Privacy Policy

• We collect what you type into our forms and what you tell us by email or on a call.
• We use Google Analytics only if you accept analytics cookies. This site runs no advertising cookies and no tracking pixels.
• We do not sell your data or share it for advertising.
• You can ask for a copy of your data, or for it to be deleted, at any time.

ByThursday is a brand of Kawkab, Inc., a company registered in Delaware, USA. Kawkab, Inc. (“we”, “us”) is the controller of the personal data described in this policy.

Address: 1111b S Governors Ave, STE 23941, Dover, DE 19904, USA

Email: [email protected]

When you book a call: your name, email address and company, the role that best describes you, the roles you are hiring for, your budget range, your company’s revenue range, how you heard about us, and the time you choose.

If you accept analytics cookies: Google Analytics records how you use the site, such as the pages you view, how you arrived, your approximate location (country or city), and your device and browser. It does not give us your name or contact details.

When you write to us or speak with us: whatever you choose to share, such as details of your team and the work you need done.

During an engagement: the business contact and billing details of the people we work with at your company.

Technical data: like any website, ours receives your IP address and basic browser details with each request. Our hosting and security providers process these to deliver the site and protect it from abuse. We hold your IP address briefly in memory to limit repeated form submissions, and we do not store it with your enquiry.

We do not use advertising networks, tracking pixels or device fingerprinting, and we only run analytics if you agree to it. We do not ask for sensitive information such as health data, and we do not buy contact lists.

We set no cookies unless you accept them. When you first visit, a banner asks whether you accept analytics cookies. If you accept, Google Analytics sets cookies named _ga and _ga_S8JHC3FXJC to tell visits apart. They last up to 2 years. If you decline, none are set.

We remember your choice in your browser’s local storage, as bt-consent, so we do not ask again. You can change your choice at any time with Cookie settings at the foot of every page.

Cloudflare, which delivers and protects this site, may set a strictly necessary cookie to tell visitors apart from automated traffic. It is not used to track you across sites.

• To reply to your enquiry and hold the call you booked. We rely on the steps you have asked us to take before a contract, and on our legitimate interest in answering people who contact us.
• To scope the role and match you with developers, on the same basis.
• To run an engagement and invoice for it, because this is necessary to perform our contract with you.
• To keep the site secure and working, based on our legitimate interest in protecting it.
• To understand how the site is used and improve it, with Google Analytics, based on your consent.
• To keep financial and tax records, because the law requires us to.

We may follow up about an enquiry you made. We will not add you to a newsletter or marketing list without your consent, and you can withdraw consent at any time.

We use a small number of service providers who process data for us under contract, and only for the purposes set out here:

• Google, which provides Google Analytics, only if you accept analytics cookies;
• Cloudflare, which delivers the site and protects it from attacks;
• our hosting provider, whose servers run the site;
• our scheduling system, which records the call you book and sends you the invitation.

We share your company name, the role you are hiring for and a contact name with shortlisted developers only after you have asked us to arrange introductions.

We may also disclose data to professional advisers, to authorities where the law requires it, or to a buyer if our business is sold, in which case this policy continues to protect it.

Our team, our developers and our providers work in several countries, so your data may be processed outside the country you live in. When it moves between countries, we use safeguards recognised by data protection law, such as standard contractual clauses, to keep it protected.

• Enquiries that do not lead to an engagement: 24 months after we were last in touch, then deleted.
• Analytics data: Google Analytics keeps it for 14 months, then deletes it.
• Client records: for the length of the engagement, then for as long as tax and accounting law requires.

The site is served only over HTTPS. API keys and credentials stay on our servers and never reach your browser. Access to personal data is limited to the people who need it, and our providers are bound by contract to protect it.

No system is completely secure. If a breach is likely to put your rights at risk, we will tell you and the relevant regulator as the law requires.

Depending on where you live, you can ask us to:

• give you a copy of the personal data we hold about you;
• correct anything that is wrong or incomplete;
• delete your data;
• restrict or object to how we use it;
• send your data to you or to another organisation in a portable format.

Email [email protected] to make a request. It is free, we may ask you to confirm your identity, and we will reply as quickly as we can and within the time the law allows.

If you are in California, you also have the right to know what we collect and to have it deleted or corrected. We do not sell personal information or share it for cross-context behavioural advertising.

If you are unhappy with how we handled your data, you can complain to the data protection authority where you live. We would appreciate the chance to put it right first.

If you apply to work with us, we collect your CV, your assessment and interview results, and notes from our conversations. We use them to vet you and match you with clients. We share your profile with a client only as part of a shortlist, and you will know when that happens.

If you are placed with a client, we also collect what we need to employ and pay you: your ID, contract details, bank details and salary records. We keep these for as long as employment and tax law requires.

We keep the rest of your record while you are available for placements. We delete it on request, or after 24 months without contact.

Our service is for businesses and is not directed at anyone under 16. We do not knowingly collect personal data from children.

We will update this policy when our practices change. The date at the foot of the page shows the latest version. If a change significantly affects how we use data you have already given us, we will tell you by email.

Questions about privacy, or requests about your data, go to [email protected].