at any time before the deletion process begins by logging in.
4. Data Deletion Process
4.1 User-Initiated Deletion
You may request deletion of your account and personal data at any time by:
- Using the account deletion option in your account settings.
- Contacting us at [email protected] with a deletion request.
Upon receiving a valid deletion request:
- Your profile will be deactivated immediately and removed from public visibility.
- Personal data will be permanently deleted within 30 days, unless retention is required by law.
- You will receive a confirmation email once the deletion is complete.
4.2 Data That Cannot Be Deleted
Certain data may be retained beyond your deletion request where required for:
- Compliance with legal, tax, or regulatory obligations.
- Ongoing legal proceedings or disputes.
- Prevention of fraud or abuse (anonymized data only).
- Legitimate business purposes where data has been fully anonymized.
5. Data Anonymization
Where possible, we anonymize data rather than delete it to preserve the utility of aggregated insights while protecting your privacy. Anonymized data:
- Cannot be linked back to any individual.
- Is used solely for analytics, research, and Platform improvement.
- Is not subject to data subject access or deletion requests, as it is no longer personal data.
6. Backup & Disaster Recovery
- Deleted data may persist in encrypted backup systems for up to 90 days after deletion from production systems.
- Backups are encrypted and access is strictly limited to authorized personnel.
- Data in backups is not actively used and will be permanently removed when the backup cycle completes.
7. Third-Party Data Processors
Where we share data with third-party service providers, we require them to:
- Retain data only for the duration necessary to provide their services.
- Delete or return all personal data upon termination of the service agreement.
- Maintain security standards consistent with our own.
Key third-party categories and their retention obligations:
- Cloud hosting providers: Data retained only while hosting agreement is active.
- Email service providers: Email logs retained for up to 30 days.
- File storage providers: Files deleted within 30 days of removal from the Platform.
8. Legal Holds
In the event of litigation, regulatory investigation, or other legal proceedings, we may place a “legal hold” on certain data, suspending normal retention schedules until the matter is resolved. Affected Users will be notified where legally permissible.
9. Changes to This Policy
We may update this Data Retention Policy periodically. When material changes are made:
- The “Effective Date” at the top will be updated.
- Registered Users will be notified via email.
- A notice will be posted on the Platform.
10. Your Rights
You have the right to:
- Request information about what data we hold and how long it will be retained.
- Request deletion of your personal data, subject to legal retention requirements.
- Request correction of inaccurate data.
- Request data portability to receive your data in a structured format.
- Lodge a complaint with a data protection authority if you believe your rights have been violated.
11. Contact Us
For questions about this Data Retention Policy or to exercise your data rights, please contact us:
- Email: [email protected]
- Website: cynternet.com/contact
We will acknowledge your request within 5 business days and provide a substantive response within 30 days.