Privacy Policy

Codalyst Tech (SMC-Private) Limited ("Codalyst", "we", "us") operates the Codalyst Talent Pool. We are the data controller for personal information submitted through this platform.

Contact: talent@codalyst-tech.com

When you apply to the Talent Pool, we collect the information you provide, which may include:

• Identity: Full name, gender, nationality.
• Contact: Email address, Pakistani mobile number.
• Professional profile: Years of experience, job title, employer, professional category, specific skills and roles.
• Online presence: LinkedIn, GitHub, portfolio, and other professional profile URLs you choose to provide.
• English proficiency and client experience: Your stated language level and international client history.
• For agencies: Agency name, agency email, website, portfolio URL, team size, years of operation, project descriptions, and contact person details.
• Technical data: IP address (for rate-limiting and fraud prevention only; not stored permanently).

We use your data to:

• Assess your application and determine suitability for our talent pool.
• Match your profile against client contract requirements and contact you when a relevant opportunity arises.
• Send a confirmation email upon application receipt.
• Maintain and administer the talent pool internally.
• Prevent fraud, abuse, and submission of malicious content.

We do not use your data for advertising, resell it to third parties, or share it with anyone outside the Codalyst organisation except where required for an active client engagement.

• Consent: You voluntarily submit your application and agree to the terms at submission.
• Legitimate interest: To administer a professional talent register and match professionals with client opportunities.
• Contractual necessity: Where an engagement contract exists, processing is necessary to fulfil that contract.

Your application data is stored in a Supabase-hosted database. Access is restricted to authorised Codalyst personnel only, via role-based authentication with audit logging.

We apply:

• TLS encryption for all data in transit.
• Encrypted storage at rest.
• Strict access controls — no anonymous database access; admin access requires authenticated sessions.
• Input validation and sanitisation to prevent injection attacks.
• No document or file uploads accepted — only structured profile data.

We retain your profile data for as long as you remain in the Talent Pool. If you request removal, your data will be deleted or anonymised within 30 days, unless we are required to retain it by law.

You have the right to access, correct, or request deletion of your data, object to specific uses, or withdraw consent at any time. Email talent@codalyst-tech.com — we will respond within 14 working days.

The Talent Pool platform uses only functional cookies necessary for admin session management. No tracking, analytics, or advertising cookies are used. No third-party analytics scripts are loaded on this platform.

• Supabase — database and authentication
• Hosting provider — application hosting
• Email delivery service — confirmation emails only

Material changes will be noted with an updated "Last updated" date. Continued use of the platform constitutes acceptance of the current policy.

talent@codalyst-tech.com · Codalyst Tech (SMC-Private) Limited, Pakistan.