Privacy Policy

2. Data we collect

• Account data: name, email, phone number, hashed password.
• Candidate profile: CV, education, work experience, skills, languages, photo and, where required, national registration number.
• Employer data: company name, state registration number, certificate, contact details, bank account.
• Usage data: sign-in timestamps, IP address, device/browser type, pages viewed, application history.
• Payment data: transaction history and invoices. MSDI does not store card numbers — payments are handled by a licensed payment provider.

3. Why we use your data

• To provide core services — registration, sign-in, job listings and application delivery.
• To match candidates with suitable vacancies and produce recommendations.
• To process payments, issue invoices and maintain financial records.
• To send notifications (new listings, application status, system messages).
• To maintain security, prevent abuse and investigate violations.
• To produce aggregated, non-identifying statistics that help us improve the service.

4. Who we share data with

We share personal data with third parties only when:

• Employers — where you have applied to their job or made your CV publicly visible.
• Service providers — cloud hosting (Google Firebase), payment providers and email delivery, strictly to the extent needed to provide the service.
• Competent authorities — where required by law upon an official request.

5. Cookies and similar technologies

The Platform uses cookies and localStorage to keep you signed in, remember your language and appearance preferences, and collect usage statistics. You may restrict cookies in your browser, but some features may stop working correctly.

6. Retention

We retain data while your account is active and thereafter for the periods required by law (financial records for the statutory retention period). After that, data is deleted or anonymised.

7. Security

We apply organisational and technical safeguards including encryption in transit (HTTPS/TLS), authentication, access control and audit logging.

No method of transmission over the internet is completely secure. In the event of a data breach we will notify affected users and the competent authorities as required by law.

8. Your rights

To exercise these rights, contact info@msdi.mn. We respond within 10 business days of receiving a request.

• Access the personal data we hold about you.
• Have inaccurate or incomplete data corrected.
• Request deletion of your account and personal data.
• Withdraw consent to processing (some services may then be unavailable).
• Opt out of marketing messages.

9. Children's data

The Platform does not knowingly collect data from children under 16. If such data is identified it will be deleted without delay.

10. Changes to this policy

MSDI may amend this policy. Amendments take effect when published on the Platform, and the revision date is shown at the top of this page.

11. Contact

Privacy questions and requests: info@msdi.mn or +976 7777 0016.

Address: Union Building C — 1306, UNESCO Street, 1st Khoroo, Sukhbaatar District, Ulaanbaatar, Mongolia.