JET ROLE Security Policy

Effective Date: July 2026
Last Updated: July 2026

1. Introduction

JET ROLE is committed to protecting the confidentiality, integrity, and availability of the Platform and the information entrusted to us.

This Security Policy describes the measures JET ROLE uses to protect user accounts, personal information, company information, recruitment records, payment information, and Platform services.

This Policy applies to:

• Employees and Job Seekers

• Employers

• Company Team Members

• Recruiters

• Partners

• Visitors

• Any person using JET ROLE services

This Policy should be read together with:

• Privacy Overview

• Employee Privacy Policy

• Employer Privacy Policy

• Partner Privacy Policy

• Cookie Policy

• AI Policy

• Applicable Terms & Conditions

2. Security Principles

JET ROLE designs its services around the following security principles:

• Confidentiality of information.

• Integrity of stored data.

• Availability of Platform services.

• Least-privilege access.

• Defense in depth.

• Secure authentication.

• Continuous monitoring.

• Accountability through audit logging.

• Privacy by design.

• Risk-based security improvements.

3. Account Security

Users are responsible for maintaining the confidentiality of their login credentials.

Users must:

• Use strong passwords.

• Keep passwords confidential.

• Not share accounts.

• Protect verification codes.

• Use trusted devices where available.

• Log out from shared computers.

• Notify JET ROLE immediately if unauthorized access is suspected.

JET ROLE may suspend or restrict an account where unusual or suspicious activity is detected.

4. Authentication and Verification

JET ROLE may use one or more authentication methods, including:

• Username and password.

• One-Time Password (OTP).

• Email verification.

• Trusted device recognition.

• Session validation.

• Risk-based authentication.

• Additional verification for sensitive account changes.

Verification requirements may vary depending on account type, subscription, security risk, or applicable legal requirements.

5. Trusted Devices

Where available, users may choose to register a trusted device.

Trusted devices may allow simplified authentication for future logins while remaining subject to JET ROLE’s security controls.

JET ROLE may remove trusted-device status when:

• Suspicious activity is detected.

• Security settings change.

• Passwords are changed.

• The user requests removal.

• The device has not been used for an extended period.

• Security improvements require re-verification.

6. Session Security

JET ROLE may protect active sessions through:

• Secure session identifiers.

• Session expiration.

• Automatic logout after inactivity.

• Re-authentication for sensitive actions.

• Device validation.

• Session monitoring.

• Detection of abnormal session behavior.

Users should log out after using shared or public devices.

7. Company Team Access

Employer accounts may permit authorized company representatives to create additional team members with role-based permissions.

Company administrators are responsible for:

• Assigning appropriate permissions.

• Removing former employees.

• Reviewing access rights regularly.

• Protecting internal company credentials.

JET ROLE is not responsible for unauthorized actions performed by individuals who were granted valid access by the Employer.

8. Audit Logs

JET ROLE may maintain audit records relating to important Platform activities.

Audit records may include:

• Login activity.

• Account changes.

• Password resets.

• Team-member creation or removal.

• Permission changes.

• Job publication.

• Job modification.

• Job deletion.

• Candidate-status changes.

• Resume downloads.

• Company profile updates.

• Subscription activity.

• Security events.

• Administrative actions.

Audit logs may include timestamps, IP addresses, device information, account identifiers, and other information reasonably required for security, compliance, fraud prevention, and dispute resolution.

Audit records are confidential and remain the property of JET ROLE.

9. Fraud Prevention

JET ROLE may use automated and manual measures to detect and prevent:

• Fake accounts.

• Identity fraud.

• Resume fraud.

• Job posting fraud.

• Referral fraud.

• Coupon abuse.

• Subscription abuse.

• Automated bots.

• Credential stuffing.

• Brute-force attacks.

• Unauthorized scraping.

• Platform misuse.

JET ROLE may temporarily suspend or permanently terminate accounts involved in fraudulent or abusive activity.

10. Monitoring

To maintain security and service reliability, JET ROLE may monitor:

• Login attempts.

• Authentication failures.

• System performance.

• Security alerts.

• Network activity.

• Platform abuse.

• Malware indicators.

• API usage.

• Administrative actions.

Monitoring is conducted to protect the Platform, its users, and JET ROLE’s legitimate interests, and not for unlawful surveillance.

11. Data Encryption

JET ROLE seeks to protect information using appropriate technical safeguards, including encryption where suitable.

Encryption may be applied:

• During transmission.

• During authentication.

• For sensitive credentials.

• For verification tokens.

• For payment-related communications where applicable.

Not every category of information is necessarily encrypted in the same manner.

12. Backup and Disaster Recovery

JET ROLE performs backup and recovery procedures designed to reduce the risk of data loss.

Backups may include:

• User accounts.

• Company information.

• Job postings.

• Candidate information.

• Subscription records.

• Audit logs.

• Configuration data.

Backup frequency, retention, restoration procedures, and storage locations may change according to operational requirements.

Restoration from backup is intended to support business continuity and does not guarantee recovery of every individual change or transaction.

13. Vulnerability Management

JET ROLE may regularly:

• Apply security updates.

• Update software components.

• Replace unsupported technologies.

• Perform security testing.

• Review security configurations.

• Improve protective controls.

Security improvements may be implemented without prior notice where necessary to protect the Platform.

14. Third-Party Service Providers

JET ROLE may use third-party providers for:

• Cloud hosting.

• Email delivery.

• Payment processing.

• Artificial Intelligence services.

• Analytics.

• Identity verification.

• Security monitoring.

• Content delivery.

JET ROLE seeks to select providers that maintain appropriate security standards. However, each provider operates under its own security controls and contractual obligations.

15. User Responsibilities

Users must not:

• Attempt unauthorized access.

• Share credentials.

• Circumvent security controls.

• Upload malware.

• Reverse engineer Platform security.

• Perform penetration testing without written authorization.

• Interfere with Platform availability.

• Abuse APIs or automated tools.

• Exploit security vulnerabilities.

Users discovering a potential security issue should report it promptly through the official Contact Us page.

16. Security Incidents

If JET ROLE becomes aware of a security incident that may materially affect users or the Platform, JET ROLE may:

• Investigate the incident.

• Contain or mitigate the impact.

• Suspend affected accounts where necessary.

• Reset credentials.

• Notify affected users where appropriate or required by law.

• Cooperate with competent authorities where legally required.

• Improve security measures to reduce the likelihood of recurrence.

17. Limitation of Security

Although JET ROLE applies reasonable administrative, technical, and organizational safeguards, no internet-based service can guarantee absolute security.

Users acknowledge that:

• No security system is completely immune from attack.

• Unauthorized access may occur despite reasonable safeguards.

• Security also depends on user behavior and device protection.

Users should maintain updated devices, secure networks, and appropriate antivirus protection.

18. Policy Updates

JET ROLE may revise this Security Policy to reflect:

• New threats.

• New technologies.

• Platform enhancements.

• Changes in applicable law.

• Changes in service providers.

• Operational improvements.

The updated version will display a revised “Last Updated” date.

19. Contact Us

Questions regarding this Security Policy or reports of suspected security issues should be submitted through the official Contact Us page available on the JET ROLE Platform.