Privacy Policy
Data ethics is not an afterthought at Aganyu. We strictly isolate your personally identifiable information from early screening workflows.
Last updated: June 2026
Intelligent Career Matching
To connect you with the perfect opportunity, Aganyu utilizes an intelligent matching engine. This system analyzes your skills and experience to understand your unique "Professional DNA," allowing us to suggest roles and candidates that are intuitively compatible, rather than just matching keywords.
Zero-Bias Anonymization Protocol
To ensure meritocratic hiring, Aganyu institutes a Zero-Bias Discovery engine. When an employer browses the talent pipeline, Job Seeker names, photos, and direct contact details are redacted. The identity is only unmasked when the employer issues an official "Shortlist" invitation.
Structured Screening Privacy
Employers review structured candidate information such as skills, experience, and screening answers before any full profile reveal. Aganyu keeps identifying details separate from early screening so hiring decisions can begin from relevant qualifications instead of personal identity.
Cryptographic Data Storage
Your profile data, uploaded PDF certificates, and interaction metrics are securely stored utilizing Supabase. Row Level Security (RLS) policies structurally prevent unauthorized horizontal access. A Job Seeker's certificates can only be accessed by the seeker or strictly authorized product flows.
Audit Logging & Observability
We run an internal Audit Registry tracking systemic mutations (e.g., job approvals, ban issuances, security re-configurations). These logs may record IP addresses and timestamped vectors strictly for operational continuity, security incident investigation, and regulatory compliance. They remain isolated from marketing tools.
Multi-Factor Continuity
Aganyu encourages robust authentication. Backup recovery codes are hashed cryptographically upon generation. Staff members within the Admin Dashboard cannot view your plaintext passwords or your raw generated MFA seeds.
Data Deletion & Extraction
You possess the right to erasure. When you delete a certificate, the asset is removed from our storage buckets and instantly decoupled from the database. Should you choose to delete your account, your profile is purged, and any associated job applications are marked abandoned.
Google Sign-In & User Data
Required disclosure under the Google API Services User Data Policy
Data Accessed
When you choose "Sign in with Google" or "Continue with Google", Aganyu requests the following Google account data via OAuth 2.0: your name (given name and family name), your primary Google email address, and your Google profile picture URL. These correspond to the standard OpenID Connect scopes: openid, email, and profile. No other Google data — including Google Drive, Gmail, Contacts, Calendar, or any other Google service — is accessed or requested.
Data Usage
The Google account data retrieved at sign-in is used exclusively to create and authenticate your Aganyu account. Specifically: your email address is used as your unique account identifier and for sending transactional notifications (e.g., job application updates); your name is used to pre-populate your Aganyu profile display name; and your profile picture URL may be used as your default avatar. This data is never used for advertising, remarketing, or sold to third parties.
Data Storage
Your Google-sourced account data (email, name, avatar URL) is stored in Aganyu's secure database hosted on Supabase (EU region). It is retained for as long as your account is active. Row-Level Security (RLS) policies are enforced at the database layer to prevent any unauthorized access. You may delete your account at any time, which permanently removes all associated data from our systems.
Data Sharing
Aganyu does not share your Google user data with any third parties, advertisers, or data brokers. Your Google data is accessible only to Aganyu's core application infrastructure. The OAuth token issued by Google is handled entirely by Supabase Auth on your behalf and is not stored or logged by Aganyu's application layer. No Google user data is transferred to any analytics, marketing, or external service.
Revoking Access
You may revoke Aganyu's access to your Google account at any time by visiting your Google Account Permissions page at myaccount.google.com/permissions and removing Aganyu from the list of connected apps. Revoking access does not delete your Aganyu account — you may still log in with a password if one is set, or request account deletion via our support channel.
Limited Use Disclosure
Aganyu's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide and improve the Aganyu service and is not used to serve advertisements.
Your Consent
By interacting with the Aganyu platform (operated by Aganyu Technologies LTD), authenticating via Supabase or Google Sign-In, and uploading academic credentials, you consent to this privacy policy. For questions, contact sensei@aganyu.com.