version 2026-07-v1 · effective 25 July 2026

Privacy Policy

AtollHire is a job-market intelligence service for job seekers in the Maldives. This page says, in plain language, what data we collect, why, where it goes, and the things we will never do with it. It is written to match how the product actually works, nothing more, nothing less.

The promises first

We never sell your data.
No data about you reaches any employer. There is no setting to allow it. The capability does not exist in the product today. If we ever build an opt-in for this, it will be explicit, off by default, and this policy will change first.
We never store passport or national ID numbers. If they appear in an uploaded CV, they are dropped at extraction and are not kept in your profile.
Published statistics come from job postings, not from job seekers, and anything below our sample-size floor is not published at all, so no figure on this site can be traced back to a person.
Deleting your account is a real deletion, not a flag (details below).

What we collect, and why

Job alerts (light signup). Your email address (or phone number) and what you want us to watch: target roles, places, sectors, and a minimum salary. Used only to send you the weekly digest and closing-soon reminders, and to show the same matches when you log in. Every email has a one-click unsubscribe.

Verified accounts. Your phone number, verified by a one-time code. Codes are stored only as salted hashes, expire in minutes, and are single-use. If you sign in with Google, we receive your verified email address, never your password or contacts.

CV Studio. Your CV file (or the answers you type in the builder) and the structured profile we extract from it: work history, education, trainings, skills, languages, references. Processing starts only after you give CV-processing consent, which you can revoke at any time in your profile.

References in your CV deserve a special note. Uploaded CVs often contain other people's names and phone numbers. We store them only so we can render them back into your CV. They are excluded from all statistics and analysis, and they are purged when your account is deleted.

Ask the market. Your questions to the advisor. Anonymous devices get a random identifier stored in your browser (not your name, not your number) so we can apply fair daily limits. Don't include personal details in questions; the answer only needs the role and the market.

Shared pay data (salary and service charge). If you choose to share your salary or your resort's service charge, we store the figure you enter, the role or resort you name, and the evidence file you upload (a payslip or service-charge slip). The evidence is kept in private storage, is seen only by our verification staff, and is never published, shared, or shown to employers. Individual submissions never appear anywhere; only combined statistics above our sample-size floor, with no names attached. Submissions are anonymous: we do not ask who you are. You may black out your name or ID number on the evidence before uploading, and you can request deletion of a submission at any time via the contact below.

Product events. We log product actions (a check was run, a digest was sent, a link was clicked) to make the product better and to know our funnel works. Event logs about the underpaid check never store the salary you typed alongside your identity.

AI processing

Two features use Claude, an AI model by Anthropic, as a processor: extracting a structured profile from your CV, and answering advisor questions. Your data is sent to Anthropic's API for that processing only; under the API terms it is not used to train their models. The numbers in advisor answers are computed by us from job postings; the AI phrases them, it does not invent them.

Where your data lives

Our systems run on DigitalOcean (application, database, and private file storage); alert emails are delivered through our email provider. This means your data may be processed on servers outside the Maldives. We use no third-party analytics or advertising trackers; measurement is our own event log, nothing else.

Cookies and local storage

We use Google Analytics to understand how the site is used (pages visited, in aggregate); no advertising cookies. Your browser also keeps: a random device identifier (fair-use limits for the advisor), your login tokens when you sign in to the app, and your current advisor conversation (kept on your device, cleared with 'New chat').

Consent, revocation, and deletion

Consent is per-purpose (CV processing, alerts) and recorded with the policy version you agreed to. Revoking a consent stops that processing.
Unsubscribing from alerts is one click in any email, no login needed.
Account deletion purges your documents, extracted and typed profile data, and references. Event logs are anonymized: your identity is removed and personal details are scrubbed. Request it in the app or by email.

Where the market data comes from

Our statistics are computed from publicly advertised job postings on Maldivian job sites, always with the source named. Job seekers' personal data is never part of published statistics.

Changes and contact

When this policy changes in a way that matters, we bump the version above and ask for consent again where the law or fairness requires it. The Maldives' data protection legislation is developing; this product is built to comply with it by structure: consent records, purpose limitation, real deletion.

Questions or requests: [email protected]