Privacy Policy

IrishTalents provides employment-permit research and job-search tools for professionals seeking sponsored work in Ireland. For the purposes of the GDPR, IrishTalents is the data controller for the personal data described in this policy.

You can contact us about privacy at [email protected].

Account details. When you create an account we process your email address and authentication credentials. Authentication is handled by our provider, Supabase; we do not store your password ourselves.

Candidate profile. Information you choose to provide, such as your country, occupation, work experience, target role, target locations, your current immigration situation in or outside Ireland, and any CV you upload. It also includes what we derive from that information, such as the official occupation code that matches your job title and profile fields read from your CV (see section 5).

Job tracker content. The roles you save, the employer names and job descriptions attached to them, your stage and next actions, and your private notes. This content is private to your account. We do not sell it, and we do not share it with employers or recruiters.

Payment details. If you purchase a product, our payment processor Stripe collects and processes your card details directly. We never receive or store full card numbers.

Usage and device data. Information about how you use the service, including pages viewed, features used, approximate location derived from your IP address, browser and device type. Our analytics provider PostHog may also record session replays of your interactions with our interface so we can diagnose usability problems.

Support communications. Messages you send us and our replies.

Our sponsorship research is built from official Irish employment-permit records published by the Department of Enterprise, Tourism and Employment (DETE). Those records describe employers, not you. Viewing an employer's permit history does not disclose anything about you to that employer, and we never tell an employer that you researched or tracked them.

• To provide the service. Creating your account, saving your tracked roles, and showing employer permit evidence. Legal basis: performance of a contract.
• To personalise your guidance. Using your stated situation and goal to suggest relevant next steps. Legal basis: performance of a contract.
• To recommend jobs and agencies. Comparing your profile with open roles and with the agencies advertising them, including an AI check of each suggested role (see section 5). Legal basis: performance of a contract.
• To show your profile to recruitment agencies. Letting licensed agencies find candidates for roles in Ireland, as described in section 6. Legal basis: our legitimate interests in connecting candidates with agencies that hire for Ireland. You can object at any time.
• To improve and secure the product. Analytics, session replay, debugging, and preventing abuse. Legal basis: our legitimate interests in operating a reliable service.
• To take payments. Processing purchases and managing entitlements. Legal basis: performance of a contract.
• To send marketing. Only where you have opted in. Legal basis: consent, which you may withdraw at any time.
• To meet legal obligations. For example accounting and tax records. Legal basis: legal obligation.

Some features use AI models on your personal data:

• Reading your CV. When you upload a CV we extract its text and use AI models to suggest the official occupation that matches your job title and to fill profile fields you left empty, such as your education, field of study or English level. We never overwrite what you entered, and you can change anything we filled in from your profile.
• Recommending jobs and agencies. We compare your profile with open roles, and an AI model checks each suggested role against your profile before it reaches your Recommended list.
• Ranking by recruitment agencies. An agency with an IrishTalents workspace can ask an AI model to rank the profiles in its talent pool against one of its own vacancies (see section 6).
• Guidance. Features such as CV feedback, the visa check and suggested next actions generate information automatically.

These outputs are suggestions and information, never decisions. We do not make hiring or immigration decisions, no decision about you is based solely on automated processing, and agency staff decide for themselves whom to contact. The AI models are provided by OpenAI and, through OpenRouter, by other model providers including TypeSafe AI. They process the data on our instructions to return a result.

You can object to this processing, ask for human review of any AI output about you, and contest it, by writing to [email protected]. You remain responsible for verifying anything you rely on.

Licensed recruitment agencies with an IrishTalents workspace can search a talent pool of candidate profiles that include an occupation. Before any reveal, an agency sees a summary without your name or contact details: your occupation and its official code, years of experience, English level, country, city and nationality, whether you need sponsorship, whether you would relocate, your earliest start date, expected salary band, education, field of study and professional registration, whether you can start work in Ireland now based on what you told us, and our own permit-route assessment.

An agency can reveal a profile, which shows your name, email address, LinkedIn profile, CV, bio and skills. From that point the agency uses your data as a separate controller under its own privacy notice. We record which agency revealed your profile and when.

You can object to being shown to agencies at any time by writing to [email protected], and we will remove your profile from agency search. We are also adding a setting in your profile to control this yourself.

You can use the visa check and the CV check without an account. On these checks we may ask for your email address, and giving it is optional. If you give it, we store your email address, what you entered for the check and its result, the version of the notice you saw, and whether you ticked the box to receive marketing emails.

We use your email to send you the result and to follow up about that check. We send marketing emails only if you ticked that box, and you can unsubscribe at any time. We do not share this data with employers or recruitment agencies. Legal basis: our legitimate interests in providing the check you asked for; consent for marketing.

We keep this data until you ask us to delete it, or for 24 months after your last check or contact with us, whichever comes first. To have it deleted, write to [email protected] from the email address you used.

We use the following processors, who act on our instructions:

• Supabase. Authentication and file storage, including the CVs you upload.
• Our hosting provider. Runs the servers and database behind the site.
• PostHog. Product analytics and session replay.
• Stripe. Payment processing.
• OpenAI. AI models used to read CVs and generate guidance.
• OpenRouter. Access to AI models, including models by TypeSafe AI, used to classify occupations, read CVs and check job matches.
• Zoho. Customer relationship management, email delivery (ZeptoMail) and the optional support chat (SalesIQ).
• Resend. Delivery of some product emails.
• Google reCAPTCHA. Protecting sign-up and forms from automated abuse.
• logo.dev. Retrieving public company logos.

Recruitment agencies are not our processors: section 6 explains what they can see and when they become responsible for your data.

We may also disclose data where required by law, to protect our rights or the safety of others, or as part of a merger or acquisition. We do not sell your personal data.

Some of our processors, including our AI and email providers, are located outside the European Economic Area, including in the United States. Where data is transferred outside the EEA, we rely on the European Commission's Standard Contractual Clauses or an applicable adequacy decision to protect it.

We keep your account and candidate data for as long as your account is active. If you delete your account, we delete or anonymise your personal data, except where we must retain records to meet a legal obligation such as tax and accounting. Analytics data is retained in aggregated or pseudonymised form. Data from public checks made without an account is kept as described in section 7.

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased;
• restrict or object to how we process your data;
• receive your data in a portable format;
• withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, contact [email protected]. You also have the right to lodge a complaint with the Irish Data Protection Commission at dataprotection.ie.

Essential cookies keep you signed in and keep the service secure. They are required for the site to work, so they are set without asking. Blocking them through your browser will prevent you from signing in.

Analytics runs on every visit, including before you answer the cookie notice. Our analytics provider PostHog stores an identifier in your browser and records the pages you open, the features you use, and technical details such as browser and device type, so we can measure how the site is used. We do not use it for advertising or profiling, and we do not sell what it collects. Legal basis: our legitimate interests in operating and improving a reliable service. You can object to this processing at any time by writing to [email protected], and you can block or delete these cookies through your browser settings.

Support chat is optional and is set only after you allow it. Where the chat window is available it is provided by Zoho SalesIQ, which sets its own cookies once it runs. Legal basis: consent.

On your first visit we show a cookie notice explaining the above, and you can reopen it at any time using the Cookie preferences link in the site footer. Where an optional purpose is offered there you can accept it, reject it, or choose purpose by purpose. Withdrawing stops further collection by that service; it does not undo processing that already took place while consent was in force.

We use encryption in transit, access controls, and reputable infrastructure providers to protect your data. No online service can be guaranteed completely secure, so we encourage you to use a strong, unique password.

The service is intended for people seeking employment and is not directed at children. We do not knowingly collect personal data from anyone under 16.

We may update this policy as the product evolves. We will change the "last updated" date above, and where changes are significant we will notify you in the product or by email.