Early access privacy notice

The data controller is MISMATCH LIMITED, 32 Eden Park, Loughrea, Galway, H62 XT99, Ireland, company number 826262. You can reach us about anything in this notice at privacy@mismatchai.com.

• Your email address, which you give us.
• The date and time you signed up, and whether you confirmed it.
• Your IP address and browser user-agent, recorded automatically and used only to stop automated sign-ups.
• How you arrived — the referring site or campaign link.

We do not ask for your name, your CV, or anything about your health, background or personal characteristics at this stage.

Three kinds of email, and nothing else:

• A confirmation, straight away, so we know the address is really yours. If you do not click the link in it, we do not email you again.
• Occasional updates while we build — a handful, not a newsletter.
• One email when early access opens.

We will not send you anything else, and we will never email you on behalf of anyone else.

Signing in to the tracker means we hold whatever you put into it: the companies and roles you applied for, the dates, the stage each one reached, your notes, how interested you are and why, interview details, and any CVs or cover letters you upload.

All of it is yours and visible only to you. We do not have a screen anywhere that shows us your applications, and there is no employer-facing product that could reveal you are looking. You can export everything or delete your account at any time; deleting removes the files themselves rather than hiding them.

If you upload a LinkedIn connections export, it is matched against your applications in your browser and never sent to us— those are other people’s details and we have no business holding them.

When you tell the tracker whether you heard back from an employer, that answer also feeds aggregate figures about how long employers take to reply — the kind of thing that lets us say “most candidates hear back from this company within two weeks”. While the setting Share reply times, see everyone’s is on, your answers count and you can see those figures, from fourteen days after you start sharing.

Only the employer’s email domain is used, and it is combined with a secret value and hashed before it is stored, so the stored record cannot be turned back into a company name by anyone who obtained it. The local part of the address — the bit before the @ — is discarded at the point of capture and never written down. Your name, your email and which company you applied to are not part of it. No figure we publish can be traced back to you.

This is on unless you turn it off. You can switch it off in Settings in one click, and it takes effect immediately. Turning it off stops any future contribution and ends your access to the comparisons; figures already aggregated cannot be unpicked, because there is nothing in them identifying you to unpick.

Pay is different. A salary is information about you, and it stays that way even once the employer’s name is hashed. So sharing pay is a separate setting, Share pay bands, see the ranges, and it is off unless you turn it on.

If you do, we record the employer, role family, seniority, year, a pay band rather than an exact figure, and the benefits you tick. It is never shown against your name, and a range is only shown once it rests on enough people that it cannot point back at anyone. Adding one salary opens the ranges for twelve months. You can delete it, or switch the setting off, at any time.

If you rate an interview — thumbs up or down, how difficult it was, and how responsive the recruiter was — the ratings are combined into figures about the company. We do not publish ratings against any named recruiter or interviewer, and notes you write stay private to you.

• For running the tracker: performance of our contract with you. We cannot give you a tracker without storing what you track.
• For reply-time statistics and interview ratings: our legitimate interest in building a picture of how employers treat candidates that does not exist anywhere today and that candidates plainly benefit from. We have weighed that against your privacy and concluded it is fair because nothing identifying you is kept, and because you can stop it in one click.
• For pay information: your consent, given when you switch pay sharing on. You can withdraw it at any time in Settings, as easily as you gave it, and it takes effect immediately.
• For those emails: your consent, given when you sign up and confirm. You can withdraw it at any time and every email has an unsubscribe link.
• To keep the service free of automated abuse: our legitimate interest in a working service.

• Resend, to send the emails. Your address is stored on their servers in Ireland.
• Vercel and Amazon Web Services, to run the site. Our own data is stored in London.

We do not sell your data, and we do not share it with employers or recruiters. Nobody buys their way onto this list.

Our servers are in London, which is outside the EU. Those transfers rely on the European Commission’s adequacy decision for the United Kingdom, which says UK law protects your data to the same standard as ours. All three companies are American-owned, so their staff can reach the data from the United States when they are supporting us; that is covered by the European Commission’s standard contractual clauses in our contract with each of them.

Until we launch and have invited you, and then for no more than 12 months. If you unsubscribe or ask us to delete you, we remove your details promptly and keep only a note that you asked, so we do not email you again by mistake. If we have not launched within 18 months, we delete the list rather than sit on stale data.

misMATCH is for people aged 18 and over, and we do not knowingly collect information from anyone younger. If you think someone under 18 has an account, tell us at privacy@mismatchai.com and we will delete it.

You can ask us for a copy of your data, correct it, delete it, restrict what we do with it, or object to it. You can withdraw consent at any time — every email has an unsubscribe link, and using it deletes you from the list. We answer within one month and it is free.

If you are unhappy with how we have handled your data you can complain to the Irish Data Protection Commission at dataprotection.ie, our lead supervisory authority, or to the regulator where you live — in the UK the ICO. We would rather you told us first.

We use only what is needed to make the page work and to stop automated sign-ups. We do not use advertising or tracking cookies, so there is no banner to click.

Nothing here is automated in a way that affects you. No profiling, no scoring, no decisions made about you by a computer. When the product launches and matching begins, that changes, and we will explain it properly before it applies to you.