Operator registration, business address and country of establishment are not yet published. These documents describe the current private pilot and require the operator’s final details and legal review before public launch or paid orders.
1. Responsible operator
The configured recruitment operator and privacy contact appear below. Business registration, address, establishment country and any required representative details must be supplied before public launch. Contact and sign-in information is not sold as an unrestricted CV download list.
2. Information used by the pilot
Sign-in supplies a stable account identifier and contact/display information. Registration stores your selected profile groups, account type, business details and the version and time of accepted terms. When Google is connected, we store its stable subject identifier to link your login; we do not request access to your email inbox or Drive. Recruiting profiles contain the professional fields and private contacts you provide, and your PDF CV if uploaded. Organization accounts contain business details, membership, submitted vacancies and recruitment correspondence. Boat, service, editorial and sample-job records remain illustrative.
3. Purposes and bases
Account operation, applications you request and organization tools support providing the requested service. Voluntary talent discovery and each agency introduction use separate choices. Security checks protect forms and limit abuse. Recent hidden-field, rate-limit and repeated-vacancy signals produce a heuristic activity risk index for the portal owner. New accounts have limited history. The index supports human review; it does not automatically suspend or delete an account, verify a person or guarantee reliability. Contact the operator to challenge an account decision. Where consent is required for optional storage or another purpose, refusal does not prevent browsing. The operator must confirm the legal basis for each processing activity and its legitimate-interest assessment before public launch.
5. Retention and deletion
Talent visibility expires after the configured period and can be withdrawn sooner. Visibility expiry hides a profile; it is not automatic deletion of every account record. Candidate-profile deletion removes its CV files, applications, introductions and talent-consent records. A minimal security audit remains. Organization records are separate. Replacing a CV retains an older file only while a submitted application still uses it.
Abuse checks keep pseudonymized counters and short-lived, single-use tokens rather than form contents or raw IP addresses in those tables. Records expire and are cleaned during later security checks. Risk events count for 30 days and are cleaned during later checks. Temporary Google sign-in states expire after 10 minutes; Boatly Google sessions expire after 7 days and can be revoked sooner. An account in owner-managed trash is deactivated but recoverable; trash is not permanent erasure. Account and decision history remain until an applicable deletion or retention review. Local saved items and demo drafts remain in your browser until you remove them or browser storage is cleared.
6. Hosting and international processing
Records and private files use the Site’s hosted infrastructure, including Cloudflare-backed storage; staff sign-in is provided by Sites, with optional Google identity for public accounts. The operator must document the actual processing locations, service-provider agreements and any required international-transfer safeguards before public launch. No particular storage region or adequacy mechanism is claimed here.
7. Your controls
Use My Boatly → Privacy & data for the implemented candidate export/deletion controls. Applications, pool visibility and accepted introductions have separate withdrawal controls. Downloaded copies cannot be recalled from a recipient. Use for browser-storage preferences and GDPR & your rights for privacy-request information.
8. Updates
We will identify substantive changes and obtain a fresh choice where required. This policy does not replace the separate consent to join the talent pool or to share information with a particular agency.
Operator & privacy contact
Operator details are being prepared.