Privacy

What we collect

Only what you give us to do the job: your account email, the career data you upload or connect (CV, LinkedIn export, GitHub activity), your zone calibrations, and how you use the product (first-party analytics, no cross-site tracking, no advertising cookies).

Our work-style assessment can be taken without an account. While you are taking it your answers stay in your browser session and reach us only if you then join the waitlist — abandon it and nothing is kept. If you do join, the scored result is stored alongside your waitlist entry only if you tick the box asking us to, and it carries over to your account if you later accept an invite, so you are not asked the same questions twice. Leave the box unticked and you are still on the waitlist; nothing from the assessment is kept.

That result describes your personality and how you respond to pressure, so we treat it as special category data under Article 9 of the GDPR. Your explicit consent, given with that box, is our only basis for holding it. You can withdraw consent at any time from the link in the email we send when you join: withdrawing deletes the result straight away and changes nothing about your place on the list. The same link deletes your waitlist entry outright. The result otherwise falls under the same 24-month period below.

With an account, the work-style survey and the modules in the Assessment Hub describe you in the same way, so they are special category data too and rest on the same explicit consent: we keep the results only if you tick the box on the last page, and if you leave it unticked nothing is saved. A result carried over from the waitlist brings the consent you gave there with it. You can withdraw consent at any time from your Work DNA page, which deletes every result straight away, including your Career DNA summary.

What it's for

One purpose: modelling your fit with roles — the Career Twin, Zone Scores, and positioning drafts. We don't sell your data, show your profile to employers without your explicit opt-in, or use your data to train third-party models.

AI processing

Scoring and drafting use large language models and embeddings. What's AI-generated, what data feeds it, and the control you have are documented in full at How we use AI. Scores are advisory — they gate nothing, and no automated decision with legal or similar effect is made about you.

Recruitment agencies and hiring companies

If you choose to work with a recruitment agency on intothe.zone, we share with that agency only the details you select on your share card, and only while you allow it. You can stop sharing at any time. The agency then sees nothing new from you, but may keep what it has already received, under its own privacy notice and our agency terms, which require it to delete your details when it no longer needs them to represent you.

If an agency asks to show you to a named hiring company and you agree, that company sees the same card, for that vacancy only, through a link that expires. Each agency and each hiring company is responsible for how it uses your details once it has them.

We never share your Work DNA (personality and work-style results, energy ratings, or anything derived from them), your match scores, your applications, your compensation history or your conversations with Coach with any agency or employer, even if you ask us to.

The agencies and hiring companies we share with are located in the EEA, the UK, or countries the EU recognises as protecting personal data adequately.

Who processes it

Infrastructure and subprocessors: Heroku/AWS (hosting, EU/US), OpenAI and Anthropic (model inference on the minimum necessary content), Stripe (payments — card details never touch our servers), Postmark (email). Each is bound by its own data-processing terms.

Your rights

Export everything or delete your account (and all of it, including analytics events) any time from account settings — both are self-serve and immediate. GDPR rights of access, rectification, erasure, portability and objection apply; EU-based processing is our default posture.

Without an account, the link in your waitlist email withdraws consent to your assessment result or deletes your entry. When you use it we keep a one-way fingerprint of your address and the date, so we can show the request was honoured; the fingerprint cannot be turned back into your address.

Retention

Your data lives as long as your account does. Deleted accounts are erased, not archived. Inbound import emails are processed then destroyed within 30 days.

Messages sent through the contact form, and waitlist entries, have a period of their own: we keep them for up to 24 months from when we receive them, then delete them once they have been dealt with. That applies whether or not you have an account — and if you don't, it is the only clock governing what you sent us, because there is no account for it to be measured against. A message still awaiting a reply, or a waitlist entry still in the queue, is kept until it is; we don't delete something we haven't answered yet. Deletion is outright — we don't keep an anonymised stub. Deleting an account also removes any contact message or waitlist entry matching its email, without waiting for the 24 months.

Visits to our public pages are logged for first-party analytics — which page you arrived on, where you arrived from, a masked IP and a browser description. There are no analytics cookies and nothing follows you across sites. If you have no account, we keep that record for up to 13 months and then delete it; if you do, everything in it we can link to your account is erased with the account whenever you ask, without waiting. An arrival we never linked to anyone stays anonymous and runs out its 13 months.

If something sent to us from an address turns out to be spam, we may add that address to an internal blocklist so it cannot write in through the contact form or join the waitlist again. We may also block a website that spam messages link to, so that other messages linking to it are turned away too. A blocklisted address or website is kept for up to 24 months and then deleted, the same as the messages themselves; deleting an account also removes any blocklist entry matching its email, without waiting for the 24 months.

We keep a copy of every email we send you, for support and delivery troubleshooting. Sign-in, password reset, invite and data-export download emails are never copied — only that one was sent. For every other email, we keep the content for 30 days and then delete it, keeping only that it was sent, to whom, and what happened to it (delivered, bounced) for 13 months before removing that record too. Deleting your account removes your copies immediately, without waiting for either period.

If a recruitment agency invites you to intothe.zone by email before you have an account, we use your address only to send that one invitation. We delete the address, and any note the agency wrote, as soon as the email is sent — or after 30 days if it could not be sent — and keep no copy of the email. What we keep is a one-way fingerprint of the address, so that you are invited at most once, by any agency, and so we can recognise the invitation if you sign up with it. If you choose "never contact me again", we keep that fingerprint permanently so that no agency can invite you again; it is not removed if you later create and delete an account, because removing it would undo what you asked for.

Questions

Anything unclear, or a rights request we should action? Contact us — privacy questions get answered by a person.