Privacy Policy

ReferReady (“we”, “us”, “our”) operates the ReferReady platform. This page informs you of our policies regarding the collection, use, and disclosure of personal data.

Information We Collect

We collect information you provide directly: name, email address, work history, skills, and LinkedIn profile URL. For referrers, we also collect your work email to verify your employer.

How We Use Your Information

We use your information to match job seekers with referrers, facilitate referral introductions, and improve our service. We do not sell your personal data to third parties.

Legal Basis

We process your data to provide the matching service you signed up for (Art. 6(1)(b) GDPR), to operate and secure the platform (Art. 6(1)(f) — legitimate interest), and, where you have given it, based on your consent (Art. 6(1)(a)).

Resumes

If you upload a resume, it is stored in a private storage bucket and shared only with referrers who have matched with you for a specific opening, via time-limited download links. You can replace your resume at any time; it is deleted when your account is deleted.

Service Providers (Sub-processors)

We rely on a small set of processors to run ReferReady: Supabase (database, authentication, file storage), Vercel (hosting), Resend (transactional email), and Creem (payment processing — your payment details are handled by Creem and never touch our servers).

Cookies

We use strictly necessary cookies to keep you signed in. If you arrive through a campaign link, we may store the campaign parameters to understand how you found us.

Retention

We keep your data for as long as your account exists. When your account is deleted, your profile, resume, and referral history are removed; records we must keep for legal reasons (e.g. payment records) are retained for the statutory period.

Your Rights

Under the GDPR you can request access to, correction of, or deletion of your personal data, ask for a portable copy, restrict or object to processing, and withdraw consent at any time. Email support@referready.com and we will act on your request within 30 days. You also have the right to lodge a complaint with a data protection supervisory authority.

Data Security

We use industry-standard security measures to protect your data, including encryption in transit and at rest.

Contact

Questions about this policy? Email us at support@referready.com. The data controller is the operator named in our Imprint.