Privacy Policy

1. Who we are

MiniSourcer is a sourcing and recruiting tool — a small CRM that helps you find, score and organise candidates. The service is operated by Vladyslav Bagniuk, a sole proprietor (FOP) registered in Ukraine under the name “Bagniuk Vladyslav Mykolaevich”. In this policy “we” means that sole proprietorship, and “you” means the person or company using the service. For any question about your data, or to exercise a right, write to hello@minisourcer.com.

2. What we collect

Account data: your email, your name if you provide one, and your workspace (organisation) name. Your password is stored only as a salted hash — we never see it in plain text.

Usage data: the projects you create, the candidates you source and save, notes, message templates, and how many credits each action uses. This is how the product works for you.

Candidate data: when you run a search, we fetch publicly available professional profiles (for example from LinkedIn through a data provider) and store the profile fields you see in the app — name, headline, location, skills, links and the AI score. This data belongs to your workspace.

Waitlist data: if you join the waitlist, we store your email, the language you used, and basic campaign parameters (UTM tags, referrer, page URL, user agent) so we can send you product news.

Technical data: your browser keeps a sign-in token and your theme/language choice in local storage. We do not use advertising cookies or third-party analytics trackers.

3. Why we use it

To provide the service: run your searches, score candidates with AI, keep your pipeline and show your dashboards.

To manage your account, plan and credits, and to prevent abuse.

To email you about the product and your account. You can unsubscribe from non-essential email at any time.

To meet legal obligations — for example, keeping records of data-request handling.

To protect the sign-up and sign-in forms from bots and abuse, using a bot-protection check described under sharing below.

4. Legal bases

Where the GDPR applies, we rely on: performance of a contract (giving you the service you signed up for), your consent (for example the waitlist and marketing email), our legitimate interest (keeping the service secure and working, including bot protection on the forms), and legal obligation (keeping required records).

5. Sharing and processors

We do not sell your data. We share it only with service providers that help us run MiniSourcer, and only as needed. These fall into a few groups: cloud hosting; an AI model provider that scores profiles; data providers that return public professional profiles; an email provider that sends our emails; payment processing when paid plans go live; and a bot-protection service that checks the sign-up and sign-in forms. Each provider is bound to use the data only for us.

Bot protection: to keep automated abuse out of registration and login, the forms are protected by Cloudflare Turnstile. When it runs, your browser loads a script from Cloudflare and a technical signal (such as your IP address and browser details) is sent to Cloudflare to decide whether you are a human. It sets no advertising cookies. This check is strictly necessary to keep the service available and is not covered by the cookie choices below.

6. How long we keep it

Account and workspace data stays while your account is active, and is deleted or anonymised when you ask us to close it. Candidate data stays until you delete it or request erasure. Waitlist emails stay until you ask to be removed. Erasure and request records are kept as proof of handling.

Inactivity deletion: an account that has not been signed into for 12 months is deleted automatically, together with its data. About one month before deletion the account shows an in-app notice, and signing in at any point resets the 12-month clock. Accounts with active autopay (a saved card on a paid plan) are never deleted for inactivity, and neither are platform administrator accounts.

7. Your rights

You can ask to access, correct or delete your personal data, get a copy, object to or restrict certain processing, and withdraw consent at any time. Workspace owners can erase a candidate directly from the app; other requests go to hello@minisourcer.com and we handle them without undue delay.

8. If you are a candidate in someone's workspace

Recruiters use MiniSourcer to organise the professional profiles they source. If your publicly available professional profile appears in a MiniSourcer workspace, that recruiter's workspace is the controller of that data and MiniSourcer is its processor — we host and score what they saved, we do not decide who they contact. To ask what is stored, to correct it or to have it erased, email hello@minisourcer.com with the workspace name if you know it, or the link to your profile. We pass the request to the workspace and remove the data where the law requires. You can also contact the recruiter directly. We do not use candidate data for our own marketing or sell it.

9. Cookies and local storage

We use a small amount of storage to make the product work: a sign-in token in local storage (so you stay logged in), and your theme and language choice. If you subscribe on the marketing site we may record basic campaign parameters (UTM tags and referrer) to understand how people arrive. We set no advertising cookies and run no third-party analytics tracker today. Where a choice is offered, you decide it in the cookie banner, and the choice is stored in your browser so we can honour it. You can change it any time from the link in the footer or on this page.

10. If you are in the United States

California residents (CCPA/CPRA) and residents of other US states with similar laws have the right to know what personal information we collect and how we use it, to request a copy, to ask us to correct or delete it, and to opt out of the “sale” or “sharing” of personal information. We do not sell your personal information, and we do not share it for cross-context behavioural advertising — so there is nothing to opt out of today. We do not knowingly collect data from children. To exercise any right, or to use an authorised agent, email hello@minisourcer.com; we will verify the request and respond within the time the law allows. We will not discriminate against you for making a request.

11. Security

Data is encrypted in transit, access is limited to the people who need it, and every workspace is isolated from the others so one customer can never see another's data. No system is perfect, so we keep this under review.

12. International transfers

Some of our providers operate outside your country. Where that happens, we rely on appropriate safeguards such as standard contractual clauses.

13. Age

The service is meant for adults. You must be at least 16 years old to create an account or join the waitlist, and we do not knowingly collect data from anyone under 16. If you believe a child has given us personal data, write to hello@minisourcer.com and we will remove it.

14. Changes and contact

We may update this policy as the product grows. The date at the top always shows the current version, and we keep a short list of changes below. Questions, requests or complaints: hello@minisourcer.com.

Change history: 30 Oct 2026 — first published version. 1 Nov 2026 — named the operator, added the candidate notice, the age rule, the bot-protection note and the accessibility contact.