Privacy Policy

1. Who we are

Byte Brew HR ("we", "us", "our") is a human resources management and recruitment platform operated by ByteBrew, facilitating employment connections across Papua New Guinea. The Jobs Portal (jobs.hr.bytebrew.online) is where job seekers can browse vacancies and apply directly to employers.

2. Information we collect

When you create an account or apply for roles through the Portal, we may collect:

• Account details: full name, email address, phone number, password (stored as an encrypted hash — we never see your plain-text password).
• Profile information: work experience, education, skills, and location that you choose to provide.
• Documents: CVs, résumés, cover letters, and supporting files you upload.
• Application history: the roles you applied for and your status with each employer.
• Usage data: pages visited, search terms, device type, browser, and IP address — collected automatically through our hosting infrastructure.

3. How we use your information

• Create and manage your job seeker account.
• Share your profile and CV with employers you actively apply to.
• Send you notifications about your applications and relevant job opportunities.
• Improve and personalise the platform experience.
• Comply with applicable legal obligations in Papua New Guinea.

4. Who we share your information with

• Employers you apply to: When you submit a job application, your profile, CV, and application documents are shared with the employer who posted the vacancy. You control which roles you apply for.
• Google / Firebase: The Portal is hosted on Google Firebase (Google Cloud Platform). Your data is stored and processed on Google's infrastructure under Google's Data Processing Terms.
• Legal authorities: We will disclose your information when required to do so by a court order or applicable law in Papua New Guinea.

We do not sell, rent, or trade your personal information to third-party advertisers or data brokers.

5. Data retention

We retain your account data for as long as your account is active. If you request deletion of your account, we will remove your personal data within 30 days, except where we are legally required to retain it longer.

6. Your rights

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete information.
• Request deletion of your account and associated data.
• Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at the address in section 10.

7. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. All data is transmitted over HTTPS. Account passwords are hashed and are never stored or accessible in plain text.

8. Cookies

We use essential cookies and browser storage for authentication and session management only. We do not use advertising, tracking, or analytics cookies.

9. Children

This platform is not intended for persons under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has registered without parental consent, contact us and we will remove the account.

10. Changes to this Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on the Portal. Your continued use of the Portal after changes are posted constitutes your acceptance of the updated Policy.

11. Governing law

This Privacy Policy is governed by the laws of Papua New Guinea, including the Privacy Act 1981 (PNG) and any subsequent amendments.