Privacy Policy
What personal data Opportunities Gate collects, why we need it, who processes it for us, how long we keep it, and how you can see, correct, export or delete it.
- Effective:
- To confirm: Effective date
- Version:
- 1.0
- Applies to:
- Applicants, coaches and visitors
Draft awaiting legal review
Items marked “To confirm” are being checked by our legal team and will be filled in before this document takes effect.
- Card numbers
- Never storedYou pay on the Flouci or Stripe checkout page
- Your data
- Never soldShared only with the providers listed below
- Export or delete
- Self-serviceFrom Settings → Privacy & Data
- Authority
- INPDPTunisia's data protection authority
Who is responsible for your data
To confirm: Company legal name (“Opportunities Gate”, “we”) decides why and how your personal data is processed on the platform, and is its data controller.
- Controller
- To confirm: Company legal nameTo confirm: Registered address
- Data protection contact
- To confirm: Data protection officer or contact personadmin@opportunitiesgate.net
What we collect
We collect only what we need to run your account and the features you use:
Account and profile
- Name, email address and password (stored hashed)
- Your Google, LinkedIn or Microsoft identity, if you sign in with one
- Profile details: country, languages, education, experience
- Settings and notification preferences
Applications and documents
- CVs, transcripts, certificates and other files you upload
- Your applications, notes and bookmarked opportunities
- Coaching bookings and the messages you exchange
Payments
- Your plan, orders, invoices and payment status
- A reference from Flouci or Stripe for each payment
- We never receive or store your card number or security code
Technical data
- IP address, browser and device, in security logs
- Cookies needed to keep you signed in and remember your language
- Optional analytics, only if you accept them
Waitlists
- Your email, and whether you are an applicant or a coach, when you ask to be told about a feature that is coming soon
Contact form
- Your name, email, the topic, role and subject you choose, and your message
- The files you attach (PDF, Word, PNG or JPG), stored on our file storage under a random link that only our team receives
- A copy of your message, sent to you by email as a receipt
- A one-way fingerprint of your IP address, to limit how many messages one sender can send
Blog
- Your comments and replies, shown publicly with your account name, until you or our team delete them
- The posts you save and the comments you like
- If you subscribe to the newsletter: your email, your language and when you confirmed; Resend, our email provider, sends it
- To count a post's readers once a day: a one-way fingerprint of your IP address and browser, deleted after two days
Why we use it
- Create and secure your account, and let you sign in.
- Show you opportunities that match your profile and help you prepare applications.
- Run AI-assisted features you choose to use, such as application analysis and the opportunity assistant.
- Book coaching sessions and create their video meetings and calendar entries.
- Take payments, issue invoices and keep accounting records.
- Send the emails and notifications you asked for, and service messages about your account.
- Prevent fraud and abuse, and keep the platform working.
AI-assisted features
When you use an AI feature, the content it needs (for example your CV and the opportunity) is sent to our AI provider to produce the answer. We do not sell your content or use it to advertise. How the provider may keep or use it: To confirm: AI provider data-use terms.
Legal bases
Each use of your data rests on one of the legal bases of Article 6 of the GDPR, and on your consent where Tunisian Law No. 2004-63 requires it:
Processing and its legal basis
Processing: Account, applications, coaching
- Legal basis
- Contract — Art. 6(1)(b)
- In practice
- Needed to provide the service you signed up for.
Processing: Payments and invoices
- Legal basis
- Legal obligation — Art. 6(1)(c)
- In practice
- Accounting and tax law require us to keep these records.
Processing: Security, fraud prevention, recommendations
- Legal basis
- Legitimate interests — Art. 6(1)(f)
- In practice
- Keeping accounts safe and suggesting relevant opportunities.
Processing: Newsletters, optional analytics
- Legal basis
- Consent — Art. 6(1)(a)
- In practice
- Off until you opt in; you can withdraw at any time.
Who processes your data
We never sell your data. These providers process it on our behalf, under data processing agreements, only for the service they provide:
Appwrite
Runs the website and the API, and stores uploaded files.
MongoDB Atlas
Stores account, application and billing records, on AWS in Frankfurt (EU).
Flouci and Stripe
Take card payments on their own checkout pages: Flouci in Tunisian dinars, Stripe in euros.
Resend
Sends account, notification and support emails.
DeepSeek
Produces the answers of the AI-assisted features.
Microsoft and Google
Microsoft Teams hosts coaching sessions; Outlook and Google Calendar receive the entries you connect.
Google, LinkedIn and Microsoft also receive your sign-in request when you choose to sign in with them. Opportunity organisers receive your data only when you send them an application yourself, on their own website.
International transfers
Some providers above process data outside Tunisia and the European Economic Area. In that case we rely on an adequacy decision or on the European Commission's Standard Contractual Clauses, and on the authorisations Tunisian law requires.
Transfers for AI-assisted features
Our AI provider processes data outside the EEA. The safeguards that apply: To confirm: transfer safeguards for the AI provider.
How long we keep it
- Your account and profile
- While your account is openDeleted To confirm: period after you close it
- Inactive accounts
- To confirm: inactivity periodWe email you before deleting a dormant account
- Invoices and payment records
- To confirm: legal retention periodAs accounting and tax law require
- Waitlist emails
- Until the launch emailDeleted 90 days after it, and one year after signing up at most
- Contact messages and their files
- To confirm: contact message retention periodKept with our team's email to answer you and follow up
- Security logs
- To confirm: log retention period
Your rights
You can exercise most of these rights yourself from Settings → Privacy & Data, or by writing to us. We answer within one month.
Contact and complaints
Write to us first at admin@opportunitiesgate.net and we will try to resolve your concern.
INPDP
Instance Nationale de Protection des Données Personnelles — the authority for Law No. 2004-63.
Your local authority
If you live in the EU, you can also complain to the data protection authority of your country.
Privacy questions
Contact us to exercise your rights or ask how your data is used. We answer within one month at the latest.
admin@opportunitiesgate.netRelated documents