Who looks after your information
Midora is a brand of Daamu Labs FZE, a Free Zone Establishment registered in Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates (Licence No. 4432854.01, Registration No. 4432854), which provides international healthcare recruitment support. Contact us at contact@midora.life. Registered office: Business Centre, Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates.
What we collect and why
When you apply, we collect your contact details, profession, preferred destination, career experience and any career summary you choose to provide. We use these to respond, assess relevant opportunities and support your recruitment journey. Please do not submit patient data, health records, identity documents or other unnecessary sensitive information through the initial form or chat.
Optional employer payments
Employer invoices may offer bank transfer, PayPal or Lean when the selected provider is enabled. Online payments share invoice identifiers, amount and currency with the chosen payment provider. Lean bank setup requires your explicit authorisation before sharing your employer trade licence number. Bank credentials are entered with your bank or the payment provider, never in Midora's forms. Midora retains encrypted invoice and payment references for accounting and verification. Provider privacy terms apply to their own services; Lean's payment-history consent controls remain available in your employer workspace.
Your choices and the basis for processing
Processing an application may be necessary to take steps at your request before providing our recruitment service. Operational security and limited service administration may rely on legitimate interests following assessment. Optional talent-pool participation requires separate consent, which you may withdraw without affecting your active application.
AI assistance and human decisions
AI tools may help organise career information, draft responses and suggest matches. Recruiters review recommendations. We do not use AI to make final hiring decisions or automatically reject applicants. General licensing guidance must be checked against current regulator requirements.
Standalone CV review
PDF, DOCX and TXT files are read in your browser. After you consent, the extracted text is sent securely to the Midora API for a temporary document review. The file and review are not saved to our candidate database. Optional AI narrative uses the extracted score evidence, not the raw CV. Submit a separate application if you want recruiter follow-up.
Application CVs and progress tracking
Application CV imports are read in your browser. The extracted text, rather than the original file, is included in your application and visible to authorised recruiters. Saved checklist answers, recruiter verification and progress history support your application; they are not a registration or hiring decision.
Lead enquiries, call notes and verification requests
Recruiters may record business enquiries and candidate leads with source and permission details. Candidate sourcing requires recorded opt-in. Recruiters can save call outcomes and, with the required permission, conversation notes. Automated calling and paid candidate databases are currently inactive. Credential-check requests only register your interest in a recruiter discussion; no documents are sent to a verification provider and no paid check is ordered.
Optional inbound voice service
When activated, Midora Life’s agent identifies itself as an automated service and asks permission before speech transcription. The phone provider processes call audio and speech transcription; short, contact-redacted questions may be processed by our AI provider to answer general recruitment enquiries. Midora does not record calls or retain their transcripts in this integration. Provider logs and retention settings require review before activation. Use our contact form instead if you prefer a recruiter. Do not share medical, identity or CV details on this service.
Who can receive information
Access is limited to authorised recruiters and contracted service providers. We seek your permission before sharing your CV with a prospective employer. The website is served by Vercel. Our application API runs on Hostinger in Germany, and our candidate database and sign-in service use Supabase in Frankfurt, Germany. Resend handles sign-in email through its Ireland region. OpenAI provides the optional AI assistance. Public vacancies are created and maintained by authorised Midora recruiters.
International processing
Our primary candidate database is hosted in Frankfurt, Germany. Our website delivery network and AI providers may process information outside the European Union; EU-only processing has not been configured for AI requests. Access by staff or processors elsewhere may still constitute an international transfer. Applicable contractual safeguards and transfer assessments must be completed before cross-border processing begins. EU hosting alone does not guarantee GDPR compliance.
Optional website voice reception
Voice reception starts only after you agree to audio processing and choose Start conversation. Your microphone audio and transcriptions are processed by ElevenLabs and its configured Google Gemini model to answer general recruitment enquiries. Please do not share CVs, patient or medical information, identity documents, passwords or bank details in a voice conversation. Use the secure application portal for CVs.
The reception agent is configured with recording disabled and ElevenLabs Zero Retention Mode for conversation content. Operational and billing metadata may still be retained by service providers under their policies. Our website does not save voice recordings or conversation transcripts to the candidate database. Live captions remain only in the open voice panel. You can mute, end or close the conversation at any time, and use text or contact a recruiter instead. These providers may process data outside your country; EU-only processing is not configured for website voice reception. Questions about processing or your data rights: contact@midora.life.
Optional live video avatar
Video calls with Amara are available only to signed-in Midora employers, from the employer workspace; Midora staff may use them for testing. To answer questions about the employer’s own account, the call uses a read-only summary of that account: posting titles; counts of candidates shared, shortlisted, interviewed, offered and hired; invoices with amounts, dates and payment status; spending totals; and upcoming meeting times. The summary contains no candidate personal data such as names, contact details or CVs. It is sent with the call to ElevenLabs and its model provider, in the same way as spoken questions. After you consent and start a video call or sample answer, synthesized host speech is sent to Spatius in its US West region to animate the avatar in sync with the voice. Your camera is not used. Spatius does not receive your microphone audio through this integration. The sample answer uses a synthetic text question and never requests a microphone. Spoken answers may reflect information you share, so keep sensitive details out of the conversation. Spatius processes operational and session metadata under its own policies. Ending or closing the panel disconnects the avatar; website daily limits help control usage.
How long information is retained
Saved jobs and notification preferences expire after 180 days and are included in your export and erasure controls. Email or WhatsApp alert preferences do not authorise candidate sharing or recruitment decisions. When enabled, optional job alerts and interview reminders are sent through Resend (email) or Twilio (WhatsApp approved templates). Notification request history is retained for up to 90 days and removed with your preferences on erasure. Provider acceptance does not confirm delivery. Turn off either channel in your portal; contact us to withdraw consent or report an unwanted message.
Closed applications are scheduled for deletion after six months, subject to any separately consented talent-pool period. Optional talent-pool consent expires after twelve months. Active applications are flagged for recruiter retention review instead of silently extended. You can export or request deletion of your application data in the candidate portal. Encrypted daily application backups are retained for approximately fourteen days; deleted data can remain in those restricted backups until they expire. Any longer statutory retention needs a documented purpose and notice.
Lead records and their call history expire after 180 days. A limited keyed contact hash is retained to honour do-not-contact requests and prevent accidental re-import; it is not used for marketing. Benchmark history and credential-check requests are removed with the related application. Export and deletion tools include lead records linked to your verified email.
UK GDPR / EU GDPR: your CV rights
Depending on the law applicable to you, you may ask to access, correct, erase, restrict or receive a copy of your information, or object to processing. You can withdraw optional consent and request human review. Email contact@midora.life. You may also complain to your relevant data protection authority.
Cookies and security
The public site does not require advertising trackers. Signed-in portals use necessary session storage. We use HTTPS, role-based access and audit controls; access to applicant information is restricted. Any future non-essential analytics will require the appropriate consent controls.
Business contact details updated 18 October 2026. Legal terms remain subject to final review.