Privacy notice

Who can use Doevio

Doevio welcomes adults age 18 and over worldwide, subject to applicable law. We ask for an adult declaration, not your birth date. We do not independently verify age. Do not create an account if you are under 18; contact support if you believe a child has provided information.

Information we collect and use

Accounts include your email, password hash, account type, email verification, sign-in sessions, and the version and time of your participation agreement. Passwords are not stored in readable form. Candidates provide a headline, skills, availability and visibility choices. Companies provide organization details, website, membership and approval information.

You may optionally upload a profile photo. We remove image metadata, resize it, and store it privately in our database. Administrators review new and replacement photos. Sharing is off by default: you must separately choose to reveal your photo to approved, paying companies with a current unlock for your published portfolio. Signed-out visitors receive a generic blurred avatar, not your photo. Replacing a photo resets approval and sharing; removing it or switching sharing off stops future access, but cannot recall copies already received. Your account export includes your uploaded photo, and account deletion removes it, subject to backup rotation.

When you record a task, we receive the screen content you select, recording chunks, declared tools, timing and interruption events, your summary and review choices. We use this information to process recordings, support your review, publish work you choose to share, and manage approved company access. An anonymous profile or recording can still reveal who you are.

We also process portfolio access and playback events, meeting requests and schedules, notification preferences, email delivery history, support correspondence, and technical/security records. These support account operation, consensual introductions, service messages, abuse prevention, troubleshooting and privacy requests. Task evidence and staff review do not certify identity, authorship, correctness or professional qualifications. We do not make automated hiring decisions.

Your screen and publication choices

Prepare a task-only window with fictional data. Close unrelated apps and keep credentials, client information, private conversations and unrelated AI chat history out of view. Doevio cannot automatically close other applications, inspect all open apps, remove histories or guarantee redaction. Review before publishing; delete and re-record if needed.

You choose whether to make your profile visible and submit work for publication. Selected profile details and summaries of approved published work can appear in public search. Reviewed companies need authorized portfolio access to watch protected recordings. Authorized administrators can review recordings, company applications and operational records. Publication does not authorize promotional homepage use of your real recording; that needs your separate permission.

You may decline a meeting request. Accepting a request does not automatically reveal your contact identity; disclosure is a separate choice. Text or video you publish can itself identify you. Employers are responsible for their own recruitment use. We cannot recall copies already received or prevent someone independently recording playback.

Providers, location and optional connections

When configured, “Chat with us” offers optional support through Tawk.to. Choosing Start chat here loads a Tawk-hosted conversation inside Doevio. Tawk receives the messages and contact details you choose to send, along with technical connection information, under its privacy policy. The conversation runs in a separate, contained frame only after you start it. Doevio does not add Tawk scripts to its own pages or automatically send your account details, recordings or page contents to chat. The chat is unavailable on signed-in and private pages. Keep confidential information out of messages. Contact [email protected] for chat privacy or deletion requests.

Candidates and companies may optionally continue with Google. Google receives the sign-in request and callback information. We request only identity and email access, validate Google’s signed identity response, and privately save its stable account identifier. We do not request Gmail, Drive, Calendar or Meet permissions, retain Google access or refresh tokens, or publish a Google name or photo. New members must choose Candidate or Company and accept the adult participation rules before an account is created. An encrypted, browser-bound signup record expires after ten minutes. Existing accounts must explicitly link Google while signed in; matching email alone does not link or convert an account. Disconnecting Google ends Google-created sessions. Set a Doevio password through your recovery email before disconnecting or using password-confirmed account controls. Google sign-in does not verify age, work skills or company approval.

Candidates can optionally sign in or register with GitHub. GitHub receives the authorization request and callback information. We check your GitHub account ID, username and verified email addresses to authenticate your candidate account; we do not request repository access or retain GitHub access or refresh tokens. Your GitHub username stays in private account records, and your GitHub name or avatar is not automatically published. New accounts still require the adult declaration and participation agreement, and receive Doevio email verification. Existing accounts must explicitly link GitHub while signed in. You can disconnect after setting a password; disconnecting ends GitHub-created sessions. A fresh GitHub confirmation can authorize account export or deletion for five minutes in the same session. GitHub authentication does not independently verify age, skills or identity.

Our application, PostgreSQL database and private media are hosted on Bluehost in the United States. Cloudflare provides network/security and DNS services. Brevo sends automated email; Zoho hosts our support mailbox. Encrypted database/media backups are also copied to a private, operator-controlled Mac. These providers process information needed for their functions and may use infrastructure or support in other countries.

Stripe processes employer subscription payments and billing-portal actions. Payment details and billing contact information are entered directly into Stripe; Doevio does not receive or store full card numbers. We retain organization-bound customer, checkout, subscription and invoice identifiers, amounts, periods, recurring-consent records and payment/review status to administer access and financial records. Provider billing may continue independently until canceled; account deletion is not a payment-cancellation instruction.

Your data is processed in the United States even if you use Doevio elsewhere. Laws and protections may differ from your country. This notice and your account agreement are not a substitute for any safeguards or representative required by applicable law. Contact support about international processing and applicable safeguards before sharing sensitive information. We do not claim certification under an international transfer framework.

Optional provider connections store encrypted credentials to create meeting rooms with your authorization. Automatic Zoom room creation is currently limited to the development test account; companies can supply their own Zoom, Meet, Teams or other permitted link. Automatic Google Workspace room creation is disabled. External providers have their own terms and privacy practices. Disconnect in Doevio and revoke permissions or cancel external rooms in your provider account when needed; local deletion cannot promise external deletion.

Purposes and applicable legal grounds

We use necessary account and marketplace data to provide the service you request; proportionate security and operational data to protect the service and participants; and records needed to meet applicable legal obligations. Where a consent-based use applies, such as optional activity emails or separate identity disclosure, you can change that choice through the relevant control. Agreeing to the Terms is not blanket consent to every use of personal information. Applicable grounds and rights depend on the processing and law that applies to you.

Candidate participation and public demonstrations are free. Optional employer subscriptions use Stripe when live billing is enabled. We do not sell personal information or use it for advertising. Optional public-site analytics is described below. Employer access supports the recruitment purpose you choose by publishing; it is not an advertising feed. Any materially different use requires notice and any choice or other legal basis required before it begins.

Cookies and browser storage

We use a necessary sign-in cookie and browser storage for interface preferences, the 30-day introduction dismissal, and recording recovery. Unuploaded drafts remain on the device and are not in a server export. Browser recovery is best effort; storage can be unavailable or evicted. Deletion attempts to clear drafts on this browser; clear Doevio site data on other devices yourself.

We do not perform cross-site advertising tracking. Global Privacy Control and Do Not Track signals disable optional analytics. Cloudflare and other providers may process technical connection/security information. Contact support with privacy questions. Optional analytics notice updated October 24, 2026: when enabled, Google Analytics loads only after you allow it, on public pages for signed-out visitors. Google receives public-page paths, a pseudonymous browser identifier and ordinary device/network information. We omit query strings, fragments, account identifiers, form text, recordings and private page events. Advertising signals and enhanced measurement are disabled. Google may process technical connection information; see Google's privacy policy. The Analytics account's existing data-sharing settings also apply. Choose Reject analytics or change Analytics choices on a public page to withdraw. Withdrawal stops future collection and clears accessible first-party Analytics cookies; it does not erase data already received by Google. Choices are saved locally for 180 days. No tag or consent ping is sent before opt-in.

Access, correction, export and deletion

Use Account to prepare a password-confirmed JSON export and download available processed recordings separately. The encrypted export is limited to five minutes and the same signed-in session. It excludes passwords, tokens, provider credentials, other people’s private profiles and unuploaded drafts. Browser or organization download restrictions may prevent saving; contact support if you need another verified delivery method.

You can edit or hide your profile, withdraw or delete recordings, manage notifications, disconnect meeting providers, or delete your account. Deletion removes sign-in access and profile identity, removes recordings/requests, revokes sessions and queues durable media erasure with retries and checks for late writes. Administrators and sole company owners may need a verified role/ownership handoff; unresolved billing must be addressed before company closure. You can still make a verified privacy request through support.

Depending on applicable law, you may have rights to access, correct, delete, obtain a portable copy, restrict or object to processing, withdraw consent, opt out of covered processing, or complain to a competent privacy regulator. Email support for these requests, appeals or accommodation. We will verify authority proportionately and respond within the time required by applicable law without retaliation. Do not send passwords or authentication codes. If a request is refused or limited, we will explain the reason and available review route.

Retention and security

We keep active account information and selected published work while needed for your service, until you remove it or close the account, subject to applicable legal requirements. Unpublished server recordings remain until you delete them or close the account; they are not automatically public. Routine audit history is pruned after 365 days, terminal email delivery history after 90 days, and expired verification/reset records after seven days. Expired prepared exports become inaccessible immediately and are removed by periodic cleanup.

Policy acknowledgment records are kept for the life of the account and removed during account deletion. Opaque account, financial and portfolio-access references can remain after identity erasure for reconciliation, disputes and required records; we review further erasure requests through support. Minimal erasure/media-deletion ledgers are retained while backups could otherwise restore deleted data. They prevent restoration or late writes from republishing erased material.

Encrypted server and Mac backups each retain the two newest successful snapshots. Older snapshots can contain later-deleted data; rotation depends on successful backup runs, so we do not promise immediate or fixed-day backup erasure. Restores must reconcile later deletion records before opening access. Physical media erasure can be delayed by failures after access is revoked. Copies held by recipients and external meeting providers are outside our storage.

We use HTTPS, access controls, private media, encrypted provider/export payloads and encrypted backups. These controls are not end-to-end video encryption, perfect anonymity or a guarantee against every incident. Report suspected exposure to support without including more sensitive material.

Changes and contact

Material changes carry a new version and an in-service review before further participation; where required, we provide additional notice before new processing. Existing accounts are not treated as having already agreed. Account recovery, export, deletion and sign-out remain available before agreement. Contact [email protected] for questions or a copy of the version applicable to your account.

Task suggestions and reviewed outcomes

Signed-in participants can submit fictional task ideas for private administrator review. We store the proposed brief, criteria, role, review feedback and your permission to adapt the idea into a public challenge. Do not include personal information, confidential work or restricted third-party materials. You can withdraw the suggestion text; already developed fictional tasks may remain in the catalog. Account exports include your suggestions, and account deletion erases the submission records.

Administrators can assess submitted recordings against the recorded task version and provide feedback. You can see your own results. Candidates choose whether to share reviewed outcomes and notes. Companies receive shared results and recording length only with the same current approval, paid access and candidate-permission requirements as the recording. Recording length is not total solving time, and a reviewed outcome does not independently certify skill.