Privacy policy
Last updated: October 2026
1. Controller and legal framework
Delos processes your data in accordance with Tunisian Organic Law No. 2004-63 of 27 July 2004 on the protection of personal data, under the supervision of the National Authority for the Protection of Personal Data (INPDP), and applies GDPR good practice for people in Europe. Contact: contact@delos.tn.
2. Data collected and purposes
Account (e-mail, hashed password, role) to identify you; talent or recruiter profile (name, photos, professional details, phone) for matching; applications, jobs, favourites and reports to run the service; security logs (IP address, device, sign-ins) to protect accounts; verification documents to issue “verified” badges.
3. Public data
The public information of a talent profile is: chosen public name, categories, age, city, governorate, bio, skills and public photos. Talent choose which measurements are visible. For a verified recruiter: the badge type and, if proven, their company domain.
4. Private data
Never public: real name, phone, e-mail, date of birth, ID documents and exact address. The phone number is only shared with verified recruiters, through WhatsApp, and every contact is logged. Photo metadata (GPS location, device) is removed on upload.
5. Identity verification
To get the badge, you send an ID document and a selfie holding a code. These images are visible only to the verification team, every view is logged, and an automatic reading (OCR) helps the team without ever deciding for it. Images are deleted 30 days after the decision; only the result, the date and a non-reversible fingerprint of the document number (to spot one document on several accounts) are kept.
6. Retention periods
Account and profile: as long as the account exists. Verification images: 30 days after the decision. Security and access logs: 12 months. Accounts whose e-mail was never confirmed: deleted after 6 months. Reports and moderation decisions: kept anonymised after their author’s account is deleted.
7. Your rights
You can view and correct your information at any time from your account, export your data (JSON file and photos) from your settings, and delete your account: it is disabled at once and erased permanently after 14 days (you can cancel by signing in again during that time). For any other request (objection, correction), write to contact@delos.tn. You can also contact the INPDP.
8. Storage and security
Data is stored in a PostgreSQL database on servers we manage. Passwords are hashed with Argon2id, traffic is encrypted with HTTPS, files are scanned for malware, and staff access is protected by two-step verification. If you sign in with Google, we only receive your identifier at that provider, your e-mail and your name.
9. Cookies
Delos only uses essential cookies: the sign-in session, security and your chosen language. No advertising cookies, no third-party trackers, no audience measurement.
10. Minors
Delos is reserved for people aged 18 and over. A profile whose date of birth shows an age under 18 is never published, and any report about a minor is handled first.