Privacy Policy
Last updated: 2026-05-02
HiredOnSite (“we”, “us”, “our”) operates the HiredOnSite job board and application platform (the “Service”). This Privacy Policy explains how we collect, hold, use, and disclose your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
1. Information we collect
We collect the following categories of personal information:
- Account information — your name (given and family name) and email address provided at sign-up.
- Profile information — work history, education, skills, location, preferences, and any other details you choose to add to your profile.
- Resumes and uploaded files — CVs, portfolios, cover letters, and other attachments you upload to apply for roles.
- Application data — the jobs you save or apply for, employer communications, and application status.
- Analytics data — first-party, privacy-respecting analytics collected via our self-hosted Umami instance (page views, referrer, country/region, device type). We do not use third-party advertising trackers.
- Technical data — IP address, browser type, and session cookies necessary to authenticate you and operate the Service.
2. How we use your information
We use your personal information to:
- Create and manage your account and authenticate sessions;
- Match you to relevant job listings and present your application to employers;
- Allow employers to evaluate, contact, and manage applicants;
- Send transactional emails (magic links, application updates, account notices);
- Operate, maintain, secure, and improve the Service;
- Comply with legal obligations.
3. Disclosure
We may disclose your personal information to:
- Employers you apply to (your application materials and profile);
- Service providers who help us operate the Service (Cloudflare for hosting and storage, Resend for transactional email, Stripe for employer billing);
- Law enforcement or regulators where required by law.
Some of our service providers may store data overseas (including in the United States and European Union). We take reasonable steps to ensure those providers handle your information consistently with the APPs.
4. Retention
We retain your personal information for as long as your account is active and for a reasonable period thereafter to comply with our legal obligations, resolve disputes, and enforce our agreements. Specifically:
- Active account data — retained while your account exists;
- Application records — retained for up to 24 months after submission;
- Closed-account data — deleted or de-identified within 90 days of account closure, except where retention is required by law.
5. Your rights under Australian law
Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, you have the right to:
- Access the personal information we hold about you;
- Request correction of inaccurate or out-of-date information;
- Request deletion of your account and associated personal information;
- Make a complaint about how we have handled your personal information — first to us, and if unresolved, to the Office of the Australian Information Commissioner (OAIC).
6. Security
We hold personal information on infrastructure provided by Cloudflare (Workers, D1, R2) with encryption in transit and at rest. We use httpOnly secure cookies for session management. No system is perfectly secure, but we take reasonable steps to protect your information from misuse, interference, loss, and unauthorised access.
7. Cookies
We use a small number of strictly necessary first-party cookies for authentication and session management. Our analytics (Umami) is cookieless.
8. Children
The Service is not directed to individuals under 18. We do not knowingly collect personal information from minors.
9. Changes to this Policy
We may update this Policy from time to time. The “Last updated” date at the top reflects the most recent revision. Material changes will be communicated via email or in-product notice.
10. Contact
For privacy questions, requests, or complaints, contact us at: privacy@hiredon.site.
If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner at www.oaic.gov.au.