MyReferenceHub Privacy Policy
1 Who We Are and Scope
MyReferenceHub is an online website and service where users can build profiles and display professional recommendations. In this Policy, “MyReferenceHub,” “we,” “us,” and “our” refer to that entity.
This Policy applies to personal information processed through the Services and in related communications. It does not apply to information handled by a third party under its own privacy policy, including external websites linked from a profile.
The Services are intended for use in the United States by adults, as the platform is not meant for children under 18. The platform is not designed as an employment background check, consumer reporting, or regulated screening service.
2 Personal Information We Collect
Account and Identity Information
We may collect a profile owner’s name, email address, authentication identifiers, account status, access code information, password reset information, and marketing preference. Authentication credentials are processed through our authentication provider. We do not receive or store a readable copy of a user’s password.
Profile Information
Profile owners may provide a profile name, public URL or slug, headline, biography, headshot, location or region, career level, years of experience, industry, professional function, external links, work samples, credentials, portfolio materials, and other information selected for a profile. Depending on the owner’s settings, some of this information may be public.
Reviewer and Recommendation Information
Reviewers may provide their name, email address, telephone number, title, company, career level, region, industry, professional function, relationship to the profile owner, length of the relationship, rating, recommendation text, one sentence summary, areas of collaboration, professional qualities, favorite project, hidden strengths, and other questionnaire responses.
We also collect a reviewer’s choices about whether MyReferenceHub may display the reviewer’s name, title, company, recommendation text, or other details. A reviewer’s contact information is not made public merely because the reviewer submits a recommendation.
Invitation and Communication Information
When a profile owner requests an invitation, we may process the invited person’s email address or telephone number, the profile owner’s identity, invitation and reminder dates, delivery status, response status, and related message events. Invitation links or tokens are used to connect a submission to the correct profile. They should not be shared publicly.
Public Content and User Content
We collect photographs, recommendations, links, biographies, responses, files, and other content submitted through the Services. Information published on a public profile can be viewed, copied, or shared by anyone who can access that page.
Device Usage and Technical Information
We may automatically receive an Internet Protocol address, browser type, device type, operating system, referring page, pages viewed, dates and times, session and authentication events, error logs, security events, and similar technical information. We may use cookies, local storage, and comparable technologies to keep users signed in, remember settings, secure the Services, and understand service performance.
Support and Feedback
We collect information submitted in support requests, privacy requests, reports, surveys, feedback, and other communications with us.
Payment Information
If paid features are enabled, our payment provider may collect payment card, billing, transaction, tax, and fraud prevention information. MyReferenceHub may receive transaction identifiers, payment status, plan, billing history, and limited billing details, but does not intend to store full payment card numbers.
Information We Ask You Not to Provide
Do not submit Social Security numbers, government identification numbers, financial account credentials, medical information, information about children, trade secrets, confidential employer information, or other sensitive information.
3 Sources of Personal Information
We collect personal information from:
you, when you create an account, build a profile, submit a recommendation, select display permissions, contact us, or otherwise use the Services;
profile owners, when they provide an email address or telephone number so we can send a requested reviewer invitation or reminder;
other users, when they submit content that refers to you;
your browser or device, through logs, cookies, local storage, and similar technologies; and
service providers that support authentication, hosting, storage, communications, security, analytics, payments, and customer support.
If you provide another person’s contact information, you represent that you have a lawful basis to do so and that the information is accurate enough for the requested communication.
4 How We Use Personal Information
We use personal information to:
create and administer accounts, profiles, access codes, and authentication;
send requested reviewer invitations, reminders, account notices, security alerts, and submission notifications;
receive, store, organize, moderate, publish, unpublish, and display recommendations according to profile settings and reviewer permissions;
generate ratings, summaries, themes, charts, word clouds, tags, and other profile insights;
provide downloads, links, and other requested product features;
respond to support, correction, deletion, privacy, and content requests;
detect fraud, misuse, security threats, fake recommendations, and violations of our Terms;
debug, analyze, maintain, and improve the Services;
send marketing communications when permitted and consistent with your choices;
conduct research, analytics, benchmarking, and business planning using aggregated or deidentified information;
process payments and administer paid or promotional access when those features are enabled; and
comply with law, enforce agreements, and establish, exercise, or defend legal claims.
5 Public Profiles and Reviewer Choices
Profile Owner Controls
A profile owner may choose whether the owner’s profile is public and which eligible recommendations to publish, feature, unpublish, or keep private. Public profiles are curated and may not include every recommendation submitted about the profile owner.
Reviewer Display Permissions
Where the submission form provides separate display choices, we use those choices to determine whether a reviewer’s name, title, company, recommendation text, and other details may appear publicly. A profile owner cannot use the Services to override those choices.
Public Information
Public profile information may be indexed by search engines and may remain in search results, browser caches, screenshots, downloads, archives, or copies made by others after it is changed or removed from MyReferenceHub. We cannot control information copied by people or services outside our systems.
Private and Administrative Information
Reviewer email addresses, telephone numbers, unpublished submissions, private comments, access credentials, invitation tokens, security records, and unnecessary consent details are not intended for public display. We may use them for administration, communications, security, legal compliance, and other purposes described in this Policy.
6 How We Disclose Personal Information
At Your Direction or With Your Permission
We disclose profile and recommendation information when a profile owner publishes it and when the reviewer’s applicable display choices permit publication. We may also disclose information when you direct us to share it or consent to a specific disclosure.
Service Providers
We disclose information to vendors that perform services for us, such as hosting, databases, storage, authentication, email delivery, text messaging, security, analytics, customer support, document generation, and payment processing. These providers may process information only for the services they provide to us and subject to their agreements with us.
Current infrastructure may include Supabase for authentication, databases, and storage; Resend for email delivery; and website hosting or code delivery providers.
Legal Compliance Safety and Rights
We may disclose information when we reasonably believe disclosure is required by law, legal process, or a valid government request, or is necessary to protect the rights, property, safety, or security of MyReferenceHub, our users, or others; investigate fraud or misuse; or enforce our agreements.
Business Transactions
We may disclose or transfer information in connection with a financing, merger, acquisition, reorganization, sale of assets, bankruptcy, or similar transaction. Where required, we will provide notice before personal information becomes subject to materially different privacy practices.
Professional Advisers
We may disclose information to lawyers, accountants, insurers, auditors, and other professional advisers when reasonably necessary for their work for us.
Aggregated and Deidentified Information
We may create and disclose aggregated or deidentified information that does not reasonably identify an individual. This may include insights about common professional qualities, functions, industries, career levels, regions, reviewer relationships, product usage, and platform performance. We may use this information for research, benchmarking, product development, business planning, and commercial purposes. We will not attempt to reidentify information we maintain as deidentified except to test safeguards, investigate misuse, or comply with law.
7 Sale Sharing and Targeted Advertising
MyReferenceHub does not sell personal information for money. MyReferenceHub does not use or disclose personal information for cross context behavioral advertising or targeted advertising based on activity across unrelated websites or services. If these practices change, we will update this Policy and provide any notice, consent, and opt-out rights required by law before applying the change.
Publishing information at a user’s direction, using service providers to operate the Services, or disclosing aggregated or deidentified information is not treated as a sale of personal information under this Policy.
8 Cookies and Similar Technologies
We may use cookies, local storage, software development kits, pixels, and similar technologies for authentication, account security, preferences, error detection, service operation, and analytics. Some technologies are necessary for the Services to function.
Browser controls may allow you to block or delete cookies, but doing so may prevent account login or other features from working. Because MyReferenceHub does not currently sell or share personal information for cross-context behavioral advertising, a browser-based opt-out preference signal may not change our current practices. We will recognize such signals where required if our practices change.
9 Artificial Intelligence and Automated Features
The Services may analyze submitted information to create summaries, themes, tags, charts, suggested biographies, ratings, or other derived outputs. Automated outputs may be inaccurate or incomplete and should be reviewed before publication or use.
If MyReferenceHub sends personal information to an external artificial intelligence provider, we will identify the relevant processing in this Policy or an in product notice and apply appropriate contractual and privacy safeguards before doing so.
10 Data Retention
We retain personal information for as long as reasonably necessary to provide the Services, maintain accounts and public profiles, honor reviewer permissions, complete requested communications, protect security, resolve disputes, enforce agreements, and comply with legal obligations.
Retention periods depend on the type of information and why we process it. Account and profile information is generally retained while the account remains active. Invitation and notification records may be retained to manage delivery, prevent misuse, and document communications. Security, transaction, consent, and legal records may be kept longer when needed for fraud prevention, audit, tax, legal, or enforcement purposes.
When information is deleted, it may remain for a limited period in backups or disaster recovery systems and may remain in aggregated or deidentified form. Public information copied by others may remain outside our control.
11 Data Security
We use administrative, technical, and organizational safeguards designed to protect personal information. These may include access controls, authentication, encryption in transit, database and storage permissions, logging, monitoring, and vendor security measures. No system is completely secure, and we cannot guarantee that unauthorized access, loss, misuse, or disclosure will never occur.
Users are responsible for protecting their credentials and invitation links and for notifying us promptly at privacy@myreferencehub.com if they suspect unauthorized access.
12 Your Privacy Choices and Rights
Account and Profile Controls
Profile owners may use available account controls to update profile information, change visibility, publish or unpublish eligible recommendations, and manage certain communications. Reviewers may use available controls or contact us to request correction or removal of their submission, subject to legal, security, and recordkeeping needs.
Marketing Choices
You may opt out of marketing emails by using the unsubscribe link in the message or contacting us. You may still receive transactional messages about an account, invitation, submission, security matter, or legal notice.
Privacy Requests
Depending on where you live and whether a particular law applies to MyReferenceHub, you may have the right to confirm whether we process your personal information; access, correct, delete, or obtain a portable copy of it; opt out of certain sales, sharing, targeted advertising, or profiling; restrict or withdraw consent for certain processing; and appeal a decision on a request.
To submit a request, email privacy@myreferencehub.com with the subject “Privacy Request”. Describe your request and the email address or profile involved. We may take reasonable steps to verify your identity and authority. If you use an authorized agent, we may request evidence of the agent’s authority and may verify your identity directly where permitted.
We will respond within the period required by applicable law. If we deny a request, you may appeal by emailing privacy@myreferencehub.com with the subject “Privacy Appeal.” We will not discriminate against you for exercising an applicable privacy right.
13 State Privacy Disclosures
Texas Residents
If the Texas Data Privacy and Security Act applies to MyReferenceHub and your information, Texas residents may have rights to confirm processing, access, correct, delete, and obtain a portable copy of personal data, and to opt out of sale, targeted advertising, or certain profiling. MyReferenceHub’s current practices do not include selling personal data or using it for targeted advertising. Requests and appeals may be submitted using the methods in Section 12.
Residents of Other States
Residents of California and other states may have additional rights if the applicable state law covers MyReferenceHub. MyReferenceHub may provide a supplemental state notice if required as the business grows, enters new markets, changes its data practices, or meets a law’s coverage threshold.
We do not offer financial incentives in exchange for personal information. If that changes, we will provide the required notice before offering the program.
14 Children and Age Restrictions
The Services are intended only for people who are at least 18 years old. We do not knowingly collect personal information from children under 13. If you believe a child under 13 provided personal information through the Services, contact privacy@myreferencehub.com so we can investigate and take appropriate action.
15 International Use
The Services are currently intended for users in the United States. If you access the Services from another country, your information may be transferred to, stored in, and processed in the United States, where privacy laws may differ. MyReferenceHub should complete a separate legal review before actively offering the Services in another country.
16 Third Party Links and Services
Profiles may contain links to LinkedIn, GitHub, portfolios, scheduling pages, employer websites, social networks, and other third-party services. Their privacy practices are governed by their own policies. MyReferenceHub is not responsible for a third party’s privacy or security practices.
17 Changes to This Policy
We may update this Policy to reflect changes in the Services, our practices, or legal requirements. We will post the revised Policy with a new effective date. If a change materially affects how we use information already collected, we will provide additional notice and obtain consent when required by law. We will not apply a materially broader use to previously collected personal information without the notice or consent required by law.
18 Contact Us
Privacy Email privacy@myreferencehub.com
Support Email support@myreferencehub.com
Effective as of September 24, 2026