Sidedoor is a service run by Boring Labs Pty Ltd (ABN 20 694 231 448), Victoria, Australia ("we", "us"). It helps job seekers and contractors find roles and the recruiters hiring for them, from information recruiters publish on LinkedIn.
This policy explains what personal information we handle, why, and your choices. The Privacy Act 1988 (Cth) applies to us, and we follow its Australian Privacy Principles. If you're in New Zealand, the UK, the EU or the United States, the sections for you are near the end.
Effective: 12 October 2026; updated 26 October 2026. Contact: hello@sidedoor.ing.
1. Two groups of people
- Users: people who use Sidedoor, whether we invited them or they signed up themselves.
- People in our directory: recruiters and others who have published job posts or listings on LinkedIn, and people we suggest as likely hiring managers for a job. If that's you, see section 4 and our Are you listed? page.
2. Information about users
| What | Why |
|---|---|
| Your name, email address and, if you sign in with Google, your Google profile picture | To create your account and sign you in |
| If you request access: your name, email address and, if you tell us, how you heard about Sidedoor | To decide on and send your invite, and to learn where people find us |
| Your profile: your current or target role, years of experience, highest qualification and work type, and, if you choose to give them, your pay expectation and LinkedIn profile link. If you gave us other details before 25 October 2026 (work mode, location, openness to relocating, certifications or skills, work rights, availability), we keep them with your profile until you ask us to delete them. | To tailor your job search, and to understand who uses Sidedoor |
| Your searches, filters, saved and hidden jobs, job lookups, and the example jobs and "not for me" feedback you give | To run the service for you and improve its results |
| Your pack (which one, when it started and ends), your credits, and which paid actions you ran, when, and what they cost us | To apply your pack's limits and keep the service affordable |
| If you buy a pack: what you bought, the amount, currency and date, your billing country, and whether it was refunded or disputed. Your card details go straight to Stripe, our payment provider; we never see or store them. | To give you what you paid for, handle refunds and disputes, and keep the tax and accounting records the law requires |
| Fair-use records: the email address each free pack was given to (in a standard form, so variants of the same mailbox count as one), a random identifier for your browser (a cookie), a scrambled (hashed) form of your network address, and the outcome of the sign-up checks (see our fair use page) | To give each person one free pack, stop abuse of the free tier, and keep the service running for everyone |
| What you send with Give feedback: your message and, for problem and data reports, the page you were on, your browser and screen size, your last few pages and clicks in the app (by label, never what you typed), errors your browser showed, and any of your background jobs that failed recently | To understand and fix what you report |
| What you ask in Ask (the help chat): your questions, the answers, the page you were on, and whether you sent them on to us. Ask answers from our user guide only; it can't see your account. Your questions and recent chat go to an AI model (Anthropic, or OpenRouter as a backup) to write the answer | To answer you, and to see what the guide and the app don't explain well |
| Which check-in emails we've sent you and when, and whether you've unsubscribed from them | To send each one once, and never after you unsubscribe |
| If you book a call with us: your name and email (filled in for you), the time you pick and anything you write in the booking form, through Cal.com; and which Book a call link you clicked in the app | To hold the call, and to learn which links help |
| Sign-in records and technical logs (IP address, browser, times) | Security, and to fix problems |
Cookies. We use only cookies we need: to keep you signed in; a random browser identifier for the fair-use limits (sd-device); and small preference cookies that remember your theme, whether the sidebar is folded, the full-width table, and whether you've closed the Get started and How your search works cards. If you start a search or paste a job link on our home page, a short-lived cookie (sd-handoff, 15 minutes) carries it through sign-in so we can open it for you. When sign-in or request access shows a quick "are you a person?" check (Cloudflare Turnstile), Cloudflare reads basic signals from your browser to tell people from bots. On our website (sidedoor.ing) we also use Google Analytics, which sets analytics cookies (_ga and _ga_…, kept up to 2 years) to count visits and see which pages and buttons people use. We don't use these in the app, we don't use advertising cookies, we've turned off Google's advertising features, and we don't sell your information. Visitors from the EU, the UK and Switzerland aren't given these cookies. You can block cookies in your browser or use Google's opt-out add-on (tools.google.com/dlpage/gaoptout).
Analytics. We count visits to our website and app with Vercel Web Analytics, which doesn't use cookies or store your network address. It records the page you visited (without any search terms or job links you typed), the site that sent you, and your browser, device type and country, and we only see totals. On our website (not the app) we also use Google Analytics. It records the pages you visit, the site that sent you, the buttons and links you click (such as Request access or Sign in), how far you scroll, and your browser, device and approximate location (worked out from your network address, which Google doesn't store). It never receives what you type into the search box. We keep this data for 14 months. Google handles it under its own terms: policies.google.com/technologies/partner-sites.
3. How we use users' information
To provide and secure Sidedoor, apply your pack's limits and our fair-use rules, take payments and give refunds, answer you, and improve how searches find relevant jobs (your examples and feedback help tune your own searches and, with others' feedback, shared ones). We email you about your account, the beta and your purchases (receipts come from Stripe).
Check-in emails. We tell you about these when you accept the terms. Besides your invite, we send at most two short emails offering help: one if you haven't signed in two days after we invite you, and one a few days before your pack ends, asking how your search is going. They're based on when you signed in and when your pack ends. If you joined before we started sending them, you get only the second. Every one says who we are and has an unsubscribe link that works straight away, with no sign-in. After you unsubscribe we send no more of them; emails about your account and purchases (sign-in codes, receipts, your pack ending) still go.
Automated decisions about free packs. When you sign up yourself, software decides whether you get a free pack: not if the same person (the same email, in its standard form) has had one, if the sign-up comes from the same browser as an earlier free pack, or if a network has already had several in 30 days, and throwaway email addresses are refused. This only affects whether your account starts with a free pack. If you think we got it wrong, email hello@sidedoor.ing and a person will look at it.
4. Information about people in our directory
What we collect: your name, LinkedIn headline, location, current employer, LinkedIn profile link; posts you published on LinkedIn about jobs; job details we take from them (title, location, rate, contract or permanent); and an email address or phone number only if you published it in one of your own job posts. For suggested hiring managers: name, job title, location and profile link only (never contact details), with a confidence score.
Whose: our directory covers people based in Australia, New Zealand, the United States and other places where we can lawfully list them. We don't list people based in the United Kingdom, the European Union or European Economic Area, Switzerland or Canada: if their public details are collected along the way, we hide them (they aren't shown to anyone or monitored), and they can ask us to delete them.
Where from: public LinkedIn pages, posts and job listings, collected through third-party providers, and public search-engine results. We don't log in to LinkedIn as anyone to collect it. It would be impracticable to collect it from each person directly, which is why we publish this notice and the Are you listed? page.
Why: so job seekers can find roles and the people hiring for them. We show short excerpts (up to 280 characters) of your job posts with a link back to LinkedIn, never your whole post.
Automated processing: software, including AI models, reads posts to pull out job details and to judge whether someone is a recruiter in a field, or likely to be a role's hiring manager. These judgements only decide what appears in Sidedoor; they don't affect your legal rights. They can be wrong: tell us and we'll fix or remove them.
What we don't do: we never message you, never sell or rent your information, and never collect private or non-professional information.
Removal: email hello@sidedoor.ing with your LinkedIn profile link. We remove you within 5 business days and add you to a suppression list so you aren't added again (we keep only what's needed to recognise you on that list).
5. Who we share information with
We don't sell personal information. We use these service providers to run Sidedoor; they process it for us under their terms:
| Provider | What for | Where |
|---|---|---|
| Supabase | Database, sign-in | Australia (Sydney); the company is in the United States |
| Vercel | Hosting the website and app, and counting visits (Web Analytics, cookieless) | United States and global edge locations |
| Resend | Sending sign-in codes and service emails | Japan (Tokyo sending region); the company is in the United States |
| ImprovMX | Forwarding email sent to our address | The company is in the United States |
| Sign-in with Google (when offered); our support inbox; website analytics (Google Analytics, on sidedoor.ing only) | United States and global | |
| Stripe | Taking payments for packs, receipts, refunds and disputes (when buying is open) | Australia (Stripe Payments Australia) and the United States |
| Cloudflare | The "are you a person?" check (Turnstile) on sign-in and request access | United States and global |
| Cal.com | Booking calls with us (only if you book one), with Google Calendar and Google Meet for the invite and the call | The company is in the United States |
| OpenRouter and the AI model hosts it routes to; Anthropic | Reading posts and listings with AI models, and answering questions in Ask | United States |
| Apify and the data providers on it | Collecting public LinkedIn posts, profiles and listings | European Union (Czech Republic) and United States |
| Serper | Search-engine results | United Kingdom (its terms are governed by UK law; servers may be elsewhere) |
Users see directory information (section 4) as part of the service. We may disclose information if the law requires it.
6. Overseas disclosure
Some providers above are outside Australia, mainly in the United States and the European Union (and Japan, where our email is sent from). We choose established providers with reasonable security. AI providers process text only to return results to us, under their own terms, and some may keep it for a limited time.
7. How long we keep it
- Users: while your account exists; deleted within 30 days of closing it (job lookups, examples and feedback included).
- Access requests: until we invite you, or until you ask us to delete your request.
- Payments: 5 years, as Australian tax law requires, even if you close your account.
- Fair use: scrambled network addresses and browser identifiers are removed after 30 days. The standard form of the email address a free pack was given to is kept, even after the account closes, so the same person can't get another; ask us and we'll tell you whether we hold it.
- Give feedback reports: while your account exists, or until we've dealt with them and you ask us to delete them.
- Check-in emails: the record of which ones we sent, and your unsubscribe, while your account exists.
- Ask (help chat): 12 months, or until your account closes if that's sooner.
- Directory: a post's text and link are removed after 12 months; a person with no job post in 12 months is deleted with their contact details; removal on request is immediate (section 4).
- Website analytics: Google Analytics event data is kept for 14 months.
- Job-market statistics: we keep anonymised job information (titles, skills, rates, locations, hiring companies, dates) indefinitely. It contains no names, links, post text or contact details.
8. Security
Data is stored in Australia (Sydney), encrypted in transit, and protected by access controls: browsers can't read the database directly, and account data is separated per account. Card payments are handled entirely by Stripe, which is certified to the card industry's security standard (PCI DSS); card numbers never reach our systems. We keep network addresses only in scrambled (hashed) form. If a data breach is likely to cause serious harm, we'll notify you and the Office of the Australian Information Commissioner (OAIC) as the law requires.
9. Access, correction and complaints
You can ask for the personal information we hold about you, ask us to correct it, or ask us to delete it: email hello@sidedoor.ing. We'll reply within 30 days. If you're unhappy with our response, you can complain to the OAIC (oaic.gov.au).
10. If you're in New Zealand, the UK, the EU or the United States
- New Zealand: you have the same rights to access and correct under the Privacy Act 2020; you can complain to the Privacy Commissioner (privacy.org.nz).
- UK and EU users: we process your account information to provide the service you asked for (contract) and to secure and improve it (legitimate interests). You can access, correct, delete or export it, object to processing, and complain to your data protection authority. We don't list people based in the UK, the EU or EEA in our directory (see section 4).
- United States: we don't sell your personal information or share it for targeted advertising. Wherever you live, you can ask us to access, correct or delete your information, or remove you from the directory, at hello@sidedoor.ing; we won't treat you differently for asking.
11. Changes
We'll post changes here and tell users by email before significant ones take effect.