Privacy policy

Last updated 23 October 2026

Hirelabs runs hirelabs.io, igamingjobs.io and web3vacancy.com. This policy covers all three sites. It explains what personal data we collect, why, who helps us process it, how long we keep it and what choices you have.

• What we collect
• How we use it
• What hiring teams see
• Analytics, cookies and storage
• Service providers
• How long we keep data
• Your choices and data requests

What we collect

Everyone who visits

• Page address, referring page, browser and device type, and country.
• On the boards, clicks such as apply, search and filter.
• Your IP address reaches our servers and our network provider. Our own board analytics do not store it. They use a visitor code built from the date, your IP address and browser, which changes every day.

Candidates with a profile

• Your CV file (PDF or DOCX) and the text in it.
• Profile details you give or that we read from your CV: name, email, phone or Telegram handle, headline, role, seniority, years of experience, skills, languages, experience, education, links, location, timezone, work type, availability, salary or rate expectations and a short summary.
• Your settings: visibility, job alert frequency, and when you gave consent and to which version of the consent text.
• If you sign in with Telegram: your Telegram id, username, first name and profile photo.

Applicants

• Your application, your CV, your answers to short questions about the role and a copy of your profile at the time you applied.
• A hashed form of your IP address and browser, used against abuse.
• Where an apply form asks you to join the board on Telegram first: your Telegram id, username and whether you joined.

Hiring teams on hirelabs.io

• Your email, or your Telegram id and username when you sign in with Telegram, and the name and company you add.
• The roles and job descriptions you add, your AI searches and their results, chats and Connect taps.
• Your IP address, used for security and rate limits. For searches made before sign-in we keep only a hashed form.

Buyers of job posts and plans

• For a job post: the job details, company name, website and logo, how to apply, your email, your support contact or Telegram handle, plan, amount, payment method and payment reference.
• For a Hirelabs plan: your plan, its status and dates, and your Stripe customer and subscription ids.
• Stripe collects your card details. For Hirelabs plans it also collects your billing address and any VAT or tax ID. OxaPay handles crypto payments. We never receive your full card number.

People who write to us

If you email us, we keep your message and our reply.

How we use it

• Job matching: to send candidates job alerts that fit their profile, and to show hiring teams candidates who fit a role.
• AI reading and ranking: AI reads CVs to fill profiles, writes short profile summaries and scores, ranks profiles against roles, and ranks applications for the person hiring.
• Applications: to pass your application to the person hiring for that job.
• Chats and Connect: to deliver messages between hiring teams and candidates, by email, in the workspace and through the board's Telegram bot.
• Notifications: confirmation and sign-in links, job alerts, chat updates, receipts and account messages.
• Payments: to take payment, publish paid posts and run plans.
• Safety: to prevent abuse, enforce rate limits, and handle reported or paused chats. Our team can read chats to handle reports, abuse and support requests. Our team gets internal alerts, for example about a new application or a reported chat, in a private Telegram group.
• Improving the sites: to understand which pages and features are used.

We do not sell personal data.

What hiring teams see

• Before Connect, a hiring team sees your professional profile: headline, role, skills, experience, location, languages, availability, salary or rate expectations, and a short AI summary of how you fit a role. Names, employers' and schools' names and contact details are not shared at this stage.
• After you both tap Connect, they see your name, contact details, links and CV when there is one.
• Until both tap Connect, messages that include contact details are not delivered.
• When you apply to a job on a board, the person hiring for that job gets your application, CV and answers.
• Hidden profiles are not shown to hiring teams.

Hiring teams may use candidate details only to discuss the role they contacted the candidate about, as set out in our terms.

Analytics, cookies and storage

Analytics

• Google Analytics runs on all three sites. On the boards it counts a page view only after you first scroll, tap, move the pointer or press a key.
• Umami, which we host ourselves and which uses no cookies, runs on both boards with the same rule.
• Yandex Metrica runs on igamingjobs.io. It records clicks and how pages are used, including session replay, and sets its own cookies.
• Our own analytics on the boards and on some hirelabs.io pages record page views and clicks.

Cookies

• Sign-in: one cookie keeps hiring teams signed in to the workspace (90 days). One keeps candidates signed in on the boards (30 days).
• Telegram: one cookie remembers that you confirmed your Telegram account when applying (24 hours). One remembers that you joined the board on Telegram (1 year).
• Analytics: Google Analytics sets its own cookies, and so does Yandex Metrica on igamingjobs.io.

Browser storage

Your browser may keep small items on your device, such as the role you typed on our homepage, a search you started before signing in, short-lived copies of your profile while you edit it, and a code used by our own analytics on hirelabs.io.

Service providers

We use these providers to run the sites. They process data only to provide their service to us.

• Stripe: card payments, receipts and plan billing.
• OxaPay: crypto payments for job posts on the boards.
• Resend: email delivery.
• Telegram: sign-in, board bots, chat messages and notifications.
• AI model providers, reached through OpenRouter: reading CVs and job descriptions, and ranking profiles and applications.
• Google Analytics and Yandex Metrica (igamingjobs.io only): site analytics.
• Umami, hosted on our own servers: site analytics.
• Cloudflare: network delivery and security in front of the sites, and some incoming email.
• Google Fonts: fonts on hirelabs.io pages. Your browser loads them from Google, which sees your IP address.
• Hosting: the servers that run the sites and store data and CV files.

Job posts are marked up so search engines such as Google can list them. That markup carries the job details, not personal data about visitors.

How long we keep data

• Board analytics we collect ourselves are deleted after 90 days.
• Candidate profiles and CVs stay until you delete them.
• Applications: answers, profile copies, scores and hashed IP and browser data are removed after 12 months. Applications that are never confirmed are deleted after 30 days.
• Searches started on the hirelabs.io homepage before sign-in are deleted after 7 days if nobody claims them.
• Hiring team accounts, with their chats and searches, stay while the account is open. When you ask us to delete your account, we delete it.
• Payment and order records are kept as long as we need them for billing and tax.
• Sign-in links expire within 30 minutes.

Your choices and data requests

• Candidates can edit their profile, set it to hidden, change or turn off job alerts, or delete their profile and CV at any time from their account on the board. Every job alert has an unsubscribe link.
• Anyone can ask for a copy of their data, ask us to correct or delete it, or object to how we use it.

Write to [email protected] from the email you use with us, or tell us your Telegram username. We reply within 30 days.

Changes

We will post any update to this policy here with a new date, and tell account holders about significant changes.