Loading…
Version 2026-10-23.3 · published Oct 23, 2026
Version 2026-10-23.3. Last updated October 23, 2026. Hire a Neighbor operates hireneighbor.app and is responsible for the personal data described here. Privacy requests, appeals, and questions go to hire.neighbor.os@gmail.com. No postal address is designated. Email is the contact method. You do not need to create a new account to make a request. If you already have an account, we may use it to match the request to you.
This notice is written for the whole service, including parts that become available over time. A category below is collected when you use the feature that needs it. Making a described feature available does not add a new kind of use that this notice failed to describe. A materially different use of data we already have is covered under Changes.
This notice is the English text. The interface also has Spanish, German, and Arabic catalogs. You may ask for a copy of this notice in one of those languages at the privacy email. The English text controls until a translation is published as its own version. The notice is linked from the footer of the website. A mobile application, when offered, will link to the same notice from its settings. The page is ordinary text so it can be used with assistive technology.
Information you publish, and information a deal requires us to show to another person, is then that person's copy. That person is responsible for how they use it. Do not send us or another person a secret you cannot afford to have repeated. Keep your own copy of records you need for your taxes, your licenses, and your deals.
The safeguards below are how we protect the service we run. They are not a promise that unauthorized access cannot happen. This section does not reduce a request, a breach notice, or any other duty in this policy.
Account data includes your email, display name, last initial, birth date, preferences, invitation, and verification status. We use it to open and protect the account, to apply the age rule, and to reach you about the service.
Sign-in data includes session records, device details, and protected authentication material such as a password hash or a passkey. We use it to recognize you and to investigate unauthorized access. An export does not include a usable password or a security answer.
Marketplace data includes offers, requests, skills, photos, messages, proposals, agreements, fulfillment records, and reviews. We use it to provide the feature you used, to keep the record of an agreement, and to handle a dispute about that record. The other people you chose to deal with receive what that dealing requires.
Workspace data includes inventory, belongings, household or property notes, scans, attachments, plans, and cooperation records you store. We use it to show that workspace to you and to the people you authorize. Membership in a circle does not by itself open a private workspace. A contribution you made in a workspace someone else owns stays with that owner.
Neighbor data includes the conversation and the memory you ask the assistant to keep. We use it to carry out your requests. Your private price floor is not sent to a model. The assistant receives coarse place information, not the encrypted exact point of a saved location.
Location data includes a place you enter and, when the feature needs it, an exact point. The exact point is stored encrypted, separate from a coarser public point. The public point can be used for discovery, routing, and the assistant. The exact point is not a public profile field. Entering a precise place for a particular offer, request, or job is your consent to use that place for that job. Accepting these Terms is not that consent. We do not use that place for advertising.
Payment data is collected when you use a payment or payout feature. The confirmation screen is the charge. The payment provider handles card and bank details under its own notice. We do not ask you to put a full card number in a message to us.
Shipping data is collected when you use shipping. It includes the destination information that purchase requires and the carrier events for that shipment.
Usage and security data includes server logs, allowlisted product events, and a first-touch source kept for the browser session at registration. We use logs to operate and protect the service. We do not run an advertising network. The absence of an advertising cookie does not mean we keep no server logs.
Photographs and recordings you upload are the content you submitted. They are not biometric data unless a measurement is generated from them for the purpose of identifying a specific person. We do not use photos to identify you biometrically. Scans of a place or of belongings are about that place or those belongings.
Sensitive data, as Montana defines it, includes precise location within a radius of 1,750 feet, and data revealing racial or ethnic origin, religious beliefs, a health diagnosis, sex life, sexual orientation, citizenship or immigration status, genetic or biometric data used to identify a person, and personal data of a known child.
We do not ask for race, religion, health diagnosis, sex life, sexual orientation, citizenship, genetic data, or biometrics to open an account. Do not put that information in a public listing. If you send it to us in a support message, we use it only to handle that message.
Precise location is used only for the feature you invoked, as described above. We do not knowingly collect personal data from a child under 13. Registration is for adults 18 or older.
We do not sell personal data. We do not use personal data for targeted advertising, meaning ads selected from your activity over time across other companies' sites. We do not profile you to decide credit, housing, insurance, education, employment, health care, or access to food or water.
A disclosure to a service provider that works for us, a disclosure you direct so we can provide something you asked for, and a transfer of the service in a merger are not a sale under the Montana definition we follow.
Because we do not sell personal data or use it for targeted advertising, an opt-out does not change those practices. You may still send the opt-out to hire.neighbor.os@gmail.com, including through an authorized agent. If we can read a browser opt-out preference signal, we treat it as the same request. There is no charge for keeping your account if you opt out, because there is no price tied to a sale or to targeted advertising.
Other people receive what you choose to publish and what your deal or collaboration with them requires. They can keep their copy of a message or a deal.
Staff can open records only in a defined role for support, safety, finance, or a legal duty.
These providers process personal data for us when the related path is in use:
A provider built into the software and not in use does not receive your data. We do not give a provider a standing copy of the marketplace database. Providers are allowed to use personal data to perform the work we asked for. Our arrangements with them are meant to require confidentiality, return or deletion when the work ends unless the law requires retention, and help with security and breach notice. We will not describe a provider's deletion as finished without a basis for saying so.
We disclose personal data when we believe in good faith that the law requires it, and we may disclose it to prevent death or serious physical harm. Where the law allows, we tell you about a legal request. We ask that a request be one the law actually authorizes.
We keep personal data for the purpose you gave it for, and then for as long as a stated duty still requires it.
The product contains export and deletion tools. An export covers the registered stores, leaves out secret-looking columns, and does not dump another person's identity in the clear. A very large account can require more than one export. Deletion removes or scrubs the stores the tool covers and can destroy the account's data keys. It refuses a shared workspace and a record someone else owns. Key destruction does not erase an unencrypted copy, a backup that has not expired, or a copy another person already received. A response to you will say what was completed, what remains, and the reason.
We use account permissions, role limits for staff, HTTPS, and encryption of the exact location point and of designated personal-data classes under per-account keys. Secrets used to run the service are kept outside the application image. No system can promise that a breach is impossible.
If we discover a breach of the security of a data system that we own or license, and unencrypted personal information of a Montana resident was or is reasonably believed to have been acquired by an unauthorized person, we notify that resident without unreasonable delay, consistent with a law-enforcement request to delay and with the time needed to learn the scope and restore the system. For this purpose personal information has the meaning in MCA 30-14-1704: a name combined with a Social Security number, a driver's license or state or tribal identification number, a financial account number with a code that permits access, medical record information, a taxpayer identification number, or an IRS identity-protection PIN, when the name or the element is unencrypted. The notice says that this information was or is reasonably believed to have been acquired and includes the date or dates of the breach. At the same time we send an electronic copy of the notice, without the residents' identifying details, to the Montana Attorney General's consumer protection office, with the date and method of distribution and, when more than one resident is notified, the number notified. A good-faith acquisition by a person working for us is not a breach if the information is not used or disclosed further without authority. The breach must also cause or be reasonably believed to cause loss or injury.
A service provider that maintains data for us and discovers such a breach tells us. We then notify as the owner of the data.
The requests below are available wherever you live in the United States. We answer within 45 days, and sooner if the state where you live requires a faster answer. If you live in more than one state, or you move, you may use each right of a state that treats you as its resident for the data collected while that tie exists.
A comprehensive consumer privacy statute is in effect, as of October 23, 2026, for residents of these states:
We honor each of those statutes where it applies to you and to this service. Alabama, Louisiana, Oklahoma, and Vermont have enacted statutes that are not yet in effect. We will honor each one for that state's residents when it takes effect. The other states and the District of Columbia have breach-notice laws and consumer-protection laws, and they have the commitments in this policy, without a comprehensive statute of the kind listed above.
Some of those statutes apply only after a revenue or volume threshold. We do not claim that a threshold has been met. The commitments in this policy apply either way. A lawsuit a state allows after a security breach is not waived.
California residents may ask us to limit use of sensitive personal information. Precise location is used only for the feature you invoked. We do not sell personal information, and we do not share it for cross-context behavioral advertising. If California requires published counts of requests, we will publish those counts. You may also complain to the California Privacy Protection Agency.
We do not collect biometric identifiers to identify a person, and we do not ask for a medical diagnosis or other consumer health data. Do not put either one in a public listing. Nevada residents may opt out of a sale of covered information. We do not sell it. An authorized agent may send an opt-out wherever your state's law allows an agent.
If the breach-notice law of the state where you live requires notice, we give that notice, including any notice that law requires to that state's attorney general. The Montana notice described above is in addition when Montana's statute applies.
You can ask to access, correct, delete, or receive a portable copy of personal data you provided. You can opt out of sale, targeted advertising, and profiling for decisions with legal or similarly significant effects. You can withdraw a consent. Withdrawing is as easy as the way you gave the consent. We stop the processing that depended on that consent as soon as we practicably can, and no later than 45 days, except where the law still requires the processing.
Write to hire.neighbor.os@gmail.com and name the request. An authorized agent may send an opt-out. We authenticate access, correction, deletion, and portability requests in a way that fits the sensitivity of the data. We do not require authentication merely to opt out, and we may refuse an opt-out we document in good faith as fraudulent and tell you that we did. Do not send a password, a full payment card number, or identity documents unless we ask for a specific item through a protected channel.
We respond within 45 days. If we need one more period of 45 days, we tell you inside the first 45 days and say why. If we decline, we say why and how to appeal. One request of each kind in a 12-month period is free. If a request is manifestly unfounded, excessive, technically infeasible, or repetitive, we may charge a reasonable fee or decline it, and we carry the burden of showing that.
An access response does not include a Social Security number, a government identification number, a financial account number, a health-insurance or medical identifier, a password or security answer, or biometric data. If we collected one of those, the response says so with enough specificity to identify the collection without revealing the secret.
Deletion of data we received from someone else may be recorded as a suppression or an opt-out where that is the lawful way to honor the request. We do not deny the service, change the price, or reduce quality because you made a request.
Appeal by writing to the same email and identifying the decision. We send a written result within 60 days. If we deny the appeal, we tell you how to contact the Montana Attorney General.
These timings and rights are our commitment. The numerical tests in the Montana Consumer Data Privacy Act for some of its sections are not something this notice claims have been counted. The commitment stands either way. The Act's sections on minors, processor assistance, and minor-risk assessments apply more broadly. We do not offer the service to minors.
The service is for adults 18 or older. We do not knowingly collect personal data from a child under 13. If we learn an account belongs to someone under 18, we close it and delete the personal data we are not required to keep. A parent who believes we have data about a child can write to the privacy email.
We publish a new version rather than silently rewriting this one. If we will use personal data we already collected for a purpose that is materially different from the one we disclosed, we notify the people affected and give them a real chance to withdraw consent before that further use. The date at the top is the date of this version.
Name where you live. Add the work state, where goods are received, or where they are sent from when you know them. A blank place is not assigned.