Last updated 26 October 2026
HireGoat ("we", "us") runs HireGoat, a job board for roles abroad with visa sponsorship. This policy explains what personal data we collect, why, and the choices you have.
Account data: your name, email address and a hashed password, or the profile details returned by Google or GitHub if you sign in with them.
Candidate profile (optional): headline, years of experience, skills, current and target countries, visa status, degree recognition and a link to your résumé. This stays private unless you choose to appear in the talent pool.
Employer data: company details and the job postings you publish.
Usage data: when you click Apply we record which job was clicked, the referring page and your approximate country from your network request. We do not record your IP address in that event.
Payments: card payments are handled by Stripe. We receive a customer ID and your subscription or purchase status, never your card number.
To run your account, show you jobs and unlock features you pay for, let employers contact candidates who opt into the talent pool, process payments, prevent abuse, and improve the service. We do not sell personal data.
If you switch on public visibility, your profile (without your email address) is listed in the talent pool. Signed-in employers can then contact you by email. You can switch this off at any time from your profile.
We use service providers that process data on our behalf:
When you click Apply you leave this site and the employer's own privacy policy applies.
We use a strictly necessary cookie to keep you signed in. We do not use advertising cookies.
We keep account data while your account is open. Delete your account, or ask us to, and we remove your personal data, except records we must keep for legal or accounting reasons.
Depending on where you live, including under the EU and UK GDPR, you can ask to access, correct, export or delete your data, object to certain processing, and complain to your data protection authority. Contact us at the contact details published on this website.
Passwords are stored hashed, traffic is encrypted in transit, and access to production data is limited. No system is perfectly secure, so please use a strong, unique password.
The service is not for anyone under 16 and we do not knowingly collect their data.
We will post changes to this policy on this page and update the date above. Questions? Contact the contact details published on this website.
