Privacy policy

Who is responsible

The data controller is HyreToday, at Main Street, Newmarket on Fergus, Co Clare, Ireland. For anything in this policy, write to privacy@hyretoday.com.

What we collect

If you create an account:

• Your name, email address and, if you provide it, your phone number.
• Your password, stored only as a hash by our authentication provider — we never see it.
• If you sign in with Google, your name and email address as Google reports them.

If you publish a professional profile, additionally:

• The public content you write: display name, headline, description, trade, years of experience, languages, services and rates.
• Your contact details for clients: public phone, public email, website.
• Your service location — county, town and service radius. If you supply a street address or Eircode, it is stored privately and is never exposed through our public API.
• Photos of your work and certificates you upload. Certificate documents are stored in a private bucket.

If you contact a professional without an account:

• Your name, email address, optional phone number and the message you write. This is passed to the professional you contacted, because that is the point of the form.

What we measure, and how we avoid identifying you

We count profile views and record what people search for. We do not store your IP address. To tell repeat views apart without identifying anyone, we store a one-way hash of your IP address, your browser identification and a salt that changes every day. The hash cannot be reversed, and yesterday's hash cannot be matched to today's.

We also store the domain a visitor arrived from — for example google.com — never the full address or the search terms.

Why we are allowed to do this

• Performance of a contract — running your account, publishing your profile, passing enquiries to you.
• Legitimate interest — keeping the marketplace usable and free of abuse, and understanding which trades and towns people search for so we know where we are missing professionals.
• Legal obligation — keeping payment records for as long as tax law requires.

Who else processes your data

We do not sell personal data. We use these processors, and nothing else:

• Supabase — database, authentication and file storage.
• Vercel — hosting and delivery of the website.
• Stripe — subscription payments. Card details go straight to Stripe and never reach our servers.
• Resend — sending transactional email, such as the notification a professional gets about your enquiry.
• Google — only if you choose to sign in with Google.

What is public

A published professional profile is public by design: it is meant to be found by clients and by search engines. That covers your display name, trade, description, area, rates, photos, certificates and the contact details you marked as public.

Your street address, Eircode, exact coordinates, company registration number and trade registration number are never published, and are not reachable through our public API. A profile kept as a draft is visible only to you.

How long we keep it

• Account and profile data: while your account exists, and for a short grace period after deletion so an accidental deletion can be undone.
• Enquiries sent through the contact form: for as long as the professional needs them to do the work.
• Payment records: as long as Irish tax law requires.
• View and search measurements: these carry no identifier that points back to you, and are kept as aggregate product data.

Your rights

Under GDPR you can ask for a copy of your data, ask us to correct it, ask us to delete it, object to processing based on legitimate interest, or ask for your data in a portable format. Write to privacy@hyretoday.com and we will respond within one month.

If you are not satisfied, you can complain to the Irish Data Protection Commission at dataprotection.ie.

Cookies

We only use cookies that are required to keep you signed in. There is no advertising or analytics tracking on this site. Details on the cookies page.