HireBox

Privacy Policy

Last updated 3 November 2026

HireBox is a talent pool for AI and ML specialists: candidates join it, and companies hiring for their skills contact them. HireBox Jobs, part of HireBox, helps candidates find open roles at startups and apply to them. This policy explains what personal data we collect, why, who we share it with, and the choices you have.

In this policy, “we” means the team that runs HireBox, which is responsible for your data. For anything about it, write to support@hirebox.pro.

What we collect

  • When you join the waitlist or apply to a position: your email address, your CV, the city you live in (when the form asks for it) and the position you applied to. If you connect our Telegram bot, your Telegram username, first name and chat, so we can message you there.
  • When you create an account: your email address and password (we keep only a secure hash of it), or the email address of your Google account if you sign in with Google.
  • Your candidate profile: what you add to it or what we read from your CV, such as your name, photo, title, location, work preferences, contact details, experience, education, skills and achievements.
  • If you use HireBox Jobs: what you’re looking for (kinds of role, level, cities, pay, industries, whether you need a visa, the experience areas you have and want), the roles you save, hide or apply to and your notes on them, the companies you follow, and the Apply Kits you make.
  • If you use HireBox Jobs for Chrome (our browser extension): it reads the application forms you open on Greenhouse, Lever and Ashby, in your browser, to fill them from your profile. It sends us a form’s address only to find the role in HireBox Jobs, when you open its panel on that form or the job board confirms your application, and then marks the role applied in your list. It doesn’t read other sites or your browsing history.
  • If you hire through HireBox: your organization, its companies and positions, and your team members’ email addresses.
  • Messages between candidates and companies on HireBox.
  • Where you came from: when you arrive through one of our links or ads, the link, its campaign tags and the site that sent you, which we keep with your waitlist application.
  • Public information about companies: job postings from companies’ public job boards, and funding news and public filings (such as SEC Form D), which can name a company’s founders, executives or investors. We keep those names with the company’s funding rounds, and candidates can see them. To have yours removed, write to support@hirebox.pro.
  • Technical data: the cookies and browser storage described below; the IP address of each request, which we use briefly to prevent abuse; and, when something on HireBox fails, an error report with what failed, the page’s address, and your browser and operating system.

How we use it

  • To run HireBox: review waitlist applications, build and show candidate profiles, match candidates with open positions, and carry messages between candidates and companies.
  • To match and assess candidates. We use AI to read CVs, suggest improvements to profiles, draft messages and assess how well a candidate fits a position. These assessments help companies decide whom to contact; contacting someone, and any hiring decision, is up to people.
  • To match you with open roles in HireBox Jobs. We use AI to read your profile into experience areas, turn your profile and each job into numbers (embeddings) to compare them, and rank roles for you. When you ask for an Apply Kit, AI writes a version of your CV, answers and a cover note for that one role from your profile and the posting; you check it before you send anything, and we never apply on your behalf.
  • To email you about your account, such as verifying your address or resetting your password, and to message you on Telegram if you ask us to.
  • While you use HireBox Jobs, to send you a weekly email, and a Telegram message if you connected our bot, with new roles in your search and news from companies you follow. Turn it off on your HireBox Jobs profile, or with the link in each email.
  • To understand which ads and partners bring people to HireBox.
  • To keep HireBox working and secure: to find and fix what fails, and to prevent abuse.

We do this to provide the service you asked for, because of our legitimate interest in running and improving HireBox, and with your consent where we ask for it, such as when you connect Telegram.

Who sees your data

  • Companies on HireBox see the candidate profiles in the pool, unless a candidate hides theirs in Settings, and the messages exchanged with them. When you apply to a position from its page, we send your application, including your CV, to that company.
  • Service providers that process data on our behalf: Railway (hosting, database and file storage, in the EU), Anthropic (the AI features above), Voyage AI (comparing profiles with jobs in HireBox Jobs), Resend (email), Telegram (only if you connect our bot), Google (only if you sign in with Google), Sentry (error reports), and a storage provider that keeps backup copies of our database.
  • Companies whose roles you see in HireBox Jobs don’t see what you do there: your searches, saved roles, notes, Apply Kits and the companies you follow are yours alone. When you apply on a company’s own site, what you send goes to that company under its own privacy policy.

We don’t sell your data or share it with advertisers.

Some of these providers are outside the European Economic Area, for example in the United States. When your data leaves the EEA, we rely on safeguards such as the European Commission’s standard contractual clauses.

How long we keep it

  • Waitlist applications: while the waitlist runs, or until you ask us to delete yours.
  • Accounts, profiles and messages: until the account is deleted.
  • CV files you upload to fill in your profile: 30 days after we read them. Your profile keeps what we took from them.
  • Your HireBox Jobs preferences, saved roles, notes, Apply Kits and follows: until the account is deleted.
  • The browser extension’s sign-in: 90 days, or until you disconnect it.
  • The record of which roles a weekly email named: 180 days.
  • Funding news and filings that led us to no company: 180 days.
  • Backup copies of our database: 30 days.

Cookies and browser storage

  • A cookie that keeps you signed in, set when you sign in, on HireBox and, separately, on HireBox Jobs.
  • Browser storage that remembers, for 30 days, which link or ad brought you to HireBox, so an application can be credited to it.
  • Browser storage that remembers you’ve closed the cookie notice.
  • If you use HireBox Jobs for Chrome, its sign-in and what its panel shows for each tab, in your browser’s storage for extensions.

We don’t use advertising cookies or third-party analytics.

Your rights

You can ask us for a copy of your data, to correct or delete it, to restrict or object to how we use it, or to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time. Write to support@hirebox.pro, and we’ll reply within a month. To delete your account, write from the email address it uses.

You can also complain to your local data protection authority.

Children

HireBox is for people aged 18 and over. We don’t knowingly collect data from children.

Changes

When we change this policy, we update this page and its date. If a change is significant, we’ll also tell you by email or on HireBox.

Contact

For questions about this policy or your data, write to support@hirebox.pro.

Privacy Policy – HireBox