Account & Security Policy

Zwaya Jobs is committed to providing a reliable and secure digital environment where job seekers, professionals, freelancers, employers, and businesses can access employment, recruitment, and professional development opportunities with confidence.

This Account & Security Policy (“Policy”) establishes the principles, responsibilities, and security requirements governing the creation, management, protection, and use of accounts on the Zwaya Jobs platform.

Our objectives are to protect user accounts and personal information, reduce the risk of fraud and unauthorised access, promote responsible account management, and maintain the integrity of the Platform.

Security is a shared responsibility. Zwaya Jobs is responsible for implementing appropriate safeguards for the systems and information under its control, while users are expected to take reasonable measures to protect their accounts and credentials.

This Policy forms part of the Zwaya Jobs Terms & Conditions and should be read alongside the Privacy Policy, User Conduct Policy, and other applicable platform policies.

This Policy applies to all individuals and organisations accessing or using Zwaya Jobs, including:

• Job seekers and employment applicants.
• Professionals and freelancers.
• Employers, recruiters, and authorised business representatives.
• Training providers and other service participants.
• Registered account holders and authorised users of business accounts.

It covers account registration, authentication, account information, access permissions, identity verification, security responsibilities, account recovery, suspicious activity, account restrictions, and account closure.

This Policy applies to the Zwaya Jobs website and associated account-based services.

Additional security requirements may apply to specific services, subscriptions, integrations, or business arrangements.

Users must provide accurate, current, and complete information when registering for a Zwaya Jobs account.

Account registration must comply with the eligibility requirements established in the Terms & Conditions and applicable law.

Users must not create accounts using false identities, stolen information, or credentials belonging to another person without lawful authorisation.

Each account must be associated with a legitimate individual or organisation. Individuals registering on behalf of a business must have appropriate authority to represent that organisation.

Zwaya Jobs may require additional information or verification where reasonably necessary to confirm account authenticity, prevent fraud, or meet applicable legal obligations.

We may reject or restrict registrations where there are reasonable grounds to suspect fraudulent, unlawful, or materially misleading activity.

Zwaya Jobs may provide different account categories according to the services available on the Platform.

4.1Job Seeker and Professional Accounts

These accounts are intended for individuals seeking employment, professional opportunities, or career development. Users may manage their profiles, CVs, applications, and other available career-related features.

4.2Freelancer Accounts

Freelancer accounts may provide access to professional profiles, portfolios, project opportunities, and communications with prospective clients.

4.3Employer and Recruiter Accounts

Employer accounts may provide access to recruitment tools, job advertisements, candidate searches, applications, and other employer-specific features.

Access to professional profiles and CVs is intended for legitimate recruitment purposes only.

4.4Business Representatives and Authorised Users

Where business accounts support multiple authorised users, the organisation is responsible for ensuring that access is granted only to individuals with a legitimate business need.

Access permissions must be managed responsibly and withdrawn when an individual is no longer authorised to act on behalf of the organisation.

The availability of account categories and access controls depends on the Platform's implemented functionality.

Users are responsible for creating and maintaining secure account credentials.

Users should:

• Use strong, unique passwords that are not reused across unrelated services.
• Keep passwords and authentication credentials confidential.
• Avoid sharing login details with unauthorised individuals.
• Protect access to email accounts and devices associated with Zwaya Jobs.
• Avoid entering credentials on suspicious or unverified websites.
• Change passwords promptly if compromise is suspected.
• Use additional authentication protections where available.

Zwaya Jobs will not require users to disclose their passwords through unsolicited emails, messages, or telephone calls. Users should treat requests for passwords, authentication codes, or sensitive account information with caution.

Where additional authentication mechanisms are implemented, users may be required or encouraged to use them according to the relevant security requirements.

Accounts are intended for use by the registered individual or the organisation to which they legitimately belong.

• Users must not sell, transfer, rent, or otherwise provide account access to unauthorised third parties.
• Personal accounts must not be used to impersonate another individual.
• Business accounts must not be used by representatives who lack appropriate authorisation.

Account holders are responsible for activities conducted through their accounts to the extent attributable to their own actions, omissions, or failure to comply with reasonable security obligations.

Users are not automatically responsible for unauthorised activity resulting from a security failure for which Zwaya Jobs is legally responsible.

Users must promptly report suspected account compromise so that appropriate protective measures can be considered.

Zwaya Jobs may use identity, contact, professional, or business verification procedures to support Platform integrity.

Depending on the account type and the risks involved, verification may include:

• Confirmation of email addresses or telephone numbers.
• Review of business registration information.
• Verification of an employer's authorised representative.
• Requests for supporting professional credentials.
• Review of suspicious or inconsistent account information.
• Additional checks reasonably necessary to prevent impersonation or fraud.

Verification requirements may differ between account categories. Verification requests are limited to information reasonably relevant to their purpose and are handled in accordance with applicable privacy requirements.

Verification does not constitute a guarantee of an individual's honesty, professional competence, financial standing, or future conduct. Similarly, verification of an employer does not guarantee the legitimacy of every vacancy, employment condition, or recruitment decision.

Zwaya Jobs may request updated information where previous verification information becomes materially inaccurate or outdated.

Registered employers and recruiters may be permitted to search professional profiles and CVs through Zwaya Jobs. This access is provided exclusively for legitimate recruitment and talent discovery purposes.

Employers must ensure that candidate information is accessed only by authorised representatives and protected against unauthorised disclosure or misuse.

Employers and recruiters must not:

• Share account credentials with unauthorised individuals.
• Permit unapproved third parties to access candidate databases.
• Use candidate information for unrelated marketing or commercial activities without a lawful basis.
• Sell, distribute, or commercially exploit candidate information.
• Use automated tools to extract candidate information without authorisation.
• Retain or process candidate information unlawfully.
• Disclose confidential candidate information without appropriate authority.

Where candidate information is downloaded or independently stored by an employer, the employer becomes responsible for protecting that information in accordance with applicable law and its own legal obligations.

Zwaya Jobs may restrict employer access where credible evidence indicates misuse, unauthorised access, or other serious security concerns.

Zwaya Jobs is committed to implementing technical and organisational security measures appropriate to the nature of the information processed and the risks associated with Platform operations.

Such measures may include, as appropriate and where implemented:

• Access controls and authentication safeguards.
• Secure handling and storage of account credentials.
• Encryption of information in transit and, where appropriate, at rest.
• Security monitoring and logging.
• Protection against common website vulnerabilities.
• Access restrictions for administrative and support personnel.
• Secure infrastructure configuration and maintenance.
• Backup and recovery arrangements.
• Security incident investigation and response procedures.
• Confidentiality requirements for authorised personnel and relevant service providers.

Security measures are reviewed and adapted according to operational requirements, technical developments, and identified risks.

No online platform can guarantee absolute security or uninterrupted protection against every potential threat. Zwaya Jobs does not represent that any particular technical safeguard is operational unless it has been implemented.

Users must notify Zwaya Jobs promptly if they become aware of or reasonably suspect:

• Unauthorised access to their accounts.
• Unexpected password or account information changes.
• Suspicious login notifications.
• Fraudulent messages appearing to originate from Zwaya Jobs.
• Misuse of employer accounts or candidate information.
• Unauthorised payment activity connected to the Platform.
• Any other activity suggesting account compromise.

Reports should be submitted to info@zwayajobs.com or through an available official support channel.

Users should provide sufficient information to assist in assessing the incident without disclosing passwords or unnecessary sensitive information.

Where appropriate, Zwaya Jobs may temporarily restrict account access, require additional verification, or take other proportionate measures to reduce the risk of further harm.

Users who lose access to their accounts may request assistance through the Platform's available recovery procedures or official support channels.

Account recovery may require reasonable verification to establish that the requester is authorised to regain access. Depending on the circumstances and available systems, recovery procedures may involve:

• Email-based verification.
• Password reset procedures.
• Confirmation of account ownership.
• Review of relevant account information.
• Additional verification for accounts presenting elevated security risks.

Zwaya Jobs may decline or delay an account recovery request where the information provided is insufficient to establish legitimate ownership or where restoration would create a material security risk.

Recovery procedures will be designed to protect accounts against unauthorised takeover. Zwaya Jobs will not request disclosure of an existing password as a condition of account recovery.

Users should remain alert to fraudulent communications, false job advertisements, impersonation attempts, and requests for sensitive information.

Zwaya Jobs prohibits the use of its name, branding, accounts, or Platform services to conduct phishing, fraud, identity theft, or other deceptive activities.

Users should verify the legitimacy of suspicious communications before responding or providing personal information. In particular, users should exercise caution when receiving:

• Unexpected requests for passwords or authentication codes.
• Requests for payments unrelated to clearly disclosed Platform charges.
• Employment offers requiring suspicious advance payments.
• Links directing users to unfamiliar login pages.
• Messages claiming urgent account suspension without reliable verification.
• Requests to disclose sensitive personal or financial information without a legitimate purpose.

Users should report suspected impersonation or fraudulent communications through official Zwaya Jobs contact channels.

Where paid services are offered, Zwaya Jobs uses third-party payment service providers to process transactions. These providers may independently process payment credentials, transaction information, fraud prevention data, and other information necessary to complete payments.

Users must provide accurate billing information and use payment methods they are authorised to use. Users must not attempt fraudulent payments, misuse another person's financial credentials, or manipulate transaction procedures.

Zwaya Jobs may receive payment confirmations, billing information, transaction references, and other records necessary to administer paid services. Users should review the relevant payment provider's terms and privacy information.

Payment disputes, refunds, and subscription cancellations are addressed in the applicable Terms & Conditions, Refund & Dispute Resolution Policy, and service-specific purchase terms.

Payment security arrangements depend on the payment provider and the integration used; users should rely on the provider's published security information for details of its controls.

Users are encouraged to access Zwaya Jobs through trusted devices, updated browsers, and reasonably secure internet connections.

Recommended precautions include:

• Keeping operating systems and browsers updated.
• Using appropriate device security protections.
• Avoiding account access through untrusted devices where possible.
• Logging out of shared or public devices after use.
• Avoiding suspicious downloads and browser extensions.
• Protecting devices against unauthorised physical access.
• Reviewing account activity when suspicious behaviour is detected.

These precautions reduce security risks but do not eliminate them. Users should avoid storing passwords or sensitive professional information in insecure locations.

Zwaya Jobs will assess suspected security incidents affecting its systems, accounts, or information under its control.

Where an incident is identified, appropriate responses may include:

• Investigating the nature and scope of the incident.
• Taking steps to contain unauthorised activity.
• Restricting compromised accounts or credentials.
• Addressing identified vulnerabilities.
• Restoring affected services where reasonably possible.
• Preserving relevant evidence where lawful and appropriate.
• Notifying affected individuals or competent authorities where required by applicable law.

Notification obligations will depend on the nature of the incident, applicable legal requirements, and the risks involved.

Zwaya Jobs will not guarantee that every security incident can be prevented or immediately detected.

Zwaya Jobs may review account activity and technical records where reasonably necessary to:

• Protect Platform functionality and security.
• Investigate suspected fraud or unauthorised access.
• Detect misuse of candidate information.
• Enforce applicable Platform policies.
• Respond to legitimate complaints.
• Comply with applicable legal obligations.

Security-related processing will be conducted in accordance with the Privacy Policy and applicable law.

Monitoring must be proportionate to the legitimate purpose pursued and must not be interpreted as unrestricted access to private communications or information.

Where automated security tools are used, relevant safeguards will be applied as required by applicable law.

Zwaya Jobs may restrict, suspend, or terminate account access where reasonably necessary to address security threats, fraud, material policy violations, or applicable legal requirements.

Grounds for action may include:

• Suspected account takeover.
• Materially false identity or business information.
• Repeated unauthorised access attempts.
• Misuse of candidate information.
• Fraudulent recruitment activity.
• Unauthorised automated extraction of Platform data.
• Serious or repeated violations of security requirements.
• Other conduct creating a substantial risk to users or Platform integrity.

Where appropriate and reasonably practicable, Zwaya Jobs may provide notice and an opportunity to resolve the issue. Immediate protective measures may be taken where delay would create a serious security or legal risk.

Users may request a review of an account restriction by contacting the official support address. Account restrictions and termination remain subject to the Terms & Conditions and applicable law.

Users may request account closure through available account management features or by contacting Zwaya Jobs.

Before processing an account closure request, Zwaya Jobs may take reasonable steps to verify account ownership and protect against unauthorised deletion.

Following closure, account access may be disabled, and personal information will be handled in accordance with the Privacy Policy and applicable retention requirements.

Certain records may be retained where necessary to comply with legal obligations, resolve disputes, investigate fraud, or protect legitimate legal rights.

Closing an account does not automatically delete candidate information previously and lawfully downloaded or independently retained by an employer.

Requests concerning access, correction, deletion, or other applicable privacy rights should be submitted through the procedures described in the Privacy Policy.

Individuals who identify a potential security vulnerability affecting Zwaya Jobs are encouraged to report it responsibly.

Security concerns may be submitted to info@zwayajobs.com. Reports should include a clear description of the issue and sufficient technical information to permit reasonable assessment.

Security researchers and other individuals must not:

• Access information belonging to other users without authorisation.
• Exploit vulnerabilities for personal or commercial gain.
• Disrupt Platform operations.
• Disclose confidential information obtained without authorisation.
• Conduct intrusive security testing without appropriate permission.

Submission of a vulnerability report does not constitute permission to access restricted systems or conduct further testing.

Zwaya Jobs will assess credible reports and determine appropriate corrective measures.

Zwaya Jobs may update this Account & Security Policy to reflect changes in Platform functionality, security practices, emerging threats, operational requirements, or applicable law.

The latest version will be published on the Zwaya Jobs website with its effective or revision date.

Where changes materially affect users' rights or obligations, appropriate notice will be provided where required by applicable law.

Users are encouraged to review the Policy periodically.

For account security inquiries, suspected unauthorised access, fraud reports, account recovery assistance, or questions concerning this Policy, please contact:

Brand

ZWAYA JOBS

Operating Company

ZWAYA AL IRAQ FOR ONLINE SERVICES, ONLINE MARKETING, ADVERTISING AND PUBLICITY LLC

Company Registration Number

M.Sh.A. - 2 -3285

Address

Baghdad, Iraq

Website

www.zwayajobs.com

Email

info@zwayajobs.com

Zwaya Jobs is committed to protecting its Platform, supporting responsible account management, and maintaining a trustworthy environment for professional connections.