Privacy Policy

AI Hiring Board ("we", "us") is operated by [OPERATOR LEGAL NAME], [OPERATOR POSTAL ADDRESS]. This policy explains what personal data the site at https://www.aihiringboard.com collects, why we collect it, who processes it on our behalf, how long we keep it, and how you can get it removed.

We have deliberately kept this short and specific. Every claim below describes what the site actually does rather than a generic template. If something here does not match your experience of the site, write to us and we will correct it.

1. The short version

• There are no user accounts on this site, and no passwords.
• We ask for your email address in exactly one situation: when you choose to sign up for something (job alerts, an employer or data enquiry, a salary submission). Nothing is collected from you silently in a form you did not submit.
• We never receive your job application. Every Apply button sends you directly to the employer's own hiring system, and we do not collect or store CVs.
• Our page analytics record which pages are popular, not who you are. See section 6 for the one cookie involved and how to opt out.
• Your saved jobs stay in your own browser (localStorage). They are never sent to us.

2. What we collect and why

Email addresses you give us

Four places on the site ask for an email address, and each one records why you gave it:

• Job alerts - the subscribe bar at the bottom of the site and the job alert box on hub and search pages. Alongside your email we store the search context you were looking at when you signed up (search term, location, and role category) so that the weekly digest can be filtered to roles like the ones you were browsing.
• Employer and advertising enquiries - we store the email plus the company, role, and use case you enter, so we can reply usefully.
• Data and API enquiries - email plus your stated use case.
• Salary submissions - if you leave an email with a submission, it is stored separately from the submission itself. The salary figures we publish are anonymous and are not linked back to your address.

All of these are stored in one table with your email, the source that identifies which form you used, the preferences described above, and a timestamp. We do not enrich them, buy data about you, or append anything from a third party.

Employer job postings

When an employer buys a listing we store the content of the posting itself: company, job title, description, location, salary range, and the application URL. This is business information published on the site on purpose. The buyer's email address and payment details are collected by Stripe during checkout, not by a form on this site, and card numbers never touch our servers.

Usage measurement in our own database

To know which listings and pages are working, we log a small number of events to our own database: job views, apply clicks, and saves; how far people get through the posting form; and calls to our machine-readable API. Each of those records holds the page or job involved, the company, a broad referral channel, the referring site's hostname, and a two-letter country code supplied by our hosting network. It does not hold your IP address, your email, a persistent identifier for you, or anything that names you.

Your IP address is seen momentarily by our servers to apply a rate limit and stop these endpoints being flooded. It is held in memory for a few seconds and never written to the database. Salary submissions store a one-way hash of the IP address purely to detect duplicate submissions; the original address cannot be recovered from it.

Things that stay in your browser

Saved jobs, the "new since your last visit" marker, and the referral channel we attribute your session to are stored in your browser's own localStorage and sessionStorage. They are not cookies, they are not transmitted to us as identifiers, and clearing your browser storage erases them completely.

3. Legal basis (UK and EU visitors)

• Job alert emails: your consent, under Article 6(1)(a) UK/EU GDPR. You give it by submitting the form, we send only what you signed up for, and you can withdraw it at any time using the unsubscribe link in every email or by writing to us. Withdrawing consent does not affect anything we sent before you withdrew it.
• Employer, advertising, and data enquiries: legitimate interests (Article 6(1)(f)) in responding to a business enquiry you initiated, and where it leads to a purchase, performance of a contract (Article 6(1)(b)).
• Paid job postings: performance of a contract (Article 6(1)(b)), and legal obligation (Article 6(1)(c)) for the tax and accounting records that follow a payment.
• Analytics and abuse prevention: legitimate interests (Article 6(1)(f)) in understanding how the site is used and keeping it available. Where storing or reading information on your device requires consent, see section 6.

4. Who processes your data

We use a small number of service providers. Each acts as a processor on our instructions under its own data processing agreement, and none of them is permitted to use your data for their own marketing.

We do not sell your personal data, and we do not share it with advertising networks or data brokers. There are no advertising or social media tracking scripts on this site.

5. International transfers

We are a small operation and our infrastructure runs primarily in the United States. If you are in the UK, the EEA, or Switzerland, your data is transferred outside your country when it reaches the providers listed above. Those transfers rely on the transfer mechanisms each provider maintains, which in practice means the European Commission and UK standard contractual clauses, supplemented where the provider is certified under the EU-US Data Privacy Framework. Copies of the relevant agreements are available from each provider, and we will point you to the current one on request.

6. Cookies and analytics

This site sets no cookies on ordinary visitors. It has no advertising cookies, no social media pixels, and no cross-site tracking. Only two cookies exist at all, and one of them is never issued to a visitor:

• piqo_visitor - a first-party cookie set by our analytics provider Piqo, containing a random 16-character identifier with no meaning outside our analytics. It lasts one year, is scoped to this site only, and is used to tell a returning visitor from a new one so that visitor counts are not inflated. It is not readable by any other site and is not used for advertising or profiling.
• admin_session - set only when the site operator signs in to the private admin area. It is httpOnly, secure and SameSite=Lax, holds no analytics or profiling data, and is never issued to a visitor browsing the job board.

Our second analytics tool, a self-hosted instance of Umami, sets no cookie at all and stores nothing on your device beyond an optional opt-out flag you set yourself.

How to opt out of analytics

You can block the analytics request with any standard content blocker, or send a Do Not Track signal, which our Umami instance honours. To exclude yourself from Piqo entirely, set piqo_disabled to 1 in this site's localStorage from your browser console; the tracker checks that flag before sending anything. Clearing this site's cookies removes the piqo_visitor cookie, and you will simply be counted as a new visitor next time.

7. How long we keep things

• Job alert subscriptions - until you unsubscribe or ask us to delete them. Unsubscribing deletes the record rather than flagging it.
• Employer, advertising, and data enquiries - kept while the enquiry is live and for a reasonable period afterwards in case you come back, then deleted on request.
• Paid job postings and their payment records - the listing expires from the board after 30 days. The underlying order record is retained for as long as tax and accounting law requires us to keep it, currently [TAX RECORD RETENTION PERIOD].
• Usage events and salary submissions - retained indefinitely, because they contain no personal identifiers and their whole value is the long-run trend.

8. Unsubscribing

Every job alert email carries an unsubscribe link, and the email also supports one-click unsubscribe in mail clients that offer it. The link is deliberately two-step:

• Clicking the link opens a confirmation page and changes nothing yet. This matters, because corporate mail scanners routinely follow every link in an email before you see it, and a one-click link would unsubscribe people who never asked to be.
• Pressing the button on that page completes it. The link carries a signature (an HMAC-SHA256 code derived from your address) that we verify before acting, so nobody can unsubscribe you by guessing a URL with your address in it.
• Unsubscribing deletes your job alert subscription outright. It is scoped to job alerts only, so it will not silently delete an unrelated employer or data enquiry that shares the same address.

If a link ever fails, reply to any email from us or write to hello@aihiringboard.com and we will remove you by hand.

9. Your rights

If you are in the UK or the EEA you have the right to access your data, correct it, have it deleted, restrict or object to how we use it, receive a portable copy, and withdraw consent at any time. Visitors in California and other jurisdictions with comparable laws have equivalent rights, including the right not to be discriminated against for exercising them. We do not sell or share personal information as those laws define it.

To exercise any of these, email hello@aihiringboard.com with "Privacy" in the subject line. Because we hold no accounts, the only thing we can match you on is your email address, so please write from the address the request concerns where you can. We will respond within one month.

You also have the right to complain to a data protection supervisory authority. In the UK that is the Information Commissioner's Office; in the EEA it is the authority in the country where you live or work.

10. Children

This site is aimed at working professionals and is not directed at children. We do not knowingly collect data from anyone under 16. If you believe a child has given us their email address, tell us and we will delete it.

11. Security and breaches

Data is held in a managed database with row-level security enabled on every table, and access to it is limited to the operator. We do not store passwords or payment card details, which removes the two most damaging things a breach could expose. If a breach does occur that is likely to put your rights at risk, we will notify the relevant supervisory authority and affected people as the law requires.

12. Changes to this policy

If we change how we handle data, we will update this page and move the date at the top. Material changes to how we use email addresses will be announced in the job alert digest before they take effect.

13. Contact

Write to hello@aihiringboard.com, or use the routes on our contact page. Postal address: [OPERATOR LEGAL NAME], [OPERATOR POSTAL ADDRESS].

This policy describes our operational practice and is published in good faith. It is not legal advice, and it has not been reviewed by a lawyer. If you rely on this site for anything consequential, take your own advice.

See also our terms of service.