29 September 2026
This policy explains what personal data Sidehire collects, why, who receives it, how long it is kept and what rights you have. Sidehire is operated by Adgrow sp. z o.o., Białostocka 7 / 30, 03-741 Warszawa, Poland, which is the data controller. Contact: [email protected].
| Category | What it includes |
|---|---|
| Profile and preferences | First name, email address, target role, level, industries, country, city, remote preference, company size, salary expectation, job type, must haves, work authorisation, application history you describe in the quiz. |
| CV and proof | The text of the CV you upload (PDF, DOCX or TXT) or the result line you type. The file itself is parsed and discarded, the extracted text is stored. |
| Emails and replies | Drafts we write for you, the versions you approve, send time, recipient, and the text of replies that arrive through our reply address. |
| Gmail connection | Your Gmail address and the OAuth access and refresh tokens issued by Google for the gmail.send and userinfo.email scopes. |
| Payment | Subscription plan, status, amount and Stripe customer id. Card data is handled by Stripe and never reaches our servers. |
| Technical and advertising | IP address, user agent, language, pages and quiz steps viewed, referrer, and advertising identifiers such as Meta _fbp and _fbc and the X click id. |
| Recipients | Business contact details of hiring managers (name, job title, work email, employer) obtained from public sources and data providers. |
| Purpose | Legal basis (GDPR art. 6) |
|---|---|
| Create your plan, find matching companies, write and send the emails you approve, show replies | Performance of a contract |
| Bill your subscription, handle refunds and disputes, keep accounting records | Performance of a contract and legal obligation |
| Send sign in codes and service messages | Performance of a contract |
| Measure and improve advertising, including sending hashed identifiers to Meta and X | Consent where required by law, otherwise legitimate interest |
| Prevent abuse, protect recipients from spam, secure the service | Legitimate interest |
| Process business contact data of hiring managers so job seekers can contact them about an open role | Legitimate interest of the job seeker and of Adgrow sp. z o.o. |
You can withdraw consent at any time. Withdrawal does not affect processing that already happened.
When you connect Gmail, Sidehire requests exactly two scopes: userinfo.email (to know which address you connected) and gmail.send (to send email on your behalf). Sidehire does not request any scope that reads, modifies or deletes messages, labels, contacts or settings.
How we use the access: only to send the emails you approved inside Sidehire to the recipient shown to you, and follow ups in the same conversation. Nothing is sent without your approval of the first email to that recipient.
Storage: the tokens issued by Google are stored in our database, encrypted in transit and at rest, and are used only by our sending service. They are deleted when you disconnect Gmail or delete your account.
Limited Use: Sidehire's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular we do not sell Google user data, do not use it for advertising, do not use it to build or train generalised AI or machine learning models, and do not let humans read it except with your explicit consent for support, when necessary for security, or when required by law.
Revoking access: disconnect in Profile inside Sidehire, or at myaccount.google.com/permissions.
Every email sent through Sidehire carries a reply address on our domain. When a recipient replies, our email provider receives the message, we record it so follow ups stop and you can see it in the app, and we forward it to your own inbox. You then continue the conversation from your own mailbox.
We use an AI model (Google Gemini) to extract a short profile from your CV and to draft emails. Your CV text and quiz answers are sent to the model provider for that purpose only and are not used to train models.
No decision with legal or similarly significant effect is made about you by automated means. You review every first email before it is sent.
Some providers process data outside the European Economic Area, mainly in the United States. Where that happens we rely on the EU-U.S. Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses.
| Data | Retention |
|---|---|
| Quiz answers without an account | 90 days |
| Account, profile, CV text, emails and replies | While the account is active and 12 months after the subscription ends |
| Gmail tokens | Until you disconnect Gmail or delete the account |
| Billing records | As long as tax and accounting law requires, typically 5 years |
| Sign in codes | 15 minutes, then invalidated |
| Advertising event logs | 24 months |
California residents have the rights to know, delete, correct and to opt out of sale or sharing. We do not sell personal information. We do not discriminate against anyone who exercises a right.
To exercise a right write to [email protected]. We answer within 30 days.
Emails are sent by individual job seekers from their own mailboxes about a role at your company. Your business contact details come from public sources and data providers. To stop receiving emails sent through Sidehire, or to ask what data we hold about you, write to [email protected] and we will suppress your address for all users.
Traffic is encrypted with TLS. The database is not reachable from the browser: only our API can read or write it. Access to production systems is limited to the people who operate the service. No system is perfectly secure; if a breach affects you we will notify you as the law requires.
Sidehire is for people aged 18 and over. We do not knowingly collect data from children.
We post changes on this page and update the date at the top. Material changes are emailed to account holders before they take effect.
Adgrow sp. z o.o., Białostocka 7 / 30, 03-741 Warszawa, Poland. Email: [email protected].