Hoozoo Privacy Policy for LinkedIn

Hoozoo is committed to protecting the privacy and personal data of users accessing the platform through LinkedIn. This Privacy Policy outlines the data collected, the purposes for which it is used, and the measures taken to ensure its protection. By using LinkedIn SSO to access the Hoozoo platform, users consent to the terms described herein

1. Information Collected

The following categories of personal information are collected via the LinkedIn API:

Basic Information:
- First name, last name
- Profile picture
- Email address
Professional Information:
- Education: Degrees, fields of study, institutions attended, graduation dates
- Work Experience: Job titles, companies, employment dates, and descriptions (if accessible)
- Skills: Specific skills listed on the LinkedIn profile
- Awards: Names of awards, issuing organizations, dates (if accessible)
- Tool/Software Proficiencies: Specific tools and software identified within the LinkedIn profile

2. Purpose of Data Collection

The data collected is used strictly for platform functionality, including:

Auto-generation of professional profiles: Enables quick and consistent onboarding using verified LinkedIn data.
Authentication and secure access: Ensures reliable identity verification via LinkedIn SSO.
Project matching:
- Education/Work Experience: To provide a comprehensive view of a user's professional background for potential clients and collaborators.
- Skills/Tool Proficiencies: To accurately match users with projects requiring specific expertise and to allow clients to search for talent based on their skill sets.
- Awards: To highlight achievements and provide further validation of a user’s capabilities.
Professional discovery: Makes it easier for clients and collaborators to identify and connect with suitable talent

3. Data Usage and Compliance

All collected data is used exclusively for the purposes outlined in this policy. The Company:

Does not use personal data for marketing, advertising, or unrelated analytics.
Does not sell, rent, or disclose personal information to third parties.
Limits internal data access to authorized personnel with appropriate roles.
Adheres to LinkedIn API usage terms and data handling guidelines

Compliance with relevant legal standards will be addressed separately by legal counsel.

4. Data Storage and Protection

The Company employs robust security protocols to protect user data:

All data is transmitted over encrypted channels using TLS 1.3.
Data at rest is encrypted using AWS Key Management Service (KMS) with AES-256 encryption.
Internal access to personal data is strictly role-based, logged, and monitored.
Additional protection methods include secure password hashing and data minimization techniques.

5. Data Sharing

The Company does not share data with any external vendors or third parties except where necessary for core functionality:

No personal data collected through LinkedIn is sold, rented, or used for third-party purposes.
Minimal information is shared with LinkedIn strictly for account linkage and authentication purposes. This includes:
- A unique user identifier.
- OAuth access token (used to verify login sessions).
Amazon Web Services (AWS) is used exclusively for secure infrastructure and encrypted storage—not for data processing or analysis.

6. User Consent and Data Rights

All data access is subject to clear, affirmative consent during LinkedIn SSO authentication. Users retain the right to:

Withdraw access by submitting a deletion request to Hoozoo.
Access, review, and update information within the platform.
Request complete deletion of personal data, which will be processed within 30 days of the request, in accordance with applicable laws.

7. Data Retention and Deletion

Hoozoo retains only the personal data necessary to support account functionality. Retention practices include:

Removal of data upon LinkedIn disconnection or account inactivity, according to a standard retention policy (typically within 30 days).
Immediate revocation of LinkedIn tokens and cessation of data collection when access is withdrawn.
Permanent deletion of all related data upon request, unless otherwise required by law or operational necessity.

8. Legal Compliance

The Company is committed to compliance with all applicable data protection laws and regulations, including:

The Privacy Act 1988 (Cth)
The Australian Privacy Principles (APPs)
The General Data Protection Regulation (GDPR)
LinkedIn’s API Terms of Use and associated data handling requirements

Robust internal policies and safeguards are implemented to ensure lawful, fair, and transparent collection and processing of personal information. Hoozoo regularly reviews its privacy practices to maintain alignment with evolving regulatory requirements in Australia.

9. Privacy Policy Updates

This Privacy Policy may be updated periodically to reflect changes in legal obligations, feature updates, or internal practices.

All updates will be published on the official Hoozoo website and/or within the platform.
Material changes may be communicated through in-app messages or email notifications.
Continued access to the platform following an update constitutes acceptance of the revised policy.

10. Contact Information

For questions, requests, or concerns regarding this Privacy Policy or data practices, please contact:

Email: admin@hoozoo.com
Contact Form: www.hoozoo.com
Mailing Address: 1/21 Mary St, Surry Hills, NSW Australia 2010