Privacy

What we collect

Only what you give us to do the job: your account email, the career data you upload or connect (CV, LinkedIn export, GitHub activity), your zone calibrations, and how you use the product (first-party analytics, no cross-site tracking, no advertising cookies).

Our work-style assessment can be taken without an account. While you are taking it your answers stay in your browser session and reach us only if you then join the waitlist — abandon it and nothing is kept. If you do join, the scored result is stored alongside your waitlist entry, falls under the same 24-month period below, and carries over to your account if you later accept an invite, so you are not asked the same questions twice.

What it's for

One purpose: modelling your fit with roles — the Career Twin, Zone Scores, and positioning drafts. We don't sell your data, show your profile to employers without your explicit opt-in, or use your data to train third-party models.

AI processing

Scoring and drafting use large language models and embeddings. What's AI-generated, what data feeds it, and the control you have are documented in full at How we use AI. Scores are advisory — they gate nothing, and no automated decision with legal or similar effect is made about you.

Who processes it

Infrastructure and subprocessors: Heroku/AWS (hosting, EU/US), OpenAI and Anthropic (model inference on the minimum necessary content), Stripe (payments — card details never touch our servers), Postmark (email). Each is bound by its own data-processing terms.

Your rights

Export everything or delete your account (and all of it, including analytics events) any time from account settings — both are self-serve and immediate. GDPR rights of access, rectification, erasure, portability and objection apply; EU-based processing is our default posture.

Retention

Your data lives as long as your account does. Deleted accounts are erased, not archived. Inbound import emails are processed then destroyed within 30 days.

Messages sent through the contact form, and waitlist entries, have a period of their own: we keep them for up to 24 months from when we receive them, then delete them once they have been dealt with. That applies whether or not you have an account — and if you don't, it is the only clock governing what you sent us, because there is no account for it to be measured against. A message still awaiting a reply, or a waitlist entry still in the queue, is kept until it is; we don't delete something we haven't answered yet. Deletion is outright — we don't keep an anonymised stub. Deleting an account also removes any contact message or waitlist entry matching its email, without waiting for the 24 months.

Visits to our public pages are logged for first-party analytics — which page you arrived on, where you arrived from, a masked IP and a browser description. There are no analytics cookies and nothing follows you across sites. If you have no account, we keep that record for up to 13 months and then delete it; if you do, everything in it we can link to your account is erased with the account whenever you ask, without waiting. An arrival we never linked to anyone stays anonymous and runs out its 13 months.

Questions

Anything unclear, or a rights request we should action? Contact us — privacy questions get answered by a person.