Privacy Policy

Account data. When you sign up, we collect your name, email address, chosen subdomain, and a hashed password. We never store your password in plain text.

Portfolio content. Anything you publish — projects, images, resume, contact details, social links — is stored so we can display it on your portfolio.

Payment data. Billing is handled by Paystack. We receive transaction metadata (subscription status, plan code, last four digits of card, currency) but never your full card number or CVV.

Usage data. Server logs, IP addresses, browser and device type, and basic page-view telemetry, used for security and to improve the product.

• Provide and maintain your portfolio and admin tools.
• Process payments and manage your subscription.
• Send transactional email — verification codes, billing receipts, account notices.
• Detect, prevent, and respond to abuse, fraud, or outages.
• Improve the product through aggregated, non-identifying usage analysis.

We share information only with service providers required to run the platform: Paystack (payments), our hosting and storage providers (infrastructure), and our transactional email provider. These providers process data on our behalf under their own privacy commitments. We do not sell your personal information.

We may disclose information if required by law, to enforce our Terms, or to protect the safety of our users.

We use a small set of cookies for authenticated sessions (NextAuth.js) and to remember your preferences. We do not use third-party advertising cookies.

You can access, correct, or delete most of your data directly from your admin dashboard. To export your portfolio content, request a copy of your account data, or permanently delete your account, contact us at the email below.

We retain your account and portfolio data for as long as your subscription is active. After cancellation, content may remain in our systems for up to 30 days to allow for reactivation, after which it is permanently deleted (except where retention is required for tax, legal, or accounting purposes).

We use industry-standard practices including encrypted storage of sensitive data, hashed passwords, HTTPS for all connections, and principle-of-least-privilege access controls. No system is perfectly secure, and we encourage you to use a strong, unique password.

hiredto.work is not intended for users under the age of 16. We do not knowingly collect data from children. If you believe a child has provided us with personal information, contact us and we will delete it.

We may update this policy from time to time. When we make material changes, we will notify you by email or by posting a notice on the platform. The “Last updated” date above will always reflect the current version.

Questions about this policy or your data? Reach out via the email listed in your admin dashboard or on the hiredto.work marketing site.