Nodesify Account Privacy

The updated clauses below are provided in English and Bahasa Melayu. Other translated sections remain available; read them alongside the current clauses and the relevant product policies.

English · Bahasa Melayu

Nodesify Technology operates ResumeForU. The account section covers shared sign-in. The website sections below cover nodesify.com. ResumeForU has its own product terms, privacy notice and refund policy.

• ResumeForU: Terms of Service · Privacy Policy · Refund policy

This policy also covers the shared Nodesify account, for which Nodesify Technology is the data controller. Logto stores the central identity profile and authentication information. Participating products receive the account identifier and, as needed for sign-in and onboarding, email, name, profile image and access membership. A sign-in session can recognize you across products. Authentication cookies support this service. Identity, hosting, email/SMS and selected social-login providers process information needed for authentication, security and delivery; social providers have their own policies.

Shared identity does not itself share resume content, files or purchase history between products or grant access to another product. Product-specific notices describe product data and providers. Account data is retained while needed to operate the shared account; security, legal and transaction records may need longer retention. Deleting one product does not delete the central identity. Contact support@nodesify.com for access, correction or shared closure; we verify and manually coordinate requests across products, subject to retention obligations. Acknowledging this policy does not authorize marketing or optional processing.

This section is provided in English. The shared-account provisions apply to participating Nodesify products. The website provisions apply to nodesify.com. Read the privacy notice for each product you use alongside this policy; a product listing does not mean you use that product or that it receives your information.

Product notices describe the information handled by that product, its purposes, providers and retention practices. Website-specific statements about analytics, retention and AI training do not describe every product. Where a product notice gives more specific information about product processing, read that information for that processing.

The shared account supports authentication, account security and access to participating products. Products may receive the identity information needed for their sign-in and onboarding. A shared sign-in does not give every product access to content you store in another product.

Product content, billing records and connected-service data are separate from the central identity profile. Consult the relevant product notice before uploading information or connecting another service. Social sign-in providers also handle information under their own privacy notices. Optional marketing and optional processing require their own applicable choices; acknowledging a privacy notice does not authorize them.

Specify whether your request concerns one product or your shared Nodesify account. Removing access to a product, cancelling a subscription and deleting personal data are different actions. Product retention rules and legal obligations may require some records to remain after access ends.

For shared account access, correction or closure, contact support@nodesify.com. We verify the request and coordinate the affected products. Closing the shared account can prevent access to multiple products; it does not promise immediate deletion of all records or automatically determine refunds. Review each product’s cancellation and export instructions before requesting closure.

The following sections cover your use of nodesify.com. For shared sign-in, read the account section above; for ResumeForU product data and purchases, follow the product links above.

Nodesify Technology (Registration No. 202603004114 / RA0131566-P) ("we", "us", "our") operates this website and is the Data Controller for personal data collected through this website. We are registered under the Registration of Businesses Act 1956 until 04 January 2027.

We are committed to protecting your privacy in accordance with the Malaysian Personal Data Protection Act 2010 (Act 709), as amended in 2024, and the Singapore Personal Data Protection Act 2012.

Data Protection Officer

• Email: support@nodesify.com
• Address: 11, Jalan Gunung Lambak 16, Taman Gunung Lambak, 86000, Kluang, Johor, Malaysia

We may collect the following personal data when you use this website.

Information You Provide

• Name
• Email address
• Phone number
• Company name and job title
• Website URL or project details that you choose to submit
• Message content submitted through contact forms
• Newsletter subscription details
• Career application details and uploaded attachments, if you apply for a role

Information Collected Automatically

• IP address
• Browser type and version
• Operating system and device information
• Referring URL
• Pages visited and time spent
• Security, anti-abuse, and rate-limit metadata

Data We Do Not Collect Through This Website

• Sensitive personal data such as health, biometric, religious, or political data, unless you voluntarily include it in a submission
• Transaction card information through this website

We use submissions to respond to inquiries, provide requested services and consider career applications. Newsletter messages require your opt-in. We process proportionate technical information to operate and protect the website and meet legal duties. Optional analytics and chat are subject to the choices available on the website and any consent required by applicable law.

The applicable legal grounds depend on the processing and your jurisdiction: consent where required, providing a requested service or taking steps toward a contract, and compliance with law. We rely on legitimate interests only where the applicable law permits that basis; we do not claim it is a general exception to consent under Malaysian law. Withdrawing consent may prevent a feature that needs that information. Acknowledging this notice does not subscribe you to marketing. We do not use website submissions to train public AI models.

We do not sell your personal data to third parties.

We may share personal data with the following categories of recipients where necessary for the purposes described in this Privacy Policy:

• Malware scanning providers: Scanning uploaded job-application attachments for malicious content before storage
• Email hosting and delivery providers: Business communication and form notifications
• Web hosting and infrastructure providers: Website operation, storage, security, and availability
• Analytics providers: Website usage analysis
• Live chat or support providers: Responding to visitor inquiries
• Legal, accounting, and professional advisors: Compliance and business administration
• Regulators, courts, or public authorities: Where required by law, court order, or regulatory authority

All third-party service providers are required to protect your personal data and use it only for the purposes specified.

Essential cookies and storage support security, form protection and preference choices. Cloudflare Turnstile helps protect forms. Your cookie choice is stored in browser storage until you change it or clear that storage; it does not have an automatic one-year expiry.

Google Analytics 4 loads only after you explicitly accept analytics, including for visitors outside Europe. Use the cookie-preferences control to refuse analytics or withdraw your choice. Withdrawal stops the integration and clears its accessible first-party analytics cookies. Browser settings can remove other stored information. With analytics consent, we store the first entry path, referring hostname and bounded campaign identifiers for the browser session. When you submit an enquiry, that optional context is saved with the contact record to assess enquiry sources and outcomes; we exclude URL queries, advertising click identifiers and form contents from this attribution context. Withdrawal clears the browser attribution; existing submitted records follow the contact retention and deletion process. If Google Ads is configured, its tag loads only after a separate marketing choice. It may use advertising cookies and click identifiers to measure accepted enquiries and support relevant advertising. Analytics consent alone does not enable advertising. Choices saved before this advertising integration do not enable it until you explicitly save a marketing choice again. Withdrawal stops the loaded integration and clears accessible first-party measurement cookies; it does not undo data already processed by Google. Optional analytics events use page paths and bounded campaign identifiers; full referring URLs, query strings and form contents are excluded from our event parameters. Automatic third-party live chat is disabled; use the contact form or support email instead. Cloudflare may process network and security information when delivering the site; independently configured edge analytics must follow the applicable disclosure and consent requirements.

Contact-form records become eligible for daily cleanup 365 days after submission. This period is measured from submission, rather than a later interaction. If an inquiry becomes a customer engagement, separate business correspondence and contractual records follow the retention needed for that engagement.

Career applications and their uploaded attachments become eligible for cleanup 365 days after application. Files are removed before the application record; a storage failure retains the deletion inventory for retry. Newsletter subscription records are removed when you unsubscribe or request deletion. Unconfirmed subscriptions become eligible for cleanup after seven days. Older inactive subscription records are removed by that cleanup too.

Website server and client logs become eligible for cleanup after 30 days. Security evidence needed for an actual incident or legal matter may be retained separately while necessary. Rate-limit and security storage uses configured expiry periods. Analytics provider data may be retained for up to 26 months, subject to the provider settings and your choices. Eligibility is not a promise of deletion at the exact cutoff; scheduled processing and outages can delay removal. Delivery providers, business mailboxes and backups require separate retention and deletion handling. We review those copies and remove personal data when no longer needed for the stated purpose or a legal obligation.

We implement appropriate technical and organizational security measures to protect your personal data, including:

• Encryption in transit using TLS
• Access controls and authentication
• Secure hosting infrastructure
• Cloudflare security and anti-abuse protections
• Regular security reviews and incident response procedures

While we strive to protect your data, no method of transmission over the Internet or method of electronic storage is completely secure. We cannot guarantee absolute security.

We investigate suspected personal data breaches, contain exposure and assess the notification duties under the law that applies. We notify the relevant regulator and affected individuals when required, using that jurisdiction’s thresholds and deadlines. We do not use one jurisdiction’s risk test as a substitute for another jurisdiction’s requirements. Required notices explain the incident, affected information and relevant protective steps.

Depending on applicable law, you may request access, correction, deletion, withdrawal of consent, portability, restriction or objection, and complain to the relevant regulator. Rights have conditions and exceptions. Contact support@nodesify.com; we verify identity or authority proportionately and respond within the applicable legal deadline, explaining any lawful extension or refusal. Do not send passwords or full payment-card details.

Necessary contact fields must be provided for a requested reply or application; optional fields and newsletter subscription are your choice. Removing information necessary for a requested feature may prevent us from providing it. Shared-account and product requests follow the relevant sections and product notices above.

Your personal data may be transferred to and processed in countries other than your country of residence, including Malaysia, Singapore, and regions where our service providers (such as Google for analytics) operate servers.

Where personal data is transferred outside Malaysia or Singapore, we use appropriate safeguards such as contractual protections, standard contractual clauses, comparable protection assurances, or other safeguards recognized by applicable data protection laws.

Our website is not directed at individuals under the age of 18. We do not knowingly collect personal data from children.

If we become aware that we have collected personal data from a child under 18, we will take steps to delete it promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service offerings.

Changes will be posted on this page with an updated "Last Updated" date. Where required by law, we will notify you of material changes, such as by email or a website notice.

If you have questions, concerns, or complaints about how we handle your personal data, please contact us:

• Company: NODESIFY TECHNOLOGY
• Email: support@nodesify.com
• Address: 11, Jalan Gunung Lambak 16, Taman Gunung Lambak, 86000, Kluang, Johor, Malaysia

You also have the right to lodge a complaint with the relevant data protection authority:

• Malaysia: Personal Data Protection Commissioner, Jabatan Perlindungan Data Peribadi (JPDP)
• Singapore: Personal Data Protection Commission (PDPC)