Adina Labs

Privacy

Your profile is yours.

What we collect, what goes on-chain, and the control you keep over your own profile.

Last updated October 2026

Draft

Who this covers

Adina Labs is a US company operating a decentralized employment marketplace. This policy covers candidates, hiring teams and visitors to the marketplace.

We work to comply with the European Union General Data Protection Regulation (GDPR), the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), the Australian Privacy Principles under the Privacy Act 1988, and India’s Digital Personal Data Protection Act, 2023. You must be at least 18, or the age of digital majority where you live.

What we collect

We collect what the marketplace needs to work, and no more.

  • From candidates: the profile you build (name, headline, location, a short description, the tracks you want, an optional photo and resume file name), your account and its wallet address, and your activity here such as applications, saved roles and messages.
  • From hiring teams: your work email and domain, your organization’s details and logo, the people on your team, the roles you publish, and the meeting requests you send.
  • Identity verification: if you choose to get verified, our identity provider collects and checks your documents. We receive the result, never the documents.
  • Payments: hiring teams pay by card through our payment provider. We receive a record of the payment, never your card number.
  • Technical data: IP address, device and browser information, and how pages are used, to keep the service working and secure.
  • The waitlist: before the marketplace opens, you can join our waitlist. Candidates give a first name, an email address, the kinds of work they do and, if they like, a country. Employers give a name, a work email, the company and, if they like, a job title, the kinds of roles they hire for and roughly how many they plan to hire. To slow down automated signups we keep a one-way hash of the network address a signup came from, never the address itself.

What goes on-chain, and what never does

Sealing a profile records a fingerprint: a one-way hash that proves a profile has not changed since you sealed it. A fingerprint cannot be turned back into your profile.

On-chain we record pseudonymous identifiers, version numbers, timestamps, fingerprints, storage pointers, whether a record was withdrawn, and whether a verification or a hire was attested.

Never on-chain: your name, your contact details, your resume, your salary, your messages, or anything a hiring team said to you.

Public blockchains are permanent. A record we write there cannot be deleted, even when we delete everything off-chain. This is why we write as little as possible, and nothing that identifies you.

Who can see your profile

Your profile is private by default. A hiring team sees an anonymous card, your headline, experience and skills, until you say yes to meeting them. Your name unlocks only then.

You can stop sharing with any hiring team at any time, from your profile. They lose access, and your conversation closes. What they already saw or saved, they keep, as they would after any interview.

We never sell candidate data, and we never let anyone bulk-download or export the candidate pool. There is no resume database to buy.

Encryption and your keys

Your sealed profile is encrypted before it leaves your device. The key is derived from your wallet signature and is never sent to us, so we cannot read a sealed profile and neither can our storage provider.

Your account wallet is non-custodial. We do not hold your private keys and cannot recover them.

How we use it

To run the marketplace: to build and seal your profile, to suggest roles that fit, to let a hiring team ask to meet you, and to carry your conversations.

To keep it honest: to prevent fraud and abuse, to verify organizations, and to measure whether matching works.

Almega+™ suggests who might fit a role and gives the reasons why. It never interviews you, never scores you, and never rejects you. A person on the hiring team makes every decision about you.

We send you service messages about your own activity. Marketing emails only with your consent, and you can stop them at any time.

If you join the waitlist, we send you one email to say thanks, and we contact you when the marketplace opens or, for employers, about early access. Every email has an unsubscribe link, and unsubscribing stops them.

Where GDPR applies, we rely on: performing our contract with you (running your account and the marketplace), your consent (optional things such as identity verification and marketing), our legitimate interests (security, fraud prevention and improving the service), and legal obligations.

Equivalent bases apply under the CCPA/CPRA, the Australian Privacy Principles and the DPDP Act.

Your rights

You can ask for a copy of your data, correct it, delete it, object to processing, or withdraw consent. Candidates can also export a profile at any time, as a PDF or as data, from the profile page.

Deleting your account removes your profile and activity from our systems. Fingerprints already written on-chain remain, because nobody can delete them, but they identify nobody on their own.

Where you live decides which regulator you can complain to: your data protection authority in the EU, the California Privacy Protection Agency, the Office of the Australian Information Commissioner, or the Data Protection Board of India.

Keeping and sharing data

We keep data only while your account is open, or while the law requires it.

We keep waitlist details until you ask us to delete them. Unsubscribing stops our emails straight away.

We share with service providers who are bound by confidentiality and act on our instructions: sign-in and wallets, encrypted storage, identity verification, payments, hosting and email. We do not sell personal information.

Where data crosses borders, we rely on adequacy decisions or standard contractual clauses.

If a breach affects your personal data, we notify the relevant regulator within 72 hours where GDPR requires it, and we tell you when the law requires it.

Changes

We update this policy as the product and the law change, and we post the new version here with its date.

Privacy questions and requests: info@adinalabs.com, with “Privacy Request” and the right you are exercising in the subject line.