Privacy policy
Last updated: 13 October 2026
HiredNow AI is run by C.Finehall Ltd, trading as HiredNow AI ("we", "us"), a company registered in England and Wales with company number 12743346 and registered office at 91 Brookscroft Road, London, E17 4JP. We are the controller of the personal data described here. Questions: charlie@hirednowai.com or our contact form.
What we collect
- Account details: your name, email address and password (stored as a secure hash by our authentication provider), or your Google account name and email if you sign in with Google.
- Your search: the job title and place you ask your agent to watch.
- Billing: whether you are on a trial or paying, and when it renews. Card details are taken and held by Stripe; we never see or store your full card number.
- Messages: what you send us through the contact form, with your name and email.
- Email you leave on a job page: your email address, so we can confirm it and send what you asked for. Nothing else is sent until you confirm it.
- How you found us and how far you got in signup: see "Signup steps and campaign links" under Cookies below.
- Technical data: the market you chose (UK or US), stored in a cookie, and standard server logs (IP address, browser, pages requested) kept by our hosting provider for security and troubleshooting.
The job listings on the site are public postings read from employers' own careers pages. They are about jobs and employers, not about you.
Why we use it, and our lawful basis
- To run your account and agent (performance of our contract with you). This includes reading what you type in the job and place boxes, which an AI service (OpenAI) helps us interpret, for example spotting a typo or a nearby town.
- To take payment and manage your subscription (contract; and legal obligation to keep financial records).
- To answer messages and send service emails such as trial reminders and account notices (contract and legitimate interests).
- To keep the service secure and working (legitimate interests).
- To see where people give up during signup, and which links and campaigns bring people who sign up, so we can fix the steps that lose people (legitimate interests).
- To measure our adverts and see how the site is used, only if you accept cookies (consent): see Cookies below.
We do not sell your personal data. We never send Meta or Google Analytics your email address, your search or your matches.
Who we share it with
Only the providers that run the service for us, under contracts that require them to protect it:
| Provider | What for | Where |
|---|---|---|
| Vercel | Hosting the website | Global edge network, United States |
| Neon | Database and sign-in | United States (AWS us-east-2) |
| Stripe | Payments and subscriptions | United States, Ireland |
| Mailgun | Sending email | European Union |
| OpenAI | Interpreting the job title and place you type (the words only, never your name or email) | United States |
| Sign-in, only if you choose "Continue with Google" | United States | |
| Meta (Facebook) | Measuring our adverts, only if you accept cookies | United States, Ireland |
| Google Analytics | Seeing how the site is used, only if you accept cookies | United States, Ireland |
Some of these providers are outside the UK and EEA. Where they are, transfers rely on the UK International Data Transfer Agreement or Addendum, the EU Standard Contractual Clauses, or an adequacy decision such as the UK Extension to the EU-US Data Privacy Framework (the UK-US data bridge). Each provider in the United States is either certified under that framework or has signed the UK Addendum to the EU Standard Contractual Clauses in its data processing agreement with us. Mailgun processes our email in the European Union, which the UK recognises as adequate.
How long we keep it
- Account and search: while your account is open, and deleted within 30 days of you closing it.
- Billing records: 6 years, as UK tax law requires.
- Contact messages: 12 months.
- Email left on a job page: until you unsubscribe, or 12 months if you never confirm it.
- Signup step records and campaign links: 13 months, then deleted or kept only as totals.
- Server logs: as set by our hosting provider, typically a few days to weeks.
Cookies
The site needs three cookies to work: one that keeps you signed in, one that remembers whether you chose the UK or US version, and one that remembers your cookie choice. These are always on.
With your permission only, we also use the Meta Pixel, an advertising cookie from Meta (Facebook). It tells us which of our adverts brought you here and whether you started a free week, so we can spend less on adverts that do not work. Meta receives the pages you visit on this site, your browser and IP address, and three events (viewing the home page, starting signup and starting a free week), sent both from your browser and from our server. Meta may combine this with what it knows about you if you use its services; its own privacy policy covers that. We ask before it loads, and "No thanks" is as easy as "Accept". To change your choice, clear this site's cookies in your browser and you will be asked again.
With the same permission, we use Google Analytics to see how people use the site: which pages they visit, how they arrived and whether they start signup or a free week. Google receives the pages you visit, your browser and an IP address it does not store. Its advertising features are switched off, so this is not used to show you adverts. It sets cookies named _ga and _ga_*, kept for up to two years.
With the same permission, we set our own cookie hn_ft, kept for 90 days. It remembers how you first arrived: the campaign tags in the link (utm_source, utm_medium, utm_campaign, utm_term, utm_content), an advert click ID if the link had one (from Google, Microsoft, Meta, TikTok or LinkedIn), the name of the website you came from, the page you landed on and when. It is set once and never overwritten. If you sign up or leave your email on a job page, this is saved with your account or email so we know which campaigns work. It is not shared with anyone. If you choose "No thanks", it is not set, and one already there is deleted.
Signup steps and campaign links (no cookie)
Our signup page records which of its steps each visitor reaches, without any cookie or anything stored on your device: a random number that exists only while the page is open ties the steps of one visit together, and is forgotten when you leave or reload it. For each visit we record the steps reached and when, the job title and place typed, how many matching roles were shown, whether you are on a phone or a computer, the name of the website you came from, the page you arrived on, and any campaign tags or advert click ID in the link. If the account step shows an error we record its type (for example "password too short"), never what was typed. We never record your name, email address, password or IP address with any of this. If you create an account, the visit is linked to it. When you leave your email on a job page, the campaign tags, advert click ID and website you came from on that visit are saved with it in the same way.
Your rights
Under UK data protection law you can ask to see, correct, delete, restrict or move your data, and object to how we use it. If you are in the US, you may have similar rights under your state's privacy law, including the right to know, delete and correct your data. We do not sell or share personal data for targeted advertising. To use any of these rights, contact us; we will reply within one month.
You can also complain to the UK Information Commissioner's Office (ico.org.uk). We would appreciate the chance to sort it out with you first.
Changes
If we change this policy in a way that matters, we will tell you by email or on the site before it takes effect.