#1 AI PLATFORM FOR CONSULTANTS AND RECRUITERS

PLATFORM TERMS OF USE URJOB.AI

URJOB.AI is an innovative platform that revolutionizes recruitment through artificial intelligence. Our mission is to efficiently connect talents with professional opportunities that match them, while providing recruiters with advanced tools to identify and evaluate the best candidates. Based on cutting-edge AI and data analysis technologies, URJOB transforms every step of the recruitment process into an optimized, transparent, and high-performance experience.

ARTICLE 1

Subject of the Contract

This Data Processing Agreement ("DPA") supplements URJOB's General Terms of Use and defines the respective obligations regarding the processing of personal data when URJOB acts as a Data Processor on behalf of the Client acting as a Data Controller.

ARTICLE 2

Roles of the Parties

Data Controller: The Client (company, recruiter, company using URJOB).

Data Processor: URJOB, IQ Smart Building & Business Center, Boulevard Qualité de la Vie, 2015 Le Kram, Tunisia.

URJOB acts solely upon the documented instructions of the Data Controller.

ARTICLE 3

Nature and Purpose of the Processing

URJOB processes personal data in order to:

● analyze profiles, CVs, skills, and candidate responses

● generate scores, AI reports, video, and behavioral assessments

● manage recruitment workflows and pipelines

● synchronize interviews via Google Calendar

● store, secure, and administer data entrusted by the Client

URJOB never processes data for purposes other than those contractually defined.

ARTICLE 4

Categories of Data Processed

● identity data

● professional data

● technical data

● interview videos and transcriptions

● derived data generated by AI

● data necessary for the operation of URJOB services

Sensitive data is not analyzed for discriminatory purposes.

ARTICLE 5

Obligations of the Subprocessor

URJOB undertakes to:

● process data only upon the Client's instruction

● maintain a security level compliant with ISO 27001 / SOC 2 standards

● guarantee data confidentiality, integrity, and availability

● immediately inform the Client in case of a data breach

● guarantee complete data deletion upon the Client's instruction

● sub-process only to authorized providers listed by URJOB

● never use data for commercial or advertising purposes

● respect the Google API Services User Data Policy (Limited Use)

● not transfer data to a third party without consent or legal requirement

ARTICLE 6

Subsequent Sub-processing

URJOB is authorized to use compliant Sub-processors, in particular:

● Cloudflare (video storage, CDN)

● AWS / OVH (hosting according to environment)

● Security and monitoring providers

These providers apply equivalent contractual guarantees.

ARTICLE 7

International Transfers

Data may be transferred according to:

● applicable Tunisian laws

● Cloudflare security mechanisms

● appropriate contractual clauses

No unauthorized transfer is performed.

ARTICLE 8

Confidentiality

URJOB imposes a strict obligation of confidentiality on all personnel with access to data. Any violation results in immediate internal disciplinary measures.

ARTICLE 9

Technical Security

URJOB applies:

● AES-256 encryption

● TLS 1.3

● Zero Trust Architecture

● multi-factor authentication

● environment isolation

● continuous monitoring and intrusion detection

ARTICLE 10

Data Breach

In case of incident:

● notification to the Client within 72 hours

● description of impacted data

● measures taken

● security recommendations

● root cause analysis

ARTICLE 11

Rights of Data Subjects

URJOB assists the Client in:

● access

● rectification

● restriction

● erasure

● portability

Requests sent directly to URJOB are forwarded to the Client.

ARTICLE 12

Deletion or Return of Data

Upon the Client's request:

● complete return of data

● definitive deletion within a maximum period of 30 days

● video deletion within 48 hours

ARTICLE 13

Audits

URJOB may allow the Client to perform an audit, subject to:

● a reasonable notice period

● a confidentiality agreement

● that the audit does not compromise system security

ARTICLE 14

Liability

URJOB limits its liability in accordance with the TOU. The Client remains responsible for the processing, information, and rights of the data subjects.

ARTICLE 15

Duration

This DPA is valid throughout the duration of use of URJOB Services.