Privacy policy
Sidedoor is a service run by Boring Labs Pty Ltd (ABN 20 694 231 448), Victoria, Australia ("we", "us"). It helps job seekers and contractors find roles and the recruiters hiring for them, from information recruiters publish on LinkedIn.
This policy explains what personal information we handle, why, and your choices. We follow the Australian Privacy Principles in the Privacy Act 1988 (Cth). If you're in New Zealand, the UK, the EU or the United States, the sections for you are near the end.
Effective: 12 October 2026; updated 21 October 2026. Contact: hello@sidedoor.ing.
1. Two groups of people
- Users: people we've invited to use Sidedoor.
- People in our directory: recruiters and others who have published job posts or listings on LinkedIn, and people we suggest as likely hiring managers for a job. If that's you, see section 4 and our Are you listed? page.
2. Information about users
| What | Why |
|---|---|
| Your name, email address and, if you sign in with Google, your Google profile picture | To create your account and sign you in |
| Your searches, filters, saved and hidden jobs, job lookups, and the example jobs and "not for me" feedback you give | To run the service for you and improve its results |
| Usage and spend records (which paid actions you ran, when, and what they cost us) | To apply your monthly allowance and keep the service affordable |
| Sign-in records and technical logs (IP address, browser, times) | Security, and to fix problems |
We use only the cookies needed to keep you signed in and to remember your light or dark theme. We don't use advertising or analytics cookies, and we don't sell your information.
3. How we use users' information
To provide and secure Sidedoor, apply usage limits, answer you, and improve how searches find relevant jobs (your examples and feedback help tune your own searches and, with others' feedback, shared ones). We email you only about your account and the beta.
4. Information about people in our directory
What we collect: your name, LinkedIn headline, location, current employer, LinkedIn profile link; posts you published on LinkedIn about jobs; job details we take from them (title, location, rate, contract or permanent); and an email address or phone number only if you published it in one of your own job posts. For suggested hiring managers: name, job title, location and profile link only (never contact details), with a confidence score.
Where from: public LinkedIn pages, posts and job listings, collected through third-party providers, and public search-engine results. We don't log in to LinkedIn as anyone to collect it. It would be impracticable to collect it from each person directly, which is why we publish this notice and the Are you listed? page.
Why: so job seekers can find roles and the people hiring for them. We show short excerpts (up to 280 characters) of your job posts with a link back to LinkedIn, never your whole post.
Automated processing: software, including AI models, reads posts to pull out job details and to judge whether someone is a recruiter in a field, or likely to be a role's hiring manager. These judgements only decide what appears in Sidedoor; they don't affect your legal rights. They can be wrong: tell us and we'll fix or remove them.
What we don't do: we never message you, never sell or rent your information, and never collect private or non-professional information.
Removal: email hello@sidedoor.ing with your LinkedIn profile link. We remove you within 5 business days and add you to a suppression list so you aren't added again (we keep only what's needed to recognise you on that list).
5. Who we share information with
We don't sell personal information. We use these service providers to run Sidedoor; they process it for us under their terms:
| Provider | What for | Where |
|---|---|---|
| Supabase | Database, sign-in | Australia (Sydney); the company is in the United States |
| Vercel | Hosting the app | United States and global edge locations |
| Resend | Sending sign-in codes and service emails | Japan (Tokyo sending region); the company is in the United States |
| ImprovMX | Forwarding email sent to our address | The company is in the United States |
| Sign-in with Google (when offered); our support inbox | United States and global | |
| OpenRouter and the AI model hosts it routes to; Anthropic | Reading posts and listings with AI models | United States |
| Apify and the data providers on it | Collecting public LinkedIn posts, profiles and listings | European Union (Czech Republic) and United States |
| Serper | Search-engine results | United Kingdom (its terms are governed by UK law; servers may be elsewhere) |
Users see directory information (section 4) as part of the service. We may disclose information if the law requires it.
6. Overseas disclosure
Some providers above are outside Australia, mainly in the United States and the European Union (and Japan, where our email is sent from). We choose established providers with reasonable security. AI providers process text only to return results to us, under their own terms, and some may keep it for a limited time.
7. How long we keep it
- Users: while your account exists; deleted within 30 days of closing it (job lookups, examples and feedback included).
- Directory: a post's text and link are removed after 12 months; a person with no job post in 12 months is deleted with their contact details; removal on request is immediate (section 4).
- Job-market statistics: we keep anonymised job information (titles, skills, rates, locations, hiring companies, dates) indefinitely. It contains no names, links, post text or contact details.
8. Security
Data is stored in Australia (Sydney), encrypted in transit, and protected by access controls: browsers can't read the database directly, and account data is separated per account. If a data breach is likely to cause serious harm, we'll notify you and the Office of the Australian Information Commissioner (OAIC) as the law requires.
9. Access, correction and complaints
You can ask for the personal information we hold about you, ask us to correct it, or ask us to delete it: email hello@sidedoor.ing. We'll reply within 30 days. If you're unhappy with our response, you can complain to the OAIC (oaic.gov.au).
10. If you're in New Zealand, the UK, the EU or the United States
- New Zealand: you have the same rights to access and correct under the Privacy Act 2020; you can complain to the Privacy Commissioner (privacy.org.nz).
- UK and EU users: we process your account information to provide the service you asked for (contract) and to secure and improve it (legitimate interests). You can access, correct, delete or export it, object to processing, and complain to your data protection authority. Our directory covers people in Australia, New Zealand and the United States only during the beta.
- United States: we don't sell your personal information or share it for targeted advertising. Wherever you live, you can ask us to access, correct or delete your information, or remove you from the directory, at hello@sidedoor.ing; we won't treat you differently for asking.
11. Changes
We'll post changes here and tell users by email before significant ones take effect.