Hedgy

Hedgy Labs, Inc. Privacy Policy

Last Updated: February 2, 2026

This privacy notice for Hedgy Labs, Inc (doing business as Hedgy) ("Hedgy," "we," "us," or "our"), describes how and why we might collect, store, use, and/or share ("process") your information when you use our services ("Services"), including:

As an Employer/Company: When you subscribe to Hedgy to find, meet, and hire candidates
As a Candidate/Job Seeker: When you use Hedgy to learn about companies and get introduced to them

This policy is governed by the laws of the State of Delaware.

Questions or concerns? Contact us at legal@hedgy.works

1. WHAT INFORMATION DO WE COLLECT?

1.1 Personal Information You Disclose to Us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide when you:

Register on the Services
Express interest in obtaining information about our products and Services
Participate in activities on the Services
Otherwise contact us

Personal Information Provided by You:

The personal information we collect depends on the context of your interactions with us. We may collect:

For All Users:

Names
Email addresses
Phone numbers
Mailing addresses
Usernames and passwords
Contact preferences
Job titles (for candidates and employers)

For Candidates:

Resume/CV
Work history
Educational background
Skills and certifications
Professional affiliations
LinkedIn profile information (if connected)

For Employers:

Company name and information
Job descriptions
Hiring criteria and preferences
Business contact information
Billing and payment information

Sensitive Information: When necessary, with your consent or as otherwise permitted by applicable law, we process:

Financial data (for employers paying subscription fees)
Social security numbers or government identifiers (if provided for employment verification)

Payment Data: We collect data necessary to process payments (subscription fees, etc.), such as your payment instrument number and security code. Payment processing is handled by Stripe. See Stripe’s Privacy Notice: https://stripe.com/privacy

1.2 Information Collected from Third Parties

In Short: We collect publicly available information from third-party sources to track introduction outcomes and verify candidate status.

We collect information about you from publicly available third-party sources, including:

LinkedIn Profile Monitoring: To track whether you have been successfully hired following an introduction, we monitor your publicly available LinkedIn profile, including:

Current employment information (company, title, employment dates)
Work history and timeline
Public profile updates

We access this information automatically to verify your employment status and hiring outcomes. This monitoring helps us determine whether candidate introductions were successful and measure our platform’s effectiveness.

Other Public Information:

Employment records from public databases
Company website information
Professional directories

You can limit or prevent this monitoring by:

Setting your LinkedIn profile to private
Removing your work history from public view
Contacting us at legal@hedgy.works to opt out of employment monitoring

2. HOW DO WE PROCESS YOUR INFORMATION?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.

2.1 General Processing Purposes

We process your personal information for a variety of reasons:

Account Management: To facilitate account creation and authentication, manage user accounts, and keep accounts in working order
Service Delivery: To deliver and facilitate delivery of services you request
Support: To respond to user inquiries and offer support
Communications: To send administrative information, changes to terms and policies, and other relevant information
Feedback: To request feedback and contact you about your use of our Services
Marketing: To send marketing and promotional communications (you can opt out at any time)
Service Protection: To protect our Services, including fraud monitoring and prevention, security audits, and incident response
Improvement: To identify usage trends, evaluate promotional campaigns, and improve our Services, products, marketing, and your experience
Legal Compliance: To comply with legal obligations, respond to legal requests, and exercise, establish, or defend legal rights
Testimonials: To post testimonials that may contain personal information

2.2 Processing Purposes by User Type

FOR CANDIDATES:

Matching you with job opportunities that fit your profile
Facilitating introductions to employers
Monitoring your public LinkedIn profile to track hiring outcomes
Sending you job recommendations and updates
Communicating with you about introductions and opportunities

FOR EMPLOYERS:

Facilitating connections with qualified candidates
Tracking recruitment metrics and analytics
Billing and subscription management
Improving candidate quality and matching algorithms
Compliance with employment laws and record-keeping

3. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In Short: We may share information in specific situations and with specific categories of third parties.

3.1 Vendors, Consultants, and Other Third-Party Service Providers

We may share your data with third-party vendors, service providers, contractors, or agents (“third parties”) who perform services for us or on our behalf. The categories of third parties we may share personal information with include:

Cloud Computing Services:

Amazon Web Services (AWS)

Payment Processors:

Stripe, Inc.

Communication & Collaboration Tools:

Email and communication platforms

Data Analytics Services:

Analytics and tracking tools

Website Hosting Service Providers:

Web hosting and CDN services

Other Service Providers:

Customer support platforms
Error monitoring tools
Database and backup services

3.2 Other Disclosures

We may also share your information: (a) in connection with mergers, acquisitions, or business transfers; (b) with our affiliates and business partners; or (c) when required by law, court order, or government request.

4. COOKIES AND OTHER TRACKING TECHNOLOGIES

We may use cookies and similar tracking technologies to maintain your session, remember preferences, and improve our Services. Most browsers allow you to refuse or manage cookies. To opt out of interest-based advertising, visit: https://www.aboutads.info/choices/

5. HOW LONG DO WE KEEP YOUR INFORMATION?

In Short: We keep your information only as long as necessary for the purposes outlined in this privacy notice.

5.1 Retention by User Type

EMPLOYER CUSTOMERS:

Subscription account data: Duration of subscription + 2 years after termination
Member/Candidate interaction data: 3 years (for legal compliance, hiring records)
Payment records: 7 years (for tax and accounting compliance)

CANDIDATES:

Profile information: During active membership + 1 year after account closure
Application records: 1 year after rejection; 3 years if hired (employment record purposes)
Resume/CV: Until deleted by you or account closes + 1 year
Email communication: 1 year after final interaction

5.2 Backup Data

All deleted data is retained in backup systems for 90 days following deletion for disaster recovery purposes only. These backups are then permanently deleted.

6. HOW DO WE KEEP YOUR INFORMATION SAFE?

In Short: We implement technical and organizational security measures to protect your information, but no system is 100% secure.

6.1 Security Measures

We have implemented appropriate and reasonable technical and organizational security measures designed to protect your information:

SSL/TLS encryption for data in transit
Encryption at rest for sensitive data
Secure password policies and authentication
Regular security audits and penetration testing
Access controls and role-based permissions
Employee privacy training
Vendor security requirements and audits

6.2 Limitations

However, despite our safeguards, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure. We cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information.

Transmission of information to and from our Services is at your own risk. You should only access the Services within a secure environment.

6.3 Data Breach Notification

If Hedgy experiences a data breach affecting your personal information, we will:

(a) Investigate the breach promptly

(b) Notify affected users within seventy-two (72) hours of discovery via:

Email sent to the address associated with your account
Notice posted on our website at https://hedgy.works

(c) Provide information about:

The nature of the breach
What data was compromised
Steps we’re taking to remediate
Your rights and recommended actions

(d) Comply with all regulatory notifications to data protection authorities and regulators as required by law

(e) Maintain cyber liability insurance to cover potential harm to users

For urgent security concerns, contact: legal@hedgy.works

7. DO WE COLLECT INFORMATION FROM MINORS?

In Short: We do not knowingly collect data from or market to children under 18 years of age.

We do not knowingly solicit data from or market to children under 18 years of age. By using the Services, you represent that you are at least 18 years old, or that you are the parent or guardian of such a minor and consent to such minor’s use of the Services.

If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records.

If you become aware of any data we may have collected from children under age 18, please contact us at legal@hedgy.works.

8. WHAT ARE YOUR PRIVACY RIGHTS?

In Short: You may review, change, or terminate your account at any time. Your rights vary depending on your location.

8.1 Right to Withdraw Consent

If we are relying on your consent to process your personal information, you have the right to withdraw your consent at any time. You can withdraw consent by contacting us at legal@hedgy.works.

Note: This will not affect the lawfulness of processing before its withdrawal or any processing conducted in reliance on lawful grounds other than consent.

8.2 Right to Opt Out of Marketing

You can unsubscribe from our marketing and promotional communications at any time by:

Clicking the unsubscribe link in any email
Contacting us at legal@hedgy.works
Updating preferences in your account settings

We may still communicate with you for service-related messages necessary for account administration or non-marketing purposes.

8.3 Account Information

If you would like to review or change the information in your account, or terminate your account, you can contact us at legal@hedgy.works.

Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with investigations, enforce our legal terms, and/or comply with legal requirements.

8.4 Cookies and Similar Technologies

Most web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove cookies and to reject cookies. If you choose to remove cookies or reject cookies, this could affect certain features or services of our Services.

To opt out of interest-based advertising, visit: https://www.aboutads.info/choices/

8.5 GDPR Rights (EU/UK Users)

If you are located in the European Union or United Kingdom, you have the following rights:

Right to Access: Request a copy of your personal data Right to Correction: Correct inaccurate or incomplete information Right to Deletion: Request deletion of your data (“right to be forgotten”) Right to Portability: Receive your data in a structured, machine-readable format Right to Restrict Processing: Request we limit how we use your data Right to Object: Object to certain types of processing Right to Lodge a Complaint: File a complaint with your data protection authority

Data Protection Authorities:

Ireland: Data Protection Commission - https://www.dataprotection.ie/
UK: Information Commissioner’s Office - https://ico.org.uk/
Other EU countries: https://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm

8.6 CCPA Rights (California Residents)

California residents have specific rights under the California Consumer Privacy Act (CCPA), including:

Right to Know: You have the right to know whether we collect and use your personal information, what categories we collect, and the purposes for collection.

Right to Delete: You can request deletion of your personal information, subject to certain exceptions.

Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

Right to Opt Out: You can opt out of the sharing or selling of your personal information.

Right to Correct: You can request correction of inaccurate personal information.

Verification Process: Upon receiving your request, we will verify your identity before fulfilling your request. We may ask for information to match with our records.

9. CALIFORNIA RESIDENT PRIVACY RIGHTS

California residents have the following rights under the California Consumer Privacy Act (CCPA):

Right to Know: Request what personal information we collect, use, and share
Right to Delete: Request deletion of your personal information (subject to exceptions)
Right to Correct: Request correction of inaccurate information
Right to Opt Out: Opt out of the sale or sharing of your information
Right to Non-Discrimination: We will not discriminate for exercising your rights

To Exercise Your Rights: Submit requests via email to legal@hedgy.works with your name, email address, and the specific request (know, delete, correct, or opt-out).

California residents under 18 may also request removal of publicly posted data.

10. DO WE MAKE UPDATES TO THIS NOTICE?

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this privacy notice from time to time. The updated version will be indicated by an updated “Last Updated” date. Material changes will be communicated by:

Prominent posting of notice of such changes on the website
Direct notification via email for significant changes
Banner on the website alerting users to updates

We encourage you to review this privacy notice frequently to stay informed of how we are protecting your information.

11. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this privacy notice, you may contact us by:

Email: legal@hedgy.works

Website: https://hedgy.works

12. HOW CAN YOU REVIEW, UPDATE, OR DELETE DATA WE COLLECT FROM YOU?

Based on the applicable laws of your country or region, you may have the right to:

Request access to the personal information we collect from you
Change or update that information
Delete your personal information

To submit these requests: Email: legal@hedgy.works

Include:

Your full name
Email address
Specific request (access, update, delete)
Any relevant account information