Information you provide directly:

• Full name, email address, and password when creating an account
• Phone number and location (city, country) when completing your profile
• Professional history, skills, and education for candidate profiles
• Job listing details, company name, and billing information for recruiters
• Any messages or communications sent through the Platform

Information we collect automatically:

• IP address and approximate location
• Device type, browser, and operating system
• Pages visited, time spent on the Platform, and actions taken
• Cookies and similar tracking technologies (see Section 6)

Information from third parties:

• If you sign in using a third-party service (such as Google or LinkedIn), we may receive basic profile information from that service in accordance with their privacy settings

To operate the Platform:

• Create and manage your account
• Connect candidates with relevant job opportunities
• Allow recruiters to manage their hiring pipeline
• Process payments and manage subscriptions

To improve our services:

• Analyze usage patterns to improve the Platform's features and performance
• Identify and fix technical issues
• Develop new features based on user needs

To communicate with you:

• Send account-related notifications (password resets, account activity)
• Notify you of updates to our Terms of Service or Privacy Policy
• Send product updates or newsletters only if you have opted in

To ensure security:

• Detect and prevent fraudulent activity or abuse
• Protect the integrity of the Platform and its users

Between users of the Platform:

• Candidate profiles are visible to recruiters and companies actively hiring on Dily
• Job listings and company information are visible to candidates browsing the Platform
• You control what appears on your profile and can update or remove it at any time

With trusted service providers:

• We work with third-party providers to operate the Platform (hosting, payment processing, analytics)
• These providers only access your data to perform services on our behalf and are contractually bound to protect it

For legal reasons:

• We may disclose your data if required to do so by law or in response to a valid legal request
• We may also disclose data to protect the rights, safety, or property of Dily or its users

In case of business transfer:

• If Dily is acquired or merges with another company, your data may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.

Technical measures:

• All data transmitted between your device and our Platform is encrypted using industry-standard TLS (Transport Layer Security)
• Passwords are hashed and never stored in plain text
• Access to personal data is restricted to authorized team members only
• Our infrastructure is hosted on trusted cloud providers with their own security certifications

Operational measures:

• Regular security reviews and monitoring of our systems
• Immediate response protocols in the event of a suspected data breach
• In the event of a data breach affecting your personal data, we will notify you within 72 hours as required by GDPR

Your responsibility:

• You are responsible for keeping your login credentials confidential.
• We recommend using a strong, unique password for your Dily account
• If you suspect unauthorized access to your account, contact us immediately at contact@dily.pro.

For all users:

• Right to access — You can request a copy of the personal data we hold about you
• Right to correction — You can ask us to correct any inaccurate or incomplete data
• Right to deletion — You can request that we delete your personal data, subject to certain legal obligations
• Right to withdraw consent — You can withdraw your consent to data processing at any time

For users in the European Union (GDPR):

• Right to data portability — You can request your data in a structured, machine-readable format
• Right to object — You can object to certain types of data processing, including direct marketing
• Right to restriction — You can ask us to limit how we use your data in certain circumstances
• Right to lodge a complaint — You have the right to file a complaint with your national data protection authority (in France: the CNIL)

For users in Canada (PIPEDA):

• You have the right to access your personal data and challenge its accuracy
• You have the right to withdraw consent to data collection and use, subject to legal restrictions

Types of cookies we use:

• Essential cookies — Required for the Platform to function correctly. These cannot be disabled as they are necessary for core features such as login and session management
• Performance cookies — Help us understand how users interact with the Platform so we can improve it. All data collected is anonymous
• Preference cookies — Remember your settings and preferences to provide a more personalized experience
• Analytics cookies — Allow us to measure traffic and usage patterns across the Platform

Your choices:

• You can configure your browser to refuse all cookies or to alert you when cookies are being sent
• Disabling essential cookies may affect the functionality of the Platform
• You can withdraw your consent to non-essential cookies at any time through your account settings

• Active accounts — Your data is retained for as long as your account remains active
• Deleted accounts — Upon account deletion, your personal data will be permanently removed within 90 days, except where retention is required by applicable law
• Job listings — Expired job listings are removed from public view after 90 days and permanently deleted after 12 months
• Payment records — Billing information is retained for up to 7 years as required by applicable financial regulations

All third-party providers used by Dily are contractually required to:

• Process your data only on our instructions
• Implement appropriate security measures
• Never use your data for their own purposes

How we protect your data during transfers:

• All international data transfers are carried out in accordance with applicable privacy laws
• Where data is transferred outside the European Union, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission
• Data transfers between France and Canada are covered by adequacy decisions and equivalent privacy frameworks

Your data may be processed in:

• France — Primary operations and European user data
• Canada — Strategic operations and Canadian user data
• Guinea — Local operations for Guinean users
• Third-party cloud infrastructure — Located in jurisdictions with adequate data protection standards