Privacy

A plain-language summary of what we collect, why, and the control you keep. Last updated 27 July 2026.

What we collect

Only what you give us to do the job: your account email, the career data you upload or connect (CV, LinkedIn export, GitHub activity), your zone calibrations, and how you use the product (first-party analytics, no cross-site tracking, no advertising cookies).

What it's for

One purpose: modelling your fit with roles — the Career Twin, Zone Scores, and positioning drafts. We don't sell your data, show your profile to employers without your explicit opt-in, or use your data to train third-party models.

AI processing

Scoring and drafting use large language models and embeddings. What's AI-generated, what data feeds it, and the control you have are documented in full at How we use AI. Scores are advisory — they gate nothing, and no automated decision with legal or similar effect is made about you.

Who processes it

Infrastructure and subprocessors: Heroku/AWS (hosting, EU/US), OpenAI and Anthropic (model inference on the minimum necessary content), Stripe (payments — card details never touch our servers), Postmark (email). Each is bound by its own data-processing terms.

Your rights

Export everything or delete your account (and all of it, including analytics events) any time from account settings — both are self-serve and immediate. GDPR rights of access, rectification, erasure, portability and objection apply; EU-based processing is our default posture.

Retention

Your data lives as long as your account does. Deleted accounts are erased, not archived. Inbound import emails are processed then destroyed within 30 days.

Questions

Anything unclear, or a rights request we should action? Contact us — privacy questions get answered by a person.