Your data. Your rules.

Who's actually holding your data.

"1 DOOR" (we, us) is the layer between business and talent. The service is operated by Mikhail Bogatyrev (ABN 88 668 987 493), based in Australia. For everything in this policy we're the data controller - the ones who decide what gets collected and why, and the ones legally on the hook for it.

Whether you're a business briefing a project, an operator in the community, or just someone browsing the site, this policy covers you. It's written to satisfy the EU GDPR, the UK GDPR, the California CCPA/CPRA, and equivalent laws wherever you happen to be.

What we collect (and what we don't).

We don't hoover up everything just because we can. Here's the actual list, grouped by where it comes from.

What we never collect

• Special-category data (health, religion, politics, biometrics) - we don't want it and don't ask for it.
• Data about anyone under 16. This is a professional platform; see section 10.
• Anything bought from a data broker. Every record traces back to you or your own actions.

Why we use it - and our legal basis.

Under GDPR we can't process your data on a vibe. Every use has a lawful basis. Here's ours, no hand-waving:

• Contract. To run projects, build teams, pay operators, and deliver what you briefed - we can't do the job without it.
• Legitimate interests. To keep the platform secure, prevent fraud, understand what's working, and improve the product - balanced against your rights, and you can object.
• Consent. For non-essential cookies and marketing emails. You opt in, and you can pull that consent any time, no questions asked.
• Legal obligation. Tax, accounting, and anti-money-laundering rules force us to keep certain records whether we like it or not.

Cookies, but make it honest.

We use a small set of cookies: essential ones that make the site work, and optional ones (analytics, marketing, personalization) that only fire after you say yes. Decline and we respect it - no dark patterns, no pre-ticked boxes.

You can change your mind whenever you want. The full breakdown, plus the toggle to rebuild your preferences, lives on the cookie settings screen.

Who gets to see your data.

Short answer: as few people as possible, and never advertisers. We share data only with:

• The project team. When you brief or join a project, the relevant operators and project manager see what they need to do the work - nothing more.
• Service providers (processors). Hosting, payments, email, and analytics vendors who process data on our instructions, under contract, and can't use it for their own ends.
• Payment & payout platforms. To pay operators, we share the details our third-party payment and payroll providers need to send your money - name, payout method, and tax info. They process it solely to complete the payment, under contract.
• Hiring opportunities (with your consent). If one of our business customers wants to hire you for a project or a full-time role, we may share relevant profile details so they can make you an offer. The upside is yours - more work, more income - and it only happens with your prior consent, which you can decline or withdraw at any time without losing access to the platform.
• Other community members. Once your application is approved, your profile - name, country and city, languages, skills, services, companies you've worked in and with, and the links you gave us - is visible to other members and is announced with a short introduction in our private community Telegram group. Your phone number, email address and rate are never included. Ask us to remove the introduction or your profile at any time.
• Authorities. Only when the law genuinely requires it - a valid court order, regulator request, or to protect people from harm.
• A future buyer. If 1 DOOR is ever acquired or merged, data may transfer - but the new owner is bound by this same policy.

We do not sell your personal information, and we do not "share" it for cross-context behavioural advertising as those terms are defined under the CCPA/CPRA.

When data crosses borders.

Our community spans 23 countries, so data sometimes moves across borders - including outside the EEA or UK. When it does, we protect it with Standard Contractual Clauses, the UK International Data Transfer Addendum, or transfers to countries with an official adequacy decision.

Translation: your data carries its legal protection with it, no matter which server it lands on.

How long we hang on to it.

Not forever. We keep data only as long as there's a real reason to:

• Account & profile - while your account is active, then deleted or anonymized within 12 months of closure.
• Project records - for the life of the engagement plus the period needed to resolve disputes.
• Financial & tax records - typically up to 7 years, because the law says so.
• Marketing data - until you unsubscribe or withdraw consent, whichever comes first.

The rights you actually have.

These aren't favours - they're your legal rights under GDPR, UK GDPR and CCPA/CPRA. Use any of them by emailing us, free of charge, and we'll respond within 30 days (45 in California, extendable where the law allows).

California residents also have the right to not be discriminated against for exercising these rights, and may use an authorized agent. EU/UK residents can complain to their local data protection authority - though we'd love the chance to fix it first.

How we guard it.

We treat your data like it's our own, because legally it might as well be. That means encryption in transit and at rest, strict access controls on a need-to-know basis, regular security reviews, and vendors vetted for their own practices.

No system is bulletproof - anyone who claims otherwise is selling something. If a breach ever affects you, we'll notify you and the relevant authority without undue delay, as the law requires.

This isn't for kids.

1 DOOR is a professional platform for adults. It's not directed at anyone under 16, and we don't knowingly collect their data. If you believe a minor has signed up, tell us and we'll remove the account and its data fast.

When this changes.

We'll update this policy as the platform and the law evolve. When we make a material change, we'll bump the version, update the date at the top, and - if it actually affects you - tell you by email or an in-app notice. No quiet rewrites.

Talk to a real human.

Questions, requests, or just want to exercise a right? Reach out - a person reads every message, no ticket-bot purgatory.