Privacy policy
Last updated 5 November 2026Draft for review. This text describes how Diaspora BD handles data today and must be reviewed by a lawyer before public launch. Items in [brackets] are still to be decided.
Diaspora BD connects members who live abroad with students and professionals who want to follow them. Many of our members could be put at risk if their details were misused, so we collect as little as we can, keep it private by default, and never sell it.
What we collect
| Data | Where it comes from | Why |
|---|---|---|
| Name, email address, and photo | Your Google account when you sign in | To create your account and sign you in |
| Profile: name, headline, where you live (country and city), region of origin, education, career, mentorship roles | You | To show your profile to members as you choose |
| Privacy settings and community membership | You | To decide who sees each part of your profile |
| CV files and the details read from them | You, if you use "Fill in from your CV" | To pre-fill your profile |
| Mentorship requests and replies | You and the other member | To run mentorship |
| Google Calendar access | You, only if you connect it as a mentor or mentee | To book sessions (when available) |
| Sign-in sessions and a count of recent Explore page loads | Your use of Diaspora BD | To keep you signed in and limit bulk collection |
We do not collect precise location, and we do not use advertising or third-party tracking.
Who can see your data
- Members see the parts of your profile you share with members. Your region of origin and contact details start as visible only to you.
- Lists such as Explore show only name, photo, headline, country and city, and mentorship roles, 20 at a time.
- Mentors and mentees: when a mentor accepts a request, both see each other's sign-in email. A CV you choose to share can be downloaded by that mentor while the request is open or accepted.
- Diaspora BD staff access data only to run the service, investigate reports, or meet legal obligations.
Services that process data for us
- Google Cloud hosts Diaspora BD: the web app, the database, and file storage, in the United States (
us-central1). - Google Gemini API reads CVs you upload to extract profile details. The file is sent once, when you upload it.
- Google sign-in and Google Calendar, when you use them.
[Data processing terms and any international transfer safeguards to be confirmed with legal advice.]
How long we keep it
| Data | Kept for |
|---|---|
| Uploaded CV | Deleted as soon as it has been read, at the latest after 24 hours |
| CV you chose to keep | Until you delete it or your account |
| Details read from a CV, before you save them | 24 hours |
| Explore page-load counts | 24 hours |
| Sign-in sessions | Up to 30 days |
| Profile, mentorship requests, and account | Until you delete them or your account |
| Deleted account | Hidden immediately, permanently deleted after 90 days |
Your choices and rights
- Change who sees each part of your profile on the Privacy page.
- Export all your data as a file, or delete your account, from the Privacy page. A deleted account disappears from Diaspora BD straight away. For 90 days you can restore it by signing in again; after that, your profile, files, and requests are deleted permanently.
- Ask us about your data at the contact below. [Rights under specific laws, such as GDPR, to be completed with legal advice.]
Government and law-enforcement requests
See our policy on government data requests.
Changes and contact
We will tell members about significant changes to this policy. [Contact address and data controller to be added before launch.]