Privacy Policy

1. Who we are

DOI Management operates the talent platform at talent.doimanageconsult.com. In this policy, DOI, we and us mean DOI Management. We are responsible for the personal information we process to provide this platform. Contact us about privacy, our business details or your account at doitalentadmin@gmail.com.

This policy covers accounts, Career Passports, applications, CV uploads and other available platform services. Employers and external providers may be separately responsible for information they receive; their own privacy notices may also apply.

2. Information we collect

Account information includes your name, email address, account identifier, authentication records and profile details. Career information can include your work and education history, skills, location, availability, preferences, portfolio links and evidence you choose to provide.

When you apply, we collect your answers, the CV file or CV link you submit, the filename, and submission and review records. We also process messages, support requests, learning or assessment activity where available, sharing permissions and data-rights requests.

Technical records may include connection and device information, access and error logs, and browser storage used for sessions, preferences and application drafts. Information comes from you, your sign-in provider, your use of the service and authorised people handling applications or support.

Please do not include government identification numbers, financial account details, medical information or other unnecessary sensitive information in a CV or general application field. A separately offered verification process will need information specific to that process and its own explanation.

3. Signing in with Google

Google sign-in is optional. Email-and-password sign-in is also available. When you choose Google, the platform requests openid, email and profile permissions. Google can provide an account identifier, email address and verification status, and basic profile information such as your name and profile picture, where available.

We use this information to authenticate you, create or link your DOI account, maintain your session and identify your account in the platform. Supabase provides authentication infrastructure and stores authentication records and associated profile metadata. Google sign-in does not give DOI your Google password or access to Gmail messages, Drive files, Calendar or contacts.

Google account information is used to provide and secure the features you request. DOI does not sell Google account information, use it for advertising or use it to train general-purpose AI models. Our use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including its Limited Use requirements where applicable.

You can remove the DOI connection in your Google Account's third-party connections settings. Removing the connection does not itself delete information already held by DOI or close an existing DOI session. To request account deletion, use the process below. Contact us first if you need help retaining another way to sign in.

4. How and why we use information

We use information to operate accounts, save and review applications and CVs, provide Career Passports and available learning or communication features, handle introductions and sharing you request, provide support, prevent abuse, maintain service reliability and meet applicable legal obligations.

Where data-protection law requires a lawful basis, core account and requested application services rely on providing the service or taking steps you request before a contract. Proportionate security, fraud prevention and service administration rely on our legitimate interests where permitted, subject to your rights. Required legal records rely on the relevant legal obligation. Where an optional activity requires consent, we ask for that consent separately and you may withdraw it.

Required fields are identified in the relevant form. If you do not provide information needed to authenticate you or handle an application, we may be unable to provide that particular service. Accepting platform terms is not blanket consent to optional research, marketing or disclosure to employers.

5. Who receives information

Authorised DOI staff and reviewers can access information needed to administer the service or handle an application. When you apply to an identified recipient or approve an introduction or sharing grant, the relevant recipient can receive the information described in that process. A CV upload does not make the file a public webpage.

Supabase supplies authentication, database and file storage, and Vercel hosts the website. Google or Microsoft handles its sign-in service when you choose it. Service providers may also deliver account emails, support forms and technical monitoring. Where a Tally-hosted form is offered, Tally processes the information submitted through that form. Optional model-backed features may use Lovable's AI gateway and the model providers described below.

We may disclose information where necessary to comply with a binding legal requirement or to establish, exercise or defend legal rights, subject to applicable law. Contact us for information about the providers involved in a particular request.

Revoking a DOI sharing grant stops further access through that grant. It cannot retrieve copies a recipient has already obtained. A recipient may have its own lawful retention duties and privacy responsibilities.

6. AI assistance

Where model-backed DOI AI is available and you use it, your question and relevant authorised career or learning context may be sent through Lovable's AI gateway to an OpenAI model to produce guidance. Available résumé assistance may process the document content needed for extraction. Avoid including unnecessary sensitive information in prompts or documents.

AI guidance is designed to explain, coach and suggest next steps. It may be incomplete or inaccurate and is not an employment offer, certification or guarantee of eligibility. Contact DOI if you want to question or correct information used in your application. We do not treat a Google sign-in permission as permission to access other Google services for AI processing.

7. Storage, security and international processing

CV uploads use private storage with authenticated access controls. Account and application information is stored in service infrastructure with permissions limiting access. No online service can guarantee absolute security.

Our platform, hosting and support suppliers operate internationally, so information may be processed outside your country. Locations depend on the service and supplier involved. Applicable protections for international transfers must be observed. Contact doitalentadmin@gmail.com for details of the processing locations and transfer arrangements relevant to your information, including how to obtain information about applicable safeguards.

8. Retention and deletion

We retain information for as long as it is needed for the purposes described here. Relevant criteria include whether your account or application remains active, whether a request or dispute is unresolved, the need to investigate security incidents, applicable recordkeeping duties and legal claims. Different categories, such as CVs, account records and security logs, may have different retention needs.

Account closure and deletion requests are assessed against those purposes. Information no longer needed should be deleted or de-identified; a lawful retention exception may apply to particular records. Backup copies may remain until the applicable backup cycle expires. We do not promise that submitting a deletion request immediately erases every record. Ask us about the retention or deletion status of a particular item.

9. Your choices and rights

Depending on applicable law, you may request access, correction, deletion, portability or restriction of your information, object to certain uses, and withdraw consent where processing relies on it. You may object to processing based on legitimate interests where applicable, including direct marketing. Withdrawing consent does not undo earlier lawful processing.

Signed-in users can submit supported requests through the platform's data controls, or email doitalentadmin@gmail.com. We may need proportionate information to verify your identity. We will assess the request and respond within the applicable legal timeframe. A request is not an immediate export or deletion.

You can complain to the relevant data-protection authority in your jurisdiction. UK users can contact the Information Commissioner's Office. You can also contact DOI about an application decision or information you believe is incorrect.

10. Browser storage and external services

Browser storage supports authentication, preferences and application drafts. Clearing it may sign you out or remove a draft stored on that device. A selected CV is uploaded when you submit the application; selecting a file alone does not submit an application.

External sign-in, forms and learning services may use their own storage technologies under their own notices. Where optional tracking requires consent, it must be offered separately from essential service storage.

11. Age and policy changes

The platform is intended for people aged 18 or over. If you believe a child has supplied personal information, contact us so we can review and address it.

We show the effective and updated dates on this page and will communicate material changes appropriately. A new use requiring consent needs that consent before it begins.