Privacy Policy

Data Controller: BYOUR Platform Ltd., registered in Ireland.

Contact:privacy@byour.co

We act as data controller for all personal data collected through the BYOUR platform. When you use BYOUR, you are entering into a relationship with us — and we take that responsibility seriously.

Under GDPR Article 6, we process your data on the following legal bases:

• Contract performance — processing required to deliver the platform services you signed up for.
• Legal obligation — financial record keeping and tax reporting.
• Legitimate interests — fraud prevention, platform security, and product analytics.
• Consent — for optional communications such as product updates and newsletters. You can withdraw consent at any time.

Your data is used exclusively for the following purposes:

• Creating and managing your account
• Scoring and matching candidates against the requirements of open roles
• Processing subscription payments and placement fees via Stripe
• Sending transactional emails (verification, password reset, payment confirmations)
• Detecting and preventing fraud, abuse, and security threats
• Improving platform functionality through anonymised usage analytics
• Understanding which channels bring people to BYOUR

We do not sell your data. Ever. To anyone.

We share your data only with carefully selected processors under strict data processing agreements:

We do not transfer personal data outside the European Economic Area (EEA) without appropriate safeguards.

We retain your data only for as long as necessary for the stated purposes or as required by law:

• Account data: retained for as long as your account is open. When you confirm a deletion, the data it covers is deleted at that moment, as set out in section 7, apart from the records listed below.
• Payment and billing records: retained for as long as tax and accounting law requires, which is six years in Ireland.
• Usage logs: retained for 90 days, then automatically purged.

What we keep after you delete your account. After your account is deleted, we keep the following, for the reasons given:

• Your email address: kept on our do-not-email list, so that we never send you marketing emails or invitations to join BYOUR Talent again. Nothing else is kept with it.
• Payment and billing records: records of any credits you bought, kept for as long as tax and accounting law requires, which is six years in Ireland.
• Records of the emails we sent you: the address, the type of email and its delivery status. These are deleted automatically after 90 days.
• Backups and stored files: database backups roll over within 7 days, and earlier copies of deleted CVs and photos are removed from storage within 7 days. After that, deleted data no longer exists in them either.

This section explains what cookies and similar technologies are, which ones BYOUR uses on byour.co, why each one is used, how long each one lasts, who receives the information they collect, and how you can accept, refuse or change your mind at any time. It repeats in full the choices offered on the cookie banner, so that the information you were given at the moment you chose is also available here afterwards.

What a cookie is. A cookie is a small text file that a website asks your browser to store on your device. Similar technologies, such as local storage and pixels, store or read information on your device in the same way and for the same purposes. Throughout this section the word "cookies" covers all of them, including the local storage entries we describe below, because what matters is not the technical form but whether information is stored on or read from your device.

The two categories we use. Cookies on byour.co fall into exactly two categories. The first is strictly necessary cookies, which are always set because the site cannot work without them. The second is analytics and marketing cookies, which are set only if you accept them. There is no third category: we do not use advertising networks, we do not sell or share the information these cookies collect with data brokers, and we do not use cookies to build advertising profiles about you.

1. Strictly necessary cookies (always on)

Strictly necessary cookies are set because the service you asked for cannot be provided without them. They are not used for analytics, they are not used for marketing, and they are not shared with anyone outside BYOUR. Under Irish and EU rules these do not require your consent, which is why they are always on and why the cookie banner does not offer to switch them off. They are:

• Session tokens: used to maintain your authenticated session securely, so that you stay signed in as you move between pages and between BYOUR Business and BYOUR Talent. Without this cookie you would be signed out on every page you open. It lasts for the length of your session, and the associated refresh token is kept for up to thirty days when you choose to stay signed in.
• CSRF tokens: used to protect against cross-site request forgery attacks, which is a technique where another site tries to make your browser perform an action on BYOUR while you are signed in. Without this cookie we could not safely accept forms or other actions from you. It lasts for the length of your session.
• Your cookie choice: used to record the answer you gave on the cookie banner, so that you are not asked the same question on every page and so that we have a record of the choice you made. It is stored in your browser's local storage under the name byour_cookie_consent, it is kept for twelve months, and it is never sent to us or to anyone else. If you clear it, the banner will simply ask you again.

2. Analytics and marketing cookies (only with your consent)

These cookies are set only after you choose "Accept All" on the cookie banner, or tick "Analytics and marketing" under "Manage Preferences" and save your choices. If you refuse them, or if you simply never answer the banner, none of the tools described below are loaded at all: the scripts are not downloaded, no request is made to those providers, and no information about your visit leaves your browser. They are:

• Google Analytics: used to understand how the site is used in aggregate, such as which pages are visited, how visitors arrive, which links are followed and how long pages are read, so that we can improve the site. It sets cookies in your browser that distinguish one visitor from another without naming them. The information is processed by Google, who act as our processor for this purpose, and it may be transferred outside the European Economic Area under the safeguards Google publishes. These cookies typically last up to two years, and they are set only with your consent.
• Apollo website visitor tracking: used to identify the company a visit comes from, so that our sales team knows which organisations have shown interest in BYOUR. For visitors located in the United States, Apollo may also identify the individual visitor. It stores an anonymous identifier in your browser's local storage and records which pages you visit on byour.co, and that information is sent to Apollo.io, who act as our processor for this purpose and who may transfer it outside the European Economic Area under the safeguards they publish. Apollo may also load a service from LiveIntent as part of this matching. This is set only with your consent, and if you refuse it nothing from Apollo is loaded.

Our legal basis. Strictly necessary cookies are set because they are essential to provide the service you requested. Analytics and marketing cookies are set on the basis of your consent, which you give freely on the cookie banner, which you are never required to give in order to use byour.co, and which you can withdraw at any time without giving a reason and without any effect on the parts of the site that do not depend on them.

How to accept, refuse or change your mind. The first time you visit byour.co you are shown a cookie banner. Choosing "Accept All" allows the analytics and marketing cookies described above. Choosing "Manage Preferences" lets you decide each optional category separately and save that choice; everything optional starts switched off on that screen, so saving it without changing anything is a refusal. Refusing is exactly as easy as accepting, and we do not ask again for twelve months. To change your answer later, at any time, open "Cookie settings" in the footer of any page: the banner will reappear and whatever you choose then replaces your previous answer. If you withdraw consent while a page is open, the tools already running on that page stop being loaded from your next page view onwards, because a script that has already started cannot be recalled.

Controlling cookies in your browser. Independently of the banner, every major browser lets you block or delete cookies and clear local storage, usually under a settings section called Privacy, Cookies or Site data. You can also browse in a private or incognito window, which discards cookies when the window is closed. Blocking strictly necessary cookies in your browser will stop you being able to sign in, because those cookies are what keeps you signed in. Blocking or clearing analytics and marketing cookies has no effect on any other part of the site.

Questions about cookies. If anything in this section is unclear, or you want to know exactly what has been recorded about your visits, write to us at info@byour.co and we will answer. You also have the rights set out elsewhere in this policy, including the right to access the information we hold about you, the right to have it corrected or deleted, and the right to complain to the Irish Data Protection Commission.