Confidentiality & Privacy
Last updated: 05 July 2026
Before you read on
Nothing here is meant to pressure you. You only ever share what you're comfortable sharing — and if you'd rather keep it minimal, what's already in the public domain (a LinkedIn profile, a public bio, a portfolio or company page) is more than enough to begin. A meaningful referral can start from there, and we'll only ask for more if and when it's genuinely needed.
And if anything on this page doesn't sit right with you, please feel free to stop right there. We would rather you step away than continue with any doubt. Trust is the whole point of what we do — it has to work for you first.
This page explains, in plain English, how we protect the ideas, mandates, candidates, and relationships entrusted to our referral network. Shokai is the independent company and brand that builds this platform; 1-finity operates the referral program on it. Shokai is a company registered in Singapore. Together we decide how the information described below is handled, and we are jointly responsible for honouring the promises on this page.
Wherever you are in the world, we apply the protections in this statement as our baseline.
This is our own statement of practices, not an independent audit or certification. For anything below — including a signed NDA or a formal data request — write to shokai@1-finity.com.
Overview
Shokai connects companies, referrers, and candidates. That only works if every party trusts us with sensitive information — a client's search before it goes public, a candidate's interest before they've told their employer, a referrer's private assessment of someone they'd stake their name on.
We treat that information as confidential by default. We collect only what we need to match people to opportunities, we limit who can see it, and we delete it when it is no longer needed for that purpose. We do not sell it, and we never have.
What we collect
We only collect information that helps us make and manage a referral:
- From referrers — your identity and professional background, the people you refer, and your written assessment or endorsement of them.
- From candidates — your contact details, professional history and CV, and the context of the referral (who referred you and to which role).
- Automatically — basic technical data needed to run and secure the site: device and browser type, IP address, and how you use the platform. See Cookies & analytics below.
We do not ask for special-category data (health, religion, and the like), and we ask that you don't submit it in free-text fields.
How we use it
We use this information to: match people to opportunities and coordinate with the hiring client; operate, secure, and improve the platform; communicate with you about a referral or your account; and meet our legal obligations. We do not use it to build a public profile of you or to market unrelated services.
Where the law requires a legal basis, we rely on your consent, our legitimate interest in operating a referral network, and the performance of a contract with our clients — and, where consent is the basis, you can withdraw it at any time.
AI is great at matching skills to roles — but we trust human judgement to make it happen. Automation only ever assists; a person always makes the final call.
Client confidentiality (NDA-style)
When a hiring client shares a mandate with 1-finity for placement on Shokai, we treat the details of that mandate as confidential business information belonging to the client.
- Masked client names by default. Every role has a "mask client name" setting that is on by default. When on, the client shows publicly as "Confidential client" — the real name is never rendered on public pages or shared with referrers or candidates until the client chooses to reveal it.
- Terms-signed workflow. Mandates carry an internal "terms signed" flag, stored for our own record-keeping and never exposed on any public page.
- Access controls. Job creation, editing, and full-record access are restricted to 1-finity admins. Public visitors only ever see roles marked "open," and only the non-confidential fields on those roles. Internal notes, unpublished roles, and closed searches are never public.
- No sharing outside the mandate. Client mandates and any documents shared with us in a search are not sold, licensed, syndicated, or reused for any other client.
If you or your organisation needs a signed mutual NDA before sharing a mandate, contact shokai@1-finity.com.
Candidate & referrer privacy
Being referred is personal. So is putting your name behind someone. We handle both sides with care.
- Consent first. Referrers should only refer people they have permission to refer, or who they know would welcome the introduction. If you were referred and didn't want to be, tell us and we'll remove your record.
- Purpose-limited use. Candidate information is used to evaluate fit for the role it was submitted to, and to coordinate with the hiring client — nothing else.
- Referrer identity is protected. We do not disclose who referred whom to the wider public. When we share a referrer's endorsement with the hiring client, we do so only in the context of that specific introduction.
Who we share it with — and who we don't
We share information in exactly three situations, and no others:
- The hiring client, for the specific role a candidate was submitted to.
- Trusted service providers who help us run the platform (for example, our cloud host and email provider). They act on our instructions, are bound to protect the data, and may not use it for their own purposes.
- Legal or safety reasons, where we're required by law or need to protect the rights and safety of our users or the platform.
We never sell, rent, or trade your information, and we never share it for third-party advertising.
Cookies & analytics
We use a small number of cookies and similar technologies to keep you signed in, remember your preferences, and understand how the platform is used so we can improve it. You can control cookies through your browser settings; disabling some may affect how the site works.
International data transfers
We operate across multiple regions, so your information may be processed in a country other than your own. Whenever we move data across borders, we do so using recognised legal safeguards, so that it stays protected to the standard described here, wherever it is handled.
How long we keep it
Your data stays with us only for as long as you want it to — never longer. By default, we hold it while the role you were referred for is open, and we delete it the moment you decide it should no longer be with us. You're also welcome to leave it with us so we can refer you to future opportunities — or ask us to remove it at any time. The important thing is that it's you who decides, and never us.
A few records we keep for practical reasons:
- Client mandates — for the duration of the engagement and our record-keeping obligations, then deleted.
- Account information — while your account is active, and for a short period afterwards to meet legal and accounting requirements.
Your rights & choices
You can ask us to:
- access a copy of the information we hold about you,
- correct anything that's wrong,
- delete your record,
- object to or restrict certain uses, and
- withdraw consent where we relied on it.
Email shokai@1-finity.com and we'll respond within 30 days. If you're in a region with a data-protection authority, you also have the right to complain to them — though we'd always prefer the chance to put things right first.
Security
Shokai runs on a modern managed cloud backend. Data is transmitted over encrypted connections and stored in a managed database with row-level access rules that limit each account to the records it is allowed to see. Administrative access to production systems is restricted to the small number of people who need it to operate the platform.
No system is ever "unhackable" — anyone who tells you otherwise is selling something. What we can promise is that we treat confidentiality as a first-class product requirement, not an afterthought, and that if we ever have reason to believe your information has been exposed, we will tell affected users promptly and take the steps the law requires.
Children
Shokai is a professional platform intended for adults. It is not directed at anyone under 18, and we don't knowingly collect their information.
Changes to this statement
As the platform grows, we may update this page. When we make a material change, we'll revise the "Last updated" date above and, where appropriate, let affected users know. Your continued use of Shokai after an update means you accept the revised statement.
Reporting a concern
If you believe your information — or a client's confidential mandate — has been handled in a way that doesn't match this statement, or you've spotted a security issue on the platform, please write to shokai@1-finity.com. We take these reports seriously.