Privacy policy

Operator and information

Oronzo LLP operates Todobu. Contact admin@oronzo.io about privacy. We process email and account identifiers, profile and organization information, education, skills, availability, location you enter, applications, messages, interviews, offers, milestones, feedback, support requests, uploaded résumés and organization evidence. Eligibility is self-declared: we retain an age band, not exact age or date of birth. Guardian requests include a guardian email and review record. AWS Cognito manages passwords; employers and colleges do not receive them. Operational services process request and security logs, which can include IP addresses.

Purpose and sharing

We use required information to provide accounts, opportunities and engagements, verify organizations and affiliations, handle support, prevent abuse and meet applicable obligations. Optional email notifications and alumni sharing can be changed in settings. Employers receive applications and résumés when you apply. Approved colleges receive relevant internship and progress records according to affiliation, department permissions and alumni settings. College reporting excludes résumés and private message/dispute text. Staff access depends on membership and permissions. Administrators review organization evidence, support and guardian requests; they do not have a global student directory. Participants see their engagement messages and records.

Providers and international processing

AWS supplies identity, hosting and HTTPS delivery. Cloudflare supplies DNS. Uploaded documents are stored privately with encryption and access controls. AWS SES sends notifications only when enabled. Core storage and identity are configured in AWS India (Mumbai); HTTPS delivery can use global AWS edge locations. Information may be processed outside your country. Contact support about applicable transfer safeguards and privacy rights. Employers and colleges may have independent copies under their own policies.

Retention and choices

Account and engagement information stays while the account is in use, until you delete it or we close it for a documented reason. Deletion blocks access immediately and queues identity, profile, documents and associated platform records for removal. Our operational target is completion within 30 days; failures require review. Organization-owner deletion removes owned opportunities and related applications, so transfer ownership first.

Scheduled maintenance limits security audit records and identity block markers to 365 days. Successful job records and encrypted backups expire after 30 days, retry receipts after seven days and expired sessions are cleaned up. Pending requests, incident evidence or records specifically needed for a legal obligation remain until resolved. Backup restores must reconcile later deletion requests. Employers’ and colleges’ independent copies are governed by their policies.

Edit your profile, control notifications and alumni sharing, export data or request deletion in Help & privacy. Email admin@oronzo.io for access, correction, restriction, objection and other locally available rights. We verify account ownership; never send a password. You can complain to the relevant data-protection authority. The current app does not sell personal information, run advertising trackers or process payments.

Young users and changes

The minimum age is 15. Users aged 15–17 require independently reviewed guardian approval before marketplace actions. Local consent, employment and work-permit rules still apply. Do not upload medical, financial or government-identity information unless support explains a necessary secure verification method. Report underage use or abuse to admin@oronzo.io. Material policy changes receive a new version for acceptance before marketplace actions.