Legal
Privacy Policy
Last updated: 2026-08-04 (draft).
What we collect
Your name and email (via LinkedIn sign-in), your LinkedIn profile URL and avatar, your work email domain if you verify it as a job-giver, any referral offers or requests you post, your answers to questionnaires, and any resume you upload.
How we use it
To operate the referral marketplace: showing your offers/requests to other users, letting job-givers review candidate responses, and connecting approved matches through a masked email relay. We don't sell your data or use it for advertising.
Corporate email verification
We only store the domain of your verified work email (e.g. "stripe.com"), not the full address, once verification succeeds. The verification code itself is hashed, never stored in plain text, and expires after 15 minutes.
Contact masking
Once a job-giver approves your response, communication happens through a masked relay address — your real email is never shown to the other party.
Your rights
You can request deletion of your account and associated data at any time. Contact us to do so (this flow isn't self-serve yet — a real deletion endpoint is on the roadmap, tracked in PROGRESS.md).
Data location
Stored on Cloudflare D1 (database) and R2 (file storage), in the APAC region.