Privacy Policy

This policy explains how [Company legal name] ("DodiJobs", "we") collects and uses personal data when you use DodiJobs, and your rights under the Nigeria Data Protection Act 2023 (NDPA). We are the data controller for the data described here.

1. What we collect

Account details: your name, email address, password (stored only as a secure hash), account role and, for employers, your organisation's details.

Your Professional Identity: what you tell your Dodite or put on your profile: work history, education, skills, certifications, portfolio, preferences (for example the roles, locations and salary you want) and, only if you choose to add them, your gender and date of birth. Each item has a visibility you control: Private, On request, Shareable or Public.

Documents: CVs you upload, and the tailored CVs and cover letters your Dodite prepares.

Your Dodite's work: your chats with your Dodite, its notes, missions, job matches, applications, conversations with employers' Dodites, daily reports and notifications.

Public link visitors: people who chat with your public link give their name, email address and company; we keep the chat and a summary for you, and a one-way hash of their IP address to prevent abuse.

Payments: the amount, status and reference of each top-up. Card and bank details are collected by Flutterwave, not by us.

Technical data: a session cookie to keep you signed in, and basic server logs for security.

2. Why we use it, and our legal basis

• To provide the Service you asked for (contract): running your Dodite, matching you to jobs, preparing applications, holding conversations, writing reports, processing top-ups.
• With your consent: sharing "on request" details with a particular employer, and using optional details such as gender and date of birth for matching. You can withdraw consent at any time by changing the item's visibility or deleting it.
• Legitimate interests: keeping the Service safe (scam detection, rate limits, abuse reports), fixing problems and measuring our costs.
• Legal obligations: keeping financial records.

We do not sell your data, and we do not use it for advertising.

3. Who sees your data

• Employers: when your Dodite enquires about or applies for a job, the employer sees your first name and the initial of your last name, and only the profile details you've marked Shareable or Public (plus any "on request" details you approve). Your CV is shared only when you send an application.
• Visitors to your public link see only details you've marked Public.
• Our service providers, under contracts that require them to protect it: OpenAI (the AI model that powers Dodites, which processes the text your Dodite works with), Supabase (database and file storage, hosted in the EU), Inngest (background job processing), Resend (emails), Flutterwave (payments) and Hostinger (web hosting). Some are outside Nigeria; we rely on the safeguards the NDPA allows for such transfers. [Lawyer to confirm the transfer basis.]
• Authorities, where the law requires it.

4. How long we keep it

We keep your data while your account is open. If you delete your account we delete your profile, documents, Dodite, chats, applications, conversations, reports, notifications and public link straight away. We keep a minimal anonymised account record together with your credit and payment history for [6] years for accounting and legal reasons. Collected External job listings contain no personal data about you. [Lawyer to confirm retention periods.]

5. Your rights

Under the NDPA you can: be told how your data is used (this policy); get a copy of your data (Account → Your data → Download my data); correct it (your Identity page); delete it (Account → Your data → Delete my account); object to or restrict some processing; withdraw consent; and complain to the Nigeria Data Protection Commission (NDPC). To exercise any right, or for any question, email privacy@dodijobs.com.

6. Security

Passwords are hashed, documents are kept in private storage that only you can download from (and an employer, once you have sent them an application), sessions are signed, and every account action is checked against the signed-in user. No system is perfectly secure; if a breach affects you we will tell you and the NDPC as the law requires.

7. Automated decisions

Your Dodite uses AI to score how well jobs fit you, and an employer's Dodite may score how well an applicant fits a vacancy. These scores help people decide; the final decision to apply, shortlist or hire is always made by a person. You can ask us to explain a score or to have a human review it.

8. Children

DodiJobs is for people aged 18 and over. We don't knowingly collect data from children.

9. Changes and contact

We'll tell you in the app about significant changes to this policy. Contact: privacy@dodijobs.com, [Company registered address]. [Data Protection Officer details, if required.]