Privacy Policy

Who we are

DOORS (doors.im) is an AI job search, resume and interview practice service run by Avatud OÜ, a company registered in Estonia. Avatud OÜ is the controller of your personal data.

Questions, requests, deletion: hello@doors.im.

What we collect

Account: your email address. If you sign in with Google, we also receive your name and profile picture from Google. We ask Google for nothing else — no Gmail, contacts, calendar or Drive access.

What you give DOORS: your profile (work history, education, skills, languages, city), job goals (roles, places, level, pay, work languages), notes DOORS keeps for your search, saved jobs, job links or texts you paste, and the resumes DOORS writes for you. A resume PDF you upload is read once to fill your profile; the file itself is not stored.

Chat and voice: your messages to the assistant. Voice input is sent for transcription and not kept as audio. During an AI interview, your microphone audio is streamed to the AI recruiter in real time; we do not record the interview.

Billing: your plan, trial dates and Stripe customer and subscription IDs. Card details go straight to Stripe; we never see them.

Technical: sign-in cookies that keep you logged in, and a cookie that remembers which page you came from. Your chat history and first-visit tips live in your own browser’s local storage. No ads, no ad trackers, no third-party analytics.

Why we use it

To run the service you asked for: find jobs that fit your goals, tailor resumes, run interview practice, keep your account and subscription, and send service emails (welcome, plan started or renewed). Legal basis: performing our contract with you, and our legitimate interest in keeping DOORS secure and working.

We do not sell your data and do not use it for advertising.

Who processes it for us

Supabase (database and sign-in, United States) · Vercel (hosting, United States and global CDN) · OpenAI (assistant, resume writing, transcription) · Google Cloud Vertex AI (AI interview) · OpenWeb Ninja / RapidAPI JSearch (job search — receives your search terms like role and place, not your name or email) · Stripe (payments) · Resend (email).

These providers process data only to deliver their part of the service. Under their API terms, OpenAI and Google do not use it to train their models. Some are in the United States; transfers rely on the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

When you paste a job link, DOORS fetches that public page to read the job. It does not read sites whose terms forbid it.

Google user data

DOORS uses Google sign-in only to confirm who you are: your email, name and profile picture. DOORS’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not share Google user data with third parties except the providers above that run DOORS, and never for advertising.

How long we keep it

As long as your account exists. Delete your account and we erase your profile, resumes, saved jobs and change history within 30 days; billing records are kept as long as tax law requires. Cached job search results hold no personal data and expire on their own.

Your rights

You can see and edit nearly everything DOORS knows about you in Profile. You can also ask us to access, correct, export, delete or restrict your data, or object to how we use it. To delete your account, email us from the address you sign in with.

You can complain to the Estonian Data Protection Inspectorate (aki.ee) or your local data protection authority.

Security

Data is encrypted in transit. Your browser can only read your own data; every change goes through our server, which checks who you are.

Children

DOORS is for people 16 and older. We do not knowingly collect data from younger children.

Changes

If this policy changes in a way that matters, we will tell you by email or in the app before it takes effect.