Privacy policy

• Account details — your name, email address and LinkedIn profile URL when you request access, and your email when you sign in.
• Your LinkedIn network — when you press Sync in the Hireco Chrome extension, it reads your own 1st-degree connections from your logged-in LinkedIn session: names, headlines, public profile identifiers, profile picture links and the date you connected. It also reads your own profile's work history and education.
• Company searches — when your AI agent asks who in your network works or worked at a company, the extension runs that search on LinkedIn in your browser and sends us the matching connections' profile identifiers.
• Premium enrichment — if you choose to enrich specific prospects, we fetch their public professional profile (titles, work history, education, location) through a third-party data provider.
• Results you create — maps and CSV exports generated from your searches.
• API keys — we store only a one-way hash of each key, never the key itself.

• Your LinkedIn password or session cookies. The extension works inside your own browser session and never sends your LinkedIn credentials to Hireco.
• Your messages, posts, or anything outside your connections list, your own profile and the searches you ask for.
• Browsing history. The extension only acts on linkedin.com and hireco.help.

Only to provide Hireco to you: to sync and store your network, answer your AI agent's requests over the Hireco MCP server, build your maps and CSV files, send sign-in emails, and keep the service secure. We do not sell your data, use it for advertising, or share your network with other Hireco users.

Enriched public profiles may be cached and reused to answer requests for other members who are connected to the same person, so we don't fetch the same profile twice. Cached profiles are refreshed or discarded after 90 days.

• Supabase — database and authentication (hosted in the EU, Frankfurt).
• Vercel — web hosting and the API.
• Resend — sending sign-in emails.
• Apify — fetching public profiles, only when you use premium enrichment.

Your AI agent (for example Claude) receives the results you ask it for, under that provider's own terms.

• Maps and CSV exports are deleted automatically after 14 days.
• Your synced network stays in your account until you delete it or close your account.
• Cached public profiles are refreshed or deleted after 90 days.

You can stop syncing at any time by removing the extension, and revoke API keys from your dashboard. To get a copy of your data, or to delete your account and everything synced to it, email hello@hireco.help from the address you signed up with. We act on requests within 30 days.

Data is encrypted in transit, access is limited by per-user keys and row-level security, and API keys are stored only as hashes. No system is perfectly secure; tell us at once if you think your key was exposed and we'll revoke it.

We'll update this page when our practices change and note the date at the top. For material changes we'll email you.