Bizim Circle - Privacy Policy

To run Bizim Circle, we collect some basic information:

• Name and profile details, including optional social and website links and the display labels you choose for them
• Email address
• Content you share (posts, messages, etc.)
• Basic usage data (how you use the platform)
• A device push token when you allow notifications in the BC | Insider iOS app. We use it only to deliver the notifications you selected. Lock-screen notices use generic text rather than message or request details. We ask the server to remove the device when you sign out or delete your account; if the device is temporarily offline, the app keeps a separate revocation credential and retries removal without keeping your signed-in session.

When you use the Insider tools, we record how you interact with referral requests: when you open a request card, when you view its details, and when you pass on, accept, or respond to it, along with timestamps.

We use this to route requests fairly, decide when a request should be escalated to our team, and let our operations team see what happened on a request. This activity data is never shown to applicants. It is deleted when your account is deleted.

When you send a referral request, you give us:

• Your resume. The file, its name and its type.
• The job: the company, the role, the posting link, and the job ID if you add one.
• Your email address for that request.
• Any links you add, such as a portfolio or a LinkedIn profile.
• The message you write to the Insider.

Your resume is stored with Cloudflare R2, our file host. It is deleted automatically 90 days after you send the request, and immediately if you delete your account.

The Insiders your request reaches can open all of it, including your resume. So can our team.

When you apply, you give us your name, your work email, the company you work for, your role title if you choose to add it, and the Terms acceptance recorded with your application.

Optional phone numbers or contact handles you have provided with an application are available to authorized application-review staff for that review and related support. This account overview does not ask you for additional contact information.

If we create a new account for an approved Insider, we ask for one password and an explicit city choice. We do not infer your city from your IP address, device locale, or provider profile.

If you connect LinkedIn, we keep three things: the identifier LinkedIn gives us for your account, your public profile URL, and our own answer to one question, whether the name you typed matches the name on your LinkedIn.

When LinkedIn returns the standard OIDC profile picture and you do not already have a profile photo, we may fetch it with security checks and copy it into your Bizim Circle avatar storage. We do not keep the LinkedIn image URL. You can replace the copied avatar through your profile.

We ask LinkedIn only for your name, profile information (including a picture if LinkedIn supplies one), and your email address.

You and an Insider can message each other about a request, and either of you can attach files: PDF, Word, PNG or JPEG, up to five per message.

The other person sees the file name you chose. If you are an Insider who has chosen to stay anonymous, keep your name out of your file names.

We keep these messages with the request. Our team can read them.

Authorized operations staff can use an administrator-restricted account overview to review information we already hold about your account, profile and applications, including verification, preferences, status and recorded application-source information, when needed for account support, application review, referral operations or safety. It adds no collection and does not fill in missing signup-site or device history by guessing. This does not change what other members can see or how you choose to share contact details.

This account overview excludes credentials, unshared profile contact values, unpublished drafts and signup text, precise coordinates, resumes, message or report attachments, and private conversations. Separate safety and referral-request review access and the retention limits described below remain unchanged. These clarifications do not change what a previously recorded consent says or treat you as having accepted new terms retroactively.

Our operations team can see everything on a referral request: your real name, the Insider's real name, your resume, your messages, and any private note an Insider leaves for us.

We see real names on both sides even when an Insider is anonymous to you. Anonymity is a promise we make to you about each other, never about us.

When someone applies to be an Insider, our operations team also keeps an internal review state and may add a private review note. Those records are visible only in the control room and are never shown to applicants or Insiders.

An Insider who passes on your request picks one or more reasons. You see those reasons and anything they write to you. They can also leave a private note for our team, which you never see. We use it to route future requests better.

We email you about your account and your requests: confirming your address, resetting your password, telling you a new way of signing in now reaches your account, completing the one-password-and-city setup for a new Insider account, and meaningful referral-request updates, including when someone takes your request forward, when a referral is submitted, and when final handling of a request is complete. We do not email you for each change between Insiders. An exhaustion email is sent only when the request is finally returned to you.

If you allow notifications in the Insider app, we also use your device push token to send Applicant referral-status updates, including acceptance, hand-back, referral submission, closure and final return of your request. These pushes are sent as the updates happen, independently of email timing. Your phone settings control whether alerts appear. Push previews are generic; request details are available after you open the app and sign in.

For accepted assignments that remain inactive, we send three reminders before automatic release and notify the Insider about the release. These use the Insider's chosen email or push channels. Email respects quiet hours; push is sent when an update occurs or a reminder becomes due, subject to your phone's notification settings. The first reminder is due three hours after acceptance; each later reminder, and release after the third, waits at least three hours from the previous successful dispatch. A send counts when the first chosen email or push provider accepts it, not when a device displays it or a person reads it. Failed or uncertain sends do not advance this sequence.

We send no more than three reminders per assignment. New applicant messages and attachments can generate an immediate push, except while the recipient is viewing that conversation, and are covered by the next scheduled reminder without delaying it or restarting the sequence. An Insider reply stops all remaining reminders and automatic inactivity release for that assignment. The assignment remains active for normal work and referral submission; later applicant messages do not reactivate reminders or inactivity release. Reminders point to the waiting conversation, including later messages, rather than exposing private message bodies in a push notification. We use existing conversation activity and limited dispatch records without asking for extra information. Opening, viewing or reading alone does not change the schedule. Applicant message notifications remain separate. Automatic release does not send an applicant exhaustion email; that requires our team to resolve and return the request.

These are not marketing. We do not send newsletters or digests. Our email is sent through Resend.

When you report a conversation you can add evidence:

• Files. Screenshots, photos, videos or PDFs, up to 25MB each. Only our safety team sees them.
• Messages from that chat. You choose a time period, up to seven days, and the messages between you and the person you are reporting from that period are sent to our safety team.

Both are optional. If you add neither, we receive your reason and your description.

We keep reports and their evidence even if you delete your account, so we can act on them.

We use your information to:

• Help you connect with others
• Show relevant circles, people, and content
• Improve the platform
• Keep the community safe

We do not sell your personal data.

We may share limited data:

• With trusted tools we use to run the platform (e.g., hosting, analytics)
• If required by law

We may use cookies or similar tools to:

• Improve your experience
• Understand how the platform is used

We keep your data:

• While your account is active
• Or as needed for legal or operational reasons

You can delete your account yourself at any time from Settings. Deletion is immediate and cannot be undone.

When you delete your account:

• Your profile, posts and comments are deleted
• Messages you already sent stay in other people's chats
• Safety reports are kept so we can act on them

Deleting your account also deletes your referral requests, your resume files, your Insider profile, your Insider application, and the record of how you interacted with requests.

You can:

• Update your profile information
• Request access to your data
• Delete your account from Settings

We take reasonable steps to protect your data.

No system is perfect, but we work to keep your information safe.