Summary: Eldorado Node processes candidate data on behalf of corporate clients but never stores candidate documents (CVs, recordings) on our servers. Documents go directly to client-owned Google Drive folders. We only retain evaluation scores, metadata, and business records necessary to operate the service.
1. Who We Are
Eldorado Node ("we", "our", "us") is an AI automation engineering business operated by Eldorado Daniel, based in Abuja, FCT, Nigeria. We operate the HR Intelligence System at hr.eldoradonode.work and related services.
Contact: daniel@eldoradonode.work
2. Data We Process
2.1 Corporate Client Data
When a corporate client registers with us, we collect and store:
- Company name and display name
- Contact email address
- Billing information (processed by Stripe or Paystack — we do not store card details)
- Google Drive folder ID (used to route file uploads to client's own storage)
- API usage metrics (submissions count, quota usage)
- Account settings (brand colour, logo URL, ATS webhook)
2.2 Candidate Evaluation Data
When a corporate client submits a candidate for evaluation, we process:
- CV files and audio recordings — transmitted through our system and uploaded directly to the client's own Google Drive folder. We do not retain copies of these files.
- Candidate name and email — stored in our evaluation records to identify and route communications
- Evaluation scores and metadata — overall score, criteria scores, AI narrative, compliance status, role template, timestamps — stored in our Google Sheets database
- Recruiter notes — behavioural signals submitted by the client's HR team as part of the evaluation
2.3 System Data
- Authentication logs (API key usage, timestamps)
- Error logs (workflow failures, system events)
- Audit trail records (immutable evaluation history for compliance)
3. How We Use Data
- To deliver the HR Intelligence System services to corporate clients
- To generate AI-powered candidate evaluation reports
- To send transactional emails (reports, offer letters, rejection notices, onboarding)
- To enforce usage quotas and manage billing
- To maintain compliance audit trails as required by applicable law
- To improve system performance and reliability
- To comply with legal obligations
4. Data Sovereignty — Candidate Documents
Candidate CVs and interview recordings are never stored on Eldorado Node servers. These files are transmitted through our processing pipeline and uploaded directly to the corporate client's Google Drive folder. The client owns and controls these documents. Eldorado Node does not retain copies, does not have ongoing access to the files after upload, and cannot access them without the client's explicit permission.
This architecture ensures full compliance with data minimisation principles under GDPR Article 5(1)(c), UAE PDPL Article 10, and Nigeria NDPR Section 2.1(c).
5. Legal Bases for Processing
We process personal data under the following legal bases:
- Contract performance — processing necessary to deliver services to corporate clients
- Legitimate interests — system security, fraud prevention, service improvement
- Legal obligation — compliance audit trails, regulatory reporting
- Consent — where obtained from data subjects for specific processing activities
6. Data Sharing
We share data only with the following categories of third parties:
- Google (Drive, Sheets) — for file storage routing and data storage. Google's privacy policy applies.
- Google (Gemini API) — candidate data is transmitted to Gemini 2.5 Flash for AI evaluation. Governed by Google's API Terms of Service.
- Groq — audio data is transmitted for transcription. Governed by Groq's Terms of Service.
- Tavily — candidate names may be used for professional footprint searches. Governed by Tavily's Terms of Service.
- Stripe / Paystack — payment processing. We do not store card details. Their respective privacy policies apply.
- SMTP providers — for email delivery.
We do not sell, rent, or trade personal data to any third party for marketing purposes.
7. International Data Transfers
Our services operate across Nigeria, UAE, UK, and USA. Data may be processed in any country where our service providers maintain infrastructure. When transferring data from the UK or EEA, we rely on appropriate safeguards including standard contractual clauses.
8. Data Retention
- Candidate evaluation records — retained for the duration of the client's subscription plus 12 months
- Audit log records — retained for 7 years for compliance purposes
- Client account data — retained for the duration of the subscription plus 6 months
- Candidate documents (CV, audio) — not retained by us; stored in client's Google Drive under client's retention policy
- Authentication logs — retained for 90 days
9. Security
We implement appropriate technical and organisational measures to protect personal data, including:
- API key authentication for all data submissions
- HTTPS encryption for all data in transit
- Session token authentication for dashboard access
- Rate limiting and brute force protection
- Separate credentials for different system components
- Immutable audit logging
10. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access — request a copy of data we hold about you
- Rectification — request correction of inaccurate data
- Erasure — request deletion of your data (subject to legal retention requirements)
- Portability — receive your data in a machine-readable format
- Objection — object to processing based on legitimate interests
- Restriction — request restriction of processing in certain circumstances
To exercise any right, contact: daniel@eldoradonode.work
11. Cookies
Our marketing website (hr.eldoradonode.work) uses session cookies only for authentication purposes. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. No consent banner is required as we use only strictly necessary cookies.
12. Children's Data
Our services are intended for corporate HR use only. We do not knowingly process data relating to individuals under 18 years of age. If you believe we have inadvertently received data about a minor, please contact us immediately.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be notified to active clients by email at least 14 days before taking effect. Continued use of the service after that date constitutes acceptance of the updated policy.
14. Contact
For privacy inquiries, data subject requests, or complaints:
Eldorado Node
Abuja, FCT, Nigeria
daniel@eldoradonode.work
We will respond to all requests within 30 days.