Privacy Policy

Effective October 14, 2026

Poach provides a recruiting platform, a public website at www.poachrecruit.si, and a Chrome extension. This policy explains what information Poach collects, how we use and protect it, when we share it, and the choices available to you. The product is available at poachhq.app.

Recruiting firms decide what candidate, client and business information to put in their Poach workspaces. Poach processes that information to provide the service to those firms. If a firm has entered your information, that firm is generally the first place to direct a request about its records.

Collection

Poach collects the following types of user data:

• Access request and contact details. Information you submit, such as your name, work email, phone number, firm, team size, current system, integration needs, migration requirements and goals. We may also receive the page you used and referral or campaign details.
• Account information. Your name, work email, organization, role, authentication details and session information. Passwords are handled by our authentication provider and are not stored by Poach in recoverable form.
• Workspace records. Information a customer adds, imports or connects, including candidate and client profiles, jobs, resumes, notes, pipeline history, messages, calls, files and other recruiting activity.
• Technical information. IP address, browser and device information, security and diagnostic logs, and essential session storage. If enabled, our cookieless website analytics records page views and events through Plausible.

Chrome extension

When an authorized user signs in and chooses to capture a LinkedIn page, the Poach extension reads the information needed for that recruiting task. This may include a profile URL, name, headline, company, location, About text, visible contact details, company description or website, and job details such as title, description and location. It may also send fields to the user's authorized workspace to check for duplicates. The extension uses LinkedIn host permissions; it does not request access to every website the user visits.

Handling

We use user data to:

• Respond to inquiries, process access requests, create accounts and set up workspaces.
• Provide recruiting, search, communication, integration and support features.
• Show information the extension user chose to capture, check for duplicates, and create or update a record only when the user chooses to save it.
• Send account, access and service messages; prevent abuse; maintain security; and troubleshoot and improve the service.
• Meet legal obligations and protect the rights and safety of users and the service.

Poach offers AI features such as search, summaries and drafting. When a customer uses them, relevant workspace information and instructions may be processed by AI service providers to produce the requested result. We do not use information received through the Chrome extension for personalized advertising, unrelated consumer profiling or credit decisions.

Storage

Access requests and product records are stored in Poach's systems. Records saved from the extension become part of the customer's workspace. The extension also uses chrome.storage.local for information needed by its side panel and signed-in session. The password is not kept in Chrome local storage after authentication.

We use encrypted connections and access controls designed to protect information. We keep information for as long as reasonably needed to provide the service, support customers, maintain business and security records, and meet legal obligations. The period can vary by the type of information and a customer's instructions. Uninstalling the extension removes its local storage from that browser profile, but does not delete records already saved in a Poach workspace.

Sharing

Authorized members of a customer's workspace can access its records according to their permissions. We use service providers for hosting, database storage, authentication, email delivery, analytics when enabled, and AI features when used. These include Supabase, Vercel, Railway, Resend and Plausible where applicable. A customer-enabled integration may receive the information needed for the action the customer requests. We may also disclose information when required by law, to address abuse or security issues, or as part of a business transaction.

Poach does not sell user data or share customer recruiting records with data brokers or advertising platforms. We do not use extension data for personalized advertising, or to determine creditworthiness or eligibility for lending.

Chrome Web Store Limited Use

Poach's use and transfer of information received through the Chrome extension follows the Chrome Web Store User Data Policy, including its Limited Use requirements. Extension data is used for its disclosed recruiting purpose and related authentication, security, reliability and user-requested record actions.

Your choices and requests

You may ask about access, correction or deletion of information you gave directly to Poach. If your information is in a recruiting firm's workspace, contact that firm first; it controls its records and can ask us to assist. You can opt out of optional marketing messages, and extension users can stop page processing by disabling or uninstalling the extension. We may need to verify a request and may keep information where law or legitimate business obligations require it.

Changes to this policy

We may update this policy as Poach changes. We will post a revised effective date here and provide additional notice when required. Changes to extension data practices will be disclosed as required by Chrome Web Store policy and applicable law.

Contact

Poach
Privacy requests: chris.sullivan@poachrecruit.si