HireCRE

Privacy Policy

Last updated: April 20, 2026

This Privacy Policy explains how HireCRE ("HireCRE," "we," "us," or "our") collects, uses, discloses, and protects information when you use hirecre.com. We aim to collect as little personal data as possible, use it only for purposes you would expect, and never sell your personal information.

Summary

  • We operate a commercial real estate job board and editorial site.
  • We collect basic usage analytics via Google Analytics, and we serve display ads via Google AdSense. Both use cookies.
  • If you create an account, we store your email address and authentication data via Supabase.
  • We do not sell your personal information.
  • You can opt out of personalized ads and analytics at any time — details below.
  • Questions: email hirecre@a26cos.com.

Information we collect

Information you provide

  • Account information. If you create an account, we store your email address and a hashed password via Supabase Auth.
  • Newsletter subscriptions. If you sign up for the newsletter or job alerts, we store the email address you provide and mirror it to our email sending platform (MailerLite / MailerSend) so we can deliver the emails.
  • Saved searches. If you save a job search, we store the search filters you selected, linked to your account.
  • Messages you send us. If you email us, we retain the message for as long as needed to respond and for our records.

Information collected automatically

  • Log data. Like most websites, our hosting infrastructure (Coolify) records basic access logs including IP address, user agent, pages visited, and timestamps.
  • Click events. When you click a job listing on our board, we record that the click happened (job ID, source, and a hashed IP address) so we can measure which roles are most viewed. We do not tie click events to your personal identity.
  • Analytics. Google Analytics tracks aggregate usage: sessions, pages viewed, rough geography, browser, device. See the Ads and Analytics section below for opt-out options.
  • Advertising signals. Google AdSense may set cookies and collect information about your browsing for the purpose of serving and measuring ads.

How we use information

  • To operate the site — authentication, saved searches, newsletter delivery.
  • To understand how the site is used and improve the product — which pages are popular, where users come from, which content needs to be expanded.
  • To display relevant ads via Google AdSense, which helps fund the site.
  • To respond to your inquiries when you email us.
  • To comply with legal obligations and protect our rights and those of our users.

Cookies and similar technologies

We and our service providers use cookies and similar technologies (local storage, pixels) for several purposes:

  • Necessary cookies. Required for authentication and to remember your session.
  • Analytics cookies. Set by Google Analytics to collect aggregate usage data. Identifiers are pseudonymous.
  • Advertising cookies. Set by Google AdSense and its advertising partners to serve and measure ads. These cookies may be used to build a profile of your interests across sites.

You can control cookies through your browser settings (block, delete, limit third-party cookies) and through the individual opt-out controls below.

Ads and Analytics — third parties

Google AdSense

We use Google AdSense to serve display ads. Google, as a third-party vendor, uses cookies to serve ads based on your prior visits to this and other websites. Google's use of advertising cookies enables it and its partners to serve ads based on your visits.

You can opt out of personalized advertising by visiting Google Ads Settings. You may also opt out of many third-party vendors' use of cookies for personalized ads at aboutads.info or youronlinechoices.eu (for EU visitors).

For more on how Google uses data, see how Google uses information from sites or apps that use their services.

Google Analytics

We use Google Analytics to understand aggregate usage. Google Analytics collects information such as your IP address (anonymized where possible), device, browser, and pages visited. You can opt out by installing the Google Analytics Opt-Out Browser Add-on.

Supabase

We use Supabase (Postgres database + Auth) as our backend infrastructure. If you have an account, Supabase stores your email and authentication data on our behalf. See Supabase's privacy policy for how they process data as our processor.

MailerLite / MailerSend

If you sign up for the newsletter or job alerts, we send the email you provided to MailerLite (newsletter list management) and MailerSend (transactional sending). Both operate under their own privacy policies.

Data sharing and disclosure

  • Service providers. We share limited data with vendors that operate the site (Supabase, MailerLite, MailerSend, Google Analytics, Google AdSense, Coolify hosting). They access data only to perform their services for us.
  • Legal compliance. We may disclose information when required by law, subpoena, or court order, or to protect our rights and those of our users.
  • We do not sell your personal information.

Your rights

EU / EEA residents (GDPR)

If you are in the European Union or the European Economic Area, you have rights under the General Data Protection Regulation including: access, rectification, erasure, restriction of processing, data portability, and objection to processing. You may also withdraw consent at any time and lodge a complaint with your local data protection authority.

California residents (CCPA / CPRA)

If you are a California resident, you have rights under the California Consumer Privacy Act and California Privacy Rights Act including: right to know what personal information we collect, right to delete, right to correct, and right to opt out of the sale or sharing of personal information. As stated above, we do not sell your personal information.

How to exercise your rights

To exercise any of these rights, email hirecre@a26cos.com with your request. We will verify your identity (typically by confirming the request from the email address on file) and respond within the timeframe required by applicable law.

Data retention

We retain data only as long as needed for the purposes described above, typically:

  • Account data: for as long as your account is active, plus a short retention period after deletion.
  • Newsletter subscriptions: until you unsubscribe.
  • Click events: aggregate storage; hashed IPs are not tied to an account.
  • Analytics: Google Analytics retention defaults (typically 14 months for user-level data, longer for aggregate).

Security

We take reasonable technical and organizational measures to protect your information — encryption in transit (TLS), hashed passwords via Supabase Auth, row-level security on our database, and restricted access to production credentials. No system is perfectly secure; please use a strong, unique password.

Children

HireCRE is intended for professionals and is not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, email hirecre@a26cos.com and we will delete it.

International transfers

Our infrastructure is located in the United States. If you access HireCRE from outside the US, your information will be transferred to and processed in the US.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected in the "Last updated" date at the top of this page. Continued use of HireCRE after an update constitutes acceptance of the revised policy.

Contact

Questions, rights requests, or privacy concerns: email hirecre@a26cos.com.