Privacy Policy
Last updated: February 2026
1. Data Controller
HireMD (hiremd.app) is the data controller responsible for personal data processed through this platform. For all privacy-related inquiries, contact us at contact@hiremd.app.
2. Data We Collect
We collect and process the following categories of data:
A. Company directory data (public)
Company names, descriptions, website URLs, employee size ranges, services offered, technology stacks, founding year, and city. This data is sourced from the MITP public registry (mitp.md) — a publicly accessible Moldovan government database of registered IT Park companies. This is not personal data as it relates to legal entities, not individuals.
B. Account data
When you create an account or claim a company profile, we collect your email address. We use magic link authentication — we do not store passwords. Authentication tokens are temporary and expire after use.
C. Inquiry / contact form data
When you submit a "Get a Free Quote" form, we collect your name, email address, and message. This data is forwarded to the relevant company and stored temporarily for delivery confirmation.
D. Company submission data
If you manually submit a company profile via our Submit form, we collect the company details you provide along with your contact email for follow-up.
E. Usage & technical data
Standard server logs including IP addresses, browser type, pages visited, and timestamps. Used for security, performance monitoring, and abuse prevention. Not used for advertising or profiling.
3. Legal Basis (GDPR)
For users in the European Economic Area (EEA), we process data under the following legal bases as defined in GDPR Article 6:
- Legitimate interests (Art. 6(1)(f)) — publishing a directory of publicly registered IT companies from a government open registry serves a legitimate commercial interest and is proportionate given the public nature of the data.
- Contract performance (Art. 6(1)(b)) — processing account and profile data to provide the platform services you have requested.
- Consent (Art. 6(1)(a)) — where you have explicitly provided information (inquiry forms, company submissions), your submission constitutes consent to its use for the stated purpose.
- Legal obligation (Art. 6(1)(c)) — where required by applicable law.
4. How We Use Your Data
- Displaying company profiles in the HireMD directory.
- Sending authentication magic links to your email when you sign in.
- Forwarding inquiry form submissions to the relevant company.
- Sending email notifications about your submitted company or profile updates (you may opt out at any time).
- Detecting and preventing abuse, fraud, or unauthorized access.
- Improving platform functionality and user experience.
We do not sell, rent, or broker your personal data to third parties. We do not use your data for advertising or tracking purposes.
5. Third Parties
We use the following sub-processors to operate the platform:
| Provider | Purpose | Location |
|---|---|---|
| Vercel | Hosting & CDN | USA / EU |
| Supabase | Database (PostgreSQL) | EU (Frankfurt) |
| Resend | Transactional email | USA |
| Vercel Blob | Company logo storage | USA / EU |
All sub-processors are contractually bound to process data only as instructed and are GDPR-compliant or covered by Standard Contractual Clauses (SCCs) where applicable.
7. Data Retention
- Account data: Retained for as long as your account is active. Deleted within 30 days of account deletion request.
- Inquiry form data: Retained for 90 days for delivery confirmation, then deleted.
- Server logs: Retained for 30 days for security purposes, then automatically purged.
- Company profile data: Retained indefinitely as part of the directory unless a removal request is submitted by an authorized company representative.
8. Your Rights (GDPR)
If you are located in the EEA or UK, you have the following rights under GDPR:
Right of access: Request a copy of the personal data we hold about you.
Right to rectification: Request correction of inaccurate or incomplete data.
Right to erasure: Request deletion of your personal data ("right to be forgotten").
Right to restriction: Request that we limit how we process your data in certain circumstances.
Right to portability: Receive your data in a structured, machine-readable format.
Right to object: Object to processing based on legitimate interests. We will cease processing unless we have compelling grounds.
Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time.
To exercise any of these rights, contact us at contact@hiremd.app. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.
9. Company Representatives
If your company is listed on HireMD and the profile data is incorrect, outdated, or you wish it removed:
- Claim your profile — sign in, claim the profile, and edit all fields directly. Changes take effect immediately and your profile will receive a "Verified" badge.
- Request removal — email contact@hiremd.app with your company name and proof of authorization. We will remove or correct the profile within 7 business days.
Note that company names and registration data sourced from the public MITP registry are public-domain data published by the Moldovan government. However, we respect the right of any company to request the removal of their profile from our platform.
10. International Transfers
Some of our sub-processors (Vercel, Resend) are based in the United States. Data transfers to the US are covered by Standard Contractual Clauses (SCCs) as approved by the European Commission, ensuring an adequate level of data protection.
Our primary database (Supabase) is hosted in the EU (Frankfurt, Germany), ensuring your core data remains within the EEA.
11. Policy Updates
We may update this Privacy Policy as the platform evolves. We will update the "Last updated" date at the top. For significant changes, we will notify registered users by email.
12. Contact
For any privacy-related questions or requests:
Also see our Terms of Service for full platform usage terms.