Legal
Privacy policy
Last updated 24 October 2026
Who we are
ReferMap decides why and how your personal data is used on this service. To reach us about your data, use the contact page. For a complaint, choose “A complaint” and it goes to our grievance contact.
What we collect
Your sign-in email, a handle you choose, your country and state, and your role on ReferMap. Seekers add a profile and a resume, and can pick target roles. Referrers add the company and city they work in. Messages you send to a referrer or seeker, reports you make, and messages you send us through the contact form are kept too.
We also keep basic technical records so the service works and stays safe: when you sign in, the pages that fail, and a hashed network address used only to limit abuse. We ask for your consent when you sign up and record when you gave it.
How we use it
To run the service: show you jobs near you, match your resume to a role, let a referrer decide on your request, send you the emails about it, keep the service secure, and answer you. We do not sell your data and we do not use your resume to train models.
How referrers stay anonymous
Seekers only ever see a referrer's handle, company, city, team and years at the company. Never a name, photo, personal or work email, or phone number. Where fewer than three referrers share a company and city, the app shows “1-2” instead of an exact number, so a small count cannot point to one person.
Your work email
To verify where you work we email a one-time code to your work address. We keep only a salted hash of the address and of the code, never the address itself, and we do not write either to our logs. A hash of the address stops the same work email from verifying two accounts.
Resumes and documents
We read your resume once, when you upload it, to fill in your profile, and then we throw the file away. We keep only the profile you check and save: skills, work history, education and projects. Before a referrer accepts, they see that profile under your first name and last initial, not your contact details. After they accept a request you sent them, they see the contact details they need to submit you. Hire proof files are kept in private storage, opened only with short lived links, and deleted 30 days after the payout that used them.
Job listings
Job listings come from public job boards and are about companies, not people. We strip email addresses and phone numbers out of job descriptions before keeping them. How we read job boards is on the ReferMapBot page.
Who we share data with
Service providers that run ReferMap for us, who act on our instructions: our hosting provider (Vercel), our database and sign-in provider (Supabase), our email provider (Resend), our background job service (Inngest, which sees event identifiers and no personal details), error monitoring and page statistics. A referrer sees what is described above for a request you send. We share data when the law requires it. We do not sell your data.
Some of these providers process data outside India or your country. We use providers that protect data under written terms.
How long we keep it
Your account data is kept while your account is open. When you delete your account we delete your profile, resume and messages, and keep only what the law or a dispute requires, such as payment records. Messages you send through the contact form are kept for up to 24 months. Sign-in and abuse records are kept for a shorter time.
Your choices
You can export your data and delete your account from settings. Under India's Digital Personal Data Protection Act, the GDPR and California law you may also ask us to correct, limit or erase your data, or withdraw consent. Use the contact page; we answer within 30 days.
Cookies
We use cookies to keep you signed in and to remember your theme and the last city you picked on the map. These are needed for the service to work. We measure page speed and visits without cookies. We also count steps such as how many people finish setting up an account, without cookies and without your name, email or phone. Analytics that follow you across visits only run if you agree.
Children
ReferMap is for people aged 18 and over. We do not knowingly collect data from children.
Changes
If we change this policy in a way that matters, we will update the date above and tell you in the app.