Privacy Notice

Version 2026-10-26 · English

Bahasa Malaysia

Who is responsible

W Creates Digital Pte. Ltd. operates OpenDoor.Network. Send privacy enquiries, access or correction requests, consent withdrawals and complaints to hello@opendoor.network, marked “Privacy”. This notice covers job seekers, employer representatives and visitors in Singapore and Malaysia.

Information and purposes

We collect information directly when you register, edit a profile, upload a résumé, apply, manage a company, contact support or use an optional tool. We also receive basic identity information from a sign-in service you choose, application status and recruitment notes from an employer, and authorised information from a connected HR system. We may check publicly available company information for moderation. We do not obtain your private email inbox or contact list merely because you use social sign-in.

We process account and contact details, company and team details, profile and résumé information you provide, applications and their status, optional AI inputs, consent choices, security and activity records, and payment references if payment features are enabled. We use these to create and secure accounts, show vacancies, process applications, manage hiring, provide requested tools, answer enquiries, investigate misuse and meet legal obligations. Basic account details are necessary to provide an account; résumé and profile fields depend on the feature you choose. Without necessary application information an employer may not be able to assess your application. Avoid providing NRIC/MyKad numbers, health, racial, religious, financial or other sensitive information that is unnecessary for recruitment.

How information is used

• Accounts and security: identity, authentication references, account activity and security records support sign-in, access controls, investigation and support.
• Recruitment: your chosen profile, résumé and application answers are delivered to the employer you apply to; its team may record recruitment status and notes.
• Market preferences: your chosen job market and location filters personalise search. A saved profile preference or session choice is used first; an explicit browser region may suggest a default. This is not GPS or proof of residence, nationality or work permission.
• AI: only the notes, answers and visible draft you choose to submit are processed for the requested writing task. Your account, full résumé and private hiring notes are not automatically attached.
• Payments, when enabled: order and payment references support fulfilment, reconciliation and disputes. Card entry is handled by a payment processor; it is not a request to provide card details in your résumé or AI prompt.
• Optional email marketing: your name, email and recorded choice are used only within the permission described below.

We rely on consent where required, and otherwise only an applicable legal permission or obligation for the specific purpose. Contract terms alone do not override privacy law. We will explain a materially new use and request fresh consent where required.

Choice and marketing

Marketing is optional and off by default. If you opt in, we may use your name and email for OpenDoor.Network and W Creates Digital Pte. Ltd. news, offers and services. We do not treat account creation, a job application or acceptance of terms as marketing consent. Withdraw using Email preferences, a marketing unsubscribe link or our contact email. Withdrawal does not affect your account, earlier lawful processing or necessary security/application messages. We will stop the relevant use and instruct providers as required. Telephone, SMS or WhatsApp marketing is not authorised by the email checkbox.

Sharing and employer access

Applying shares the submitted profile snapshot, résumé, answers and contact information with that vacancy’s employer and its authorised team or connected HR system. Employers decide their subsequent recruitment processing and may have their own privacy notices. A profile’s discoverability setting does not permit unrelated marketing. We do not sell candidate data. Authorised service providers may process data to operate hosting, transactional email/contact records, sign-in, AI and payments. These recipient categories include infrastructure and storage operators, email delivery and contact-management processors, identity-authentication services, AI processing services and their selected model processors, and payment processors when enabled. We may disclose information when required by law or reasonably necessary to address fraud, security incidents or legal claims.

Visibility, copies and connected systems

Your résumé is not a public page merely because you upload it. Authorised platform staff may access records when necessary for support, security or moderation. Public company profiles, published jobs and articles can be viewed and indexed by search engines. Where a discovery feature is available, its visibility control applies to that feature; it does not make every private record public. An employer may export or receive a submitted application in its own HR system. Ask that employer about its independent processing, access or deletion obligations. A later profile edit or withdrawal does not automatically remove earlier lawful copies.

Recipients must have an appropriate purpose and authority. We do not give all employers unrestricted access to all applicants, authorise unrelated marketing from application data or sell candidate contact lists. Regulators, law enforcement, courts and professional advisers may receive necessary records for legal compliance or claims. A proposed business transfer would require appropriate confidentiality, legal safeguards and any required notice; it is not permission for a buyer to use data for unrelated purposes.

AI and international processing

AI is optional. The AI form asks for your consent before submitting the information you enter to an external AI processing service and its selected model provider. Review and minimise it first. Drafts are not automatically applied; a profile draft is saved only when you choose to apply the reviewed fields. Providers may process data outside Singapore or Malaysia. Hosting and other providers may also involve overseas processing. Before transfers we must assess applicable safeguards and ensure the protections required by Singapore and Malaysian law. Consent alone is not a substitute for those safeguards. We do not promise that all data stays in one country or that every provider keeps no logs.

Security, cookies and retention

We use access restrictions, private credentials, role permissions and security records to protect information. No system is risk-free. Essential session and security cookies support sign-in and safe forms. Any optional tracking that requires consent must be separately enabled with appropriate choice. We retain information only as necessary for its stated purpose, legal duties, security and disputes, then delete or anonymise it. Backups and employer-held copies may follow separate justified retention periods; an application snapshot can remain relevant after a profile edit. Contact us for the applicable retention assessment or a deletion request.

Retention and account closure

Retention depends on the record and purpose: account/profile information supports the active account; application snapshots support the recruitment process and related disputes; consent and suppression records help honour your choices; security and audit records support investigation; payment records may be subject to statutory retention. We assess whether continued retention is necessary and justified, rather than keeping all information indefinitely simply because storage is available. Contact us to request closure, deletion or the applicable retention explanation. We may need to retain a limited record for a legal requirement, dispute or suppression obligation and will explain relevant restrictions where lawful. Backup copies may persist until their justified lifecycle ends and are subject to access restrictions.

Your rights and complaints

You can update profile details and email preferences, request access or correction, ask about use/disclosure, withdraw consent, or request closure/deletion subject to applicable legal exceptions. Contact us for assistance or any other right available under local law, including portability where applicable. We may verify identity using proportionate information and explain any lawful refusal, fee or extension. We will handle requests within applicable legal timeframes. You may complain to Singapore’s Personal Data Protection Commission or Malaysia’s Personal Data Protection Commissioner. We will assess incidents and notify authorities and affected individuals where required by law.

Singapore and Malaysia

For Singapore, requests and processing are subject to the Personal Data Protection Act 2012, including applicable access, correction, withdrawal, protection, retention, transfer and breach-notification obligations. For Malaysia, the Personal Data Protection Act 2010 as amended and applicable regulations and guidance govern relevant processing, including notice and choice, disclosure, security, retention, data integrity, access and applicable additional rights. Exceptions and territorial rules can affect a particular request; we will assess the actual circumstances rather than promise an unconditional right that the law does not provide.

For relevant recipient or international-safeguard information, or to reach the person responsible for data protection, contact hello@opendoor.network. We will provide information needed to address your request and meet applicable legal requirements. You can complain to the relevant regulator without first waiving any rights.

Updates and children

This service is intended for people legally able to participate in recruitment. Do not submit a child’s information without appropriate authority and safeguards. Material changes to this notice will be published with a new date; we will notify you and obtain fresh consent when legally required.