Privacy policy

Effective date: 9 October 2026

Last updated: 10 October 2026

1. Scope

This policy applies to the GUDJOB website and to all products, applications and services operated by GUDJOB CO.,LTD, including but not limited to GUDMATE, GUDHOST, GUD CONTEST, GUD Visibility and any other product that refers to this policy (together, the “Services”).

This policy consists of:

• a general part (sections 1–13): applies to all of the Services;
• product appendices (section 14): set out the data specific to each product.

Where an appendix differs from the general part, the appendix prevails for that product.

2. Who we are

• Legal entity: GUDJOB CO.,LTD
• Tax identification number: 0315539317
• Address: 1st Floor, 456 Xo Viet Nghe Tinh Street, Thanh My Tay Ward, Ho Chi Minh City, Vietnam
• Personal data protection contact: the Data Protection department, email contact@gudjob.net (subject “Personal data”)

3. Legal basis

We process personal data in accordance with the following legal instruments:

• Law on Personal Data Protection No. 91/2025/QH15;
• Decree No. 356/2025/ND-CP detailing the Law on Personal Data Protection;
• Law on Cybersecurity and other relevant laws and regulations of Vietnam.

We process data only where one of the following grounds applies:

• your consent;
• the performance of a contract with you or the fulfilment of your request;
• compliance with a legal obligation;
• other cases permitted by law.

4. GUDJOB's role

• Data controller. GUDJOB is the controller for:
  • data collected on the GUDJOB website;
  • customer accounts of GUDJOB products;
  • administrator and judge accounts.
• Data processor. When GUDJOB operates the Services on behalf of another organisation, that organisation is the controller and GUDJOB is the processor, processing data only on that organisation's instructions. For example:
  • a contest organiser on GUD CONTEST;
  • a customer hosting their website on GUDHOST.

  We forward data rights requests concerning this type of data to that organisation and assist it in handling them.

5. Data we collect

Data you provide:

• your full name, email, phone number, organisation, province/city and the content you submit through contact, consultation or newsletter sign-up forms;
• application documents (CV, contact details, experience) when you apply for a position at GUDJOB;
• account information when you use a GUDJOB product;
• data specific to each product (see section 14).

Data collected automatically:

• IP address, browser and device type, time zone, language;
• pages viewed and the referring page;
• cookie data (see section 10);
• activity logs on products that require sign-in.

Data from third parties, when you choose to connect an account (for example TikTok, Facebook or other social networks): see the appendix for the relevant product.

Data we do not collect:

• sensitive personal data, unless a product explicitly states so and you consent;

6. Purposes of processing

• Responding to enquiries, consultation and quotation requests; sending newsletters when you subscribe.
• Providing, operating and securing the Services: account creation, sign-in, fraud and spam prevention.
• Performing contracts with customers and partners.
• Measuring and improving the website.
• Measuring the effectiveness of GUDJOB's own advertising (see section 10).
• Recruitment.
• Complying with legal obligations and resolving complaints.

We do not sell personal data.

7. Data sharing and sub-processors

We share data only where necessary for the purposes set out in section 6, with the following parties:

• Infrastructure providers. These include servers and databases, a content delivery network (CDN), file storage and spam protection (Cloudflare), email delivery (Resend) and website hosting.
• Platforms you choose to connect. For example TikTok, Meta (Facebook, Instagram) and other social networks. Data is exchanged only within the scope of the permissions you grant.
• Measurement and advertising tools on the GUDJOB website: Google (Tag Manager, Analytics, Ads), Meta (Pixel and Conversions API), OpenAI (ChatGPT ad measurement). When you submit the contact form, your name, email address and phone number are hashed one-way (SHA-256) before being sent to Meta, solely to measure the effectiveness of GUDJOB's advertising. Meta does not receive the original data.
• Form tools, used for the contact and job application forms.
• Providers of the software platforms on which some GUDJOB products are built. These parties process data only on GUDJOB's instructions and under contracts containing data protection clauses.
• Competent state authorities, where required by law.

8. Transfers of data outside Vietnam

The servers of GUDJOB products and of some providers listed in section 7 may be located in different countries. Their location may change over time, depending on the infrastructure used.

Your data may therefore be stored and processed outside Vietnam. By using the Services, you are informed of and consent to this transfer.

We carry out cross-border data transfers in accordance with the Law on Personal Data Protection and Decree 356/2025/ND-CP, including:

• preparing a cross-border personal data transfer impact assessment dossier as required by law;
• transferring data only to parties that have contractually committed to protecting it;
• applying technical measures such as encryption in transit and at rest.

9. Retention periods

At the end of the retention period, data is deleted or anonymised.

10. Cookies and measurement tools

Cookies are small files stored in your browser. We use:

• Essential cookies: sign-in, security, remembering your language, spam prevention. Without them, the Services do not work properly.
• Analytics cookies: Google Analytics, to compile aggregate visitor statistics.
• Advertising cookies: Google Ads, Meta Pixel (_fbp and _fbc cookies), ChatGPT ad measurement. Used to measure the effectiveness of GUDJOB's advertising and for retargeting.

You can refuse or delete cookies in your browser settings. You can also use the opt-out tools provided by Google and Meta. Blocking essential cookies may cause some features to stop working.

11. Your rights

All users, in any country, have the following rights over their data:

• to be informed about the processing of their data;
• to give or withdraw consent;
• to access, view and obtain a copy of their data;
• to request correction;
• to request deletion;
• to request restriction of processing;
• to object to processing, including for marketing purposes;
• to lodge complaints, report violations and bring legal action as provided by law.

How to submit a request: email contact@gudjob.net with the subject “Personal data”.

Processing times (under Decree 356/2025/ND-CP): we respond within 2 working days of receiving a request, and then complete it within the following periods.

In complex cases, the period may be extended once as permitted by law. We will then inform you of the reason and the new deadline.

To protect you, we may ask you to verify your identity before processing a request.

Detailed instructions: Data deletion instructions

12. Minors

The Services are not intended for children under 16, unless a product states otherwise.

For persons under 18, we process data only with the consent of a parent or guardian. For children aged 7 or over, the child's own consent is also required. Parents and guardians may request to view the child's data, withdraw consent or have the child's data deleted.

13. Security, external links and policy changes

Security.

• Data is transmitted over encrypted connections (HTTPS).
• Access tokens for connected platforms are encrypted at rest.
• Internal access is restricted on a need-to-know basis.

No system is completely secure. If a personal data breach occurs, we will give notice as required by law.

External links. The Services may contain links to third-party websites. We are not responsible for how those websites process data.

Changes to this policy. When this policy changes, we update the date at the top of the page. Significant changes will be announced on the website or by email to users who have an account.

14. Product appendices

14.1 GUDMATE

GUDMATE is a multi-channel social media management tool: scheduling and publishing posts, post approval, reporting and AI agents.

Data processed:

• user accounts: full name, email;
• access tokens for the social media pages and accounts you connect;
• post content and post approval comments;
• engagement metrics for posts published through GUDMATE.

Purpose: publishing posts on the schedule you set and preparing reports.

Permissions requested from social networks: depending on the network and on what you grant, these include publishing posts, reading analytics data (analytics, insights) and managing ads. GUDMATE uses these permissions only for the actions you request in GUDMATE.

Connections: you can disconnect each account in GUDMATE or in the settings of that social network.

Retention period: for as long as you use the product and 12 months after you stop using it. Access tokens are deleted as soon as you disconnect.

14.2 GUDHOST

GUDHOST is a website hosting service.

Data processed:

• customer account information: GUDJOB is the controller;
• data within the customer's website: the customer is the controller and GUDJOB is the processor. GUDJOB accesses this data only when necessary for operation, backup or restoration, or when the customer requests support.

Backups and retention period: backups are kept according to the service plan. After the service ends, website data and backups are deleted within 12 months at the latest.

14.3 GUD CONTEST

GUD CONTEST is a platform for running contests. For the contestant data of each contest, the organiser is the controller and GUDJOB is the processor.

a) Contestant data and purposes

Organiser, administrator and judge accounts (full name, email, activity logs) are controlled by GUDJOB.

b) Data from TikTok

When you sign in with TikTok, GUD CONTEST uses TikTok Login Kit and Display API, with only two scopes:

• user.info.basic: identifier (open_id), display name, avatar;
• video.list: the list of your public videos and their numbers of views, likes, comments and shares.

Purpose:

• verifying that the contest video is yours;
• calculating the reach score under the contest rules. The metrics are read periodically until the contest's cut-off date.

Commitments:

• we do not post on your behalf;
• we do not read your private videos or messages;
• we do not sell data;
• access tokens are encrypted at rest and used only for the purposes above.

Retention period:

• access tokens: deleted when the contest ends;
• video metrics: retained as set out in item d).

Revoking access: you can revoke access at any time in the TikTok app: Profile → ☰ → Settings and privacy → Security & permissions → Apps and services permissions, select the app, then tap Remove access (menu names may differ slightly between app versions).

c) Data from Meta (Facebook, Instagram)

Entries may be published on the contest's Facebook Page via Meta Graph API, either directly or through GUDMATE. Publishing uses the permissions of the contest's Facebook Page, not the contestant's personal account.

GUD CONTEST reads the reach, reactions, comments and shares of those posts to calculate scores under the contest rules.

Data stored:

• post ID;
• engagement metrics;
• the time the metrics were read.

Retention period as set out in item d).

d) Retention period

Contestant data and metrics from TikTok and Meta are retained for the duration of the contest and for 6 months after the results are announced. The data is then deleted or anonymised, unless the law requires longer retention (for example, prize award records).

e) Contestants under 18

• Contestants under 18 must confirm upon registration that they have the consent of a parent or guardian. Contestants aged 7 or over must also give their own consent.
• The organiser is responsible for verifying this consent.
• A parent or guardian may request deletion of the contestant's data.

f) Contestants' rights

Send requests to the contest organiser or to contact@gudjob.net. GUDJOB will forward the request to the organiser and assist in carrying it out.

14.4 GUD Visibility

GUD Visibility measures the extent to which customers' brands appear in the answers of AI platforms.

Data processed:

• user accounts: full name, email;
• business information provided by the customer: brand, competitors, set of tracked questions;
• measurement results.

GUD Visibility does not collect personal data of AI platform users.

Retention period: for as long as you use the product and 12 months after you stop using it.

Contact us

GUDJOB CO.,LTD · contact@gudjob.net · 1st Floor, 456 Xo Viet Nghe Tinh Street, Thanh My Tay Ward, Ho Chi Minh City