Privacy Policy

Account data: Name, email address, phone number, country, and role (worker or employer) provided during registration.

Profile data: For Workers — profession, skills, work experience, availability, bio, expected salary, and profile photo. For Employers — company name, industry, company size, and location.

Job and application data: Job listings posted by Employers and applications submitted by Workers, including cover messages.

Communication data: Messages exchanged between users through the Platform's messaging system.

Usage data: Pages visited, features used, browser type, IP address, and timestamps, collected automatically for platform improvement and analytics (via Vercel Analytics — no cookies required).

• To create and maintain your account
• To match Workers with relevant job opportunities
• To allow Employers to discover suitable candidates
• To send transactional emails (application updates, account confirmation)
• To improve Platform features and user experience
• To detect and prevent fraud or abuse
• To comply with applicable legal obligations

We do not use your data for automated profiling that produces significant legal effects.

We do not sell your personal data to third parties.

We share data only as follows:

• Between users: Worker profiles (when set to public) are visible to logged-in Employers. Employer company names and job details are visible to all users.
• Service providers: Supabase (database and authentication hosting), Vercel (hosting and analytics), Resend (transactional email delivery). These providers process data on our behalf under data processing agreements.
• Legal requirements: We may disclose data to comply with a court order, legal process, or governmental request.

Your data is stored on Supabase's infrastructure, hosted in secure data centers. We use Row Level Security (RLS) to ensure users can only access their own data.

Passwords are never stored in plain text — they are hashed using industry-standard algorithms via Supabase Auth.

Despite our efforts, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

We retain your account and profile data for as long as your account is active. If you request deletion, we will remove your personal data within 30 days, subject to legal retention requirements.

Application records may be retained for up to 12 months for dispute resolution purposes.

Depending on your country of residence, you may have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your account and associated data
• Portability: Request your data in a machine-readable format
• Objection: Object to certain types of data processing

These rights are provided in accordance with Kuwait's Data Protection Law and equivalent regulations across the UAE, Saudi Arabia, Qatar, Bahrain, and Oman.

To exercise any of these rights, email us at privacy@doblx.com. We will respond within 30 days.

We use only strictly necessary session cookies for authentication (managed by Supabase). We do not use advertising or tracking cookies.

Analytics are collected by Vercel Analytics in a privacy-preserving, cookieless manner that does not track individual users across sites.

The Platform is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we become aware that a child has provided data, we will delete it promptly.

We may update this Privacy Policy periodically. We will notify you by email and post the updated policy with a new effective date. Continued use of the Platform after changes constitutes acceptance.

For privacy questions, data requests, or concerns:

privacy@doblx.com

Doblx
Kuwait City, State of Kuwait