GDPR and privacy compliance

Compliance overview

daily.dev Recruiter is designed with privacy compliance as a foundation:

• GDPR (European Union)
• CCPA (California, USA)
• Other applicable regulations as they evolve

Our approach: build privacy in, not bolt it on.

Key compliance principles

1. Consent first

All data collection requires explicit consent:

• Developers choose to opt in to opportunities
• Clear explanation of what is collected
• Easy withdrawal at any time
• No pre-checked boxes or dark patterns

2. Data minimization

We only collect what is necessary:

• Information needed for matching and introductions
• No excessive data collection
• Regular review of data necessity
• Deletion of unnecessary data

3. Transparency

Full visibility into data practices:

• Clear privacy policy
• Developers see what is shared before opt-in
• No hidden data collection
• Open about processing purposes

4. Data subject rights

We honor all rights under GDPR:

5. Secure processing

Technical and organizational safeguards:

• Encryption in transit and at rest
• Access controls and authentication
• Regular security assessments
• Incident response procedures

Legal basis for processing

Under GDPR, we process data based on:

Consent

• Developer opt-in for introductions
• Explicit agreement to screening questions
• Account creation and profile building

Legitimate interest

• Platform security and fraud prevention
• Service improvement (anonymized analytics)
• Support and troubleshooting

Contractual necessity

• Service delivery for paying customers
• Introduction facilitation
• Account management

International data transfers

For users outside the EU:

• Standard Contractual Clauses (SCCs) in place
• Adequate safeguards for transfers
• Compliance with local requirements

Data processing agreement

For enterprise customers:

• DPA available upon request
• Defines roles and responsibilities
• Covers subprocessors and security
• Contact support to obtain

CCPA specifics

For California residents:

• Right to know what data is collected
• Right to delete personal information
• Right to opt out of sale (we do not sell)
• Non-discrimination for exercising rights

Recruiter responsibilities

When you use candidate data:

• You act as controller for your use
• Follow your own privacy obligations
• Comply with employment laws
• Use data only for stated purposes

We provide the platform; you remain responsible for your hiring practices.

Compliance documentation

Available upon request:

• Privacy Policy
• Terms of Service
• Data Processing Agreement (DPA)
• Subprocessor list
• Security documentation

Contact support or your account manager for documentation.

Updates and changes

We regularly review compliance:

• Monitor regulatory changes
• Update practices as needed
• Notify users of significant changes
• Maintain documentation currency