Version three, effective November 7, 2026. This policy covers mystanding.ai, operated by Standing Intelligence LLC, an Illinois limited liability company.
1. What we collect
- Your email address, to send the sign-in link and code. Our servers use the address only to send that email and keep only a one-way hash of it, never the address itself. On its way to us the address passes through Cloudflare, and our email provider, Resend, receives it to deliver the email.
- Your career answers: the role you want, including its level, function, location, company and the pay you would ask for; where you are today, including your employment status, title, level, team, city, work arrangement, pay and company; your work history, including each role’s title, years and employer, the tools and skills you used, and your education and training, with schools reduced to a category; and how you got your current role. Every question is optional; you answer what you like.
- Your employer’s name, held privately, used only to look up that company’s facts, such as its industry, kind and size, which is what results compare. It is never shown to another person.
- Names you add that our lists do not hold yet, such as a company, a function, a responsibility, a city, a tool or a skill. After review, a name can join our shared lists so that the next person can pick it instead of typing it; the lists carry the name, never you. While some of these names wait for review they are linked to your account inside our systems. If you delete your account, that link is removed and the name stays.
- A resume, if you upload or paste one. Email addresses, phone numbers and web links are removed before our AI reads it; a scanned file with no readable text goes to the AI as it is. The AI proposes your roles, tools, skills and education for you to confirm. Then the file and its text are discarded; neither is stored. School names in it are reduced to a category and the names are not kept.
- Words you type into your work history, which our AI reads into entries you confirm.
- A record of each AI request made for you: when it ran, how long it took, and the size of what was sent and returned, never the words themselves. It is linked to your account and deleted with it.
- Invite links: if someone signs up through your personal invite link, we record that their account came through yours, so the invite can be counted. Neither of you can see the other’s answers or identity.
- The waitlist: if you ask to be emailed when something opens, that address is kept until the notice is sent, then deleted, and expires within a year in any case. It is held apart from your account, so deleting your account does not reach it; write to us and we remove it.
- Technical basics: your IP address passes through our infrastructure for delivery and rate limiting (the rate limiter keeps only a hash). Your browser’s local storage, on your own device, holds your session, your answers in progress and the email you last signed in with. We set no advertising or analytics cookies and load no third-party trackers of any kind.
- Where you came from: if you arrive from a link carrying campaign tags, we keep those tags with your account, along with the address of the page that sent you (when your browser shares it) and the date you first arrived, so we can tell which links bring people in. We also count how many visits reach a few steps, such as opening the front page, starting Trade 1 and asking to sign in, as daily totals by campaign. Those totals carry no IP address, cookie, device detail or anything else about you.
What we never ask for or keep: your name, your photo, your contacts, your precise location, and school names.
2. What we use it for
Five purposes, and no others: computing your own results; building the anonymous aggregate statistics that are the product; sending sign-in emails and the one notice a waitlist address asks for; learning which links and invites bring people in; and keeping the service secure. We will update this policy before ever using data for a new purpose.
3. What other users see
Counts, shares, averages and comparisons that your data contributes to, never your individual record and never your identity. Numbers open only when enough people stand behind them: results for each trade open once twenty-five people have finished it, and no single figure is ever reported over fewer than three people. Some figures wait for more: an average competitor waits for five, a breakdown by kind of company or industry for ten, a percentile for twenty-five. A figure below its floor is never shown; the result steps out to a wider group or shows nothing. A figure such as the average competitor is computed from a group and never stands for one real person.
4. Anonymous end to end, precisely
Here is exactly what the promise means. We do not ask for or store names or photos. Our database stores no sign-in email addresses, only hashes. No page ever shows your individual data to another person, only figures over groups. Your employer’s name is never shown to another person. School names we do not keep at all. Inside our systems your answers are keyed to an internal account number so that your own pages can work, and sign-in finds that account from the hash of your email. Before you sign in, only your browser holds the key to that account. Neither the number nor the key is ever shown to anyone.
5. Who processes data on our behalf
- Anthropic runs our AI. It reads a resume you upload or paste, reads the words you type into your work history, and sorts the titles in your work history into functions. It does not write your results; those are counted from what people shared. What we send goes through Anthropic’s API under commercial terms that bar using it to train models. Anthropic deletes it within thirty days, unless its automated safety systems flag it, in which case it may keep it for up to two years.
- Cloudflare delivers the site and, as the network front door, sees IP addresses and requests in transit. It also stores the waitlist addresses for us.
- Railway hosts the application, the database and its backups.
- Resend delivers the sign-in email, so it receives your email address to do it.
We add no processor without updating this list first.
6. How long we keep things
- Career answers: as long as your account exists. Results are recounted as more people share; that is the product.
- Resume files and their text: not stored. Read once, then gone.
- Answers given before you sign in: they save to an account with no email that only your browser can reach. They count toward the 25 people a trade needs before its results open, and they join the comparisons other people see once you sign in. Signing in from that browser moves them to the account for your email. If you never sign in, the answers stay, with nothing that leads back to you; while your browser holds the key you can download or delete them at your account.
- Answers held only on your device when you ask for a sign-in link: they wait, encrypted, beside the hash of your email and are moved into your account when you sign in. If you never sign in, they are deleted once they are two days old, the next time anyone asks for a sign-in link.
- Sign-in link records: deleted within fifty hours; links and codes expire in fifteen minutes and work once.
- Sign-in sessions: seven days, or until you sign out. Your browser’s key to an account with no email: thirty days.
- AI request records and invite records: as long as your account exists.
- The waitlist address: until the notice it exists for is sent, one year at most.
- Backups: deleted data leaves the live system immediately and ages out of backups within thirty days.
7. Your rights, wherever you live
We honor these for everyone, not only where a law requires it. You can see what you shared, on your own pages. You can correct it, in the product. You can download it as a file, and you can delete your account, both at your account. Deletion removes your career answers, your work history, your email hash, your sessions, your campaign tags, your invite records and your AI request records. Aggregates your data was already blended into persist, because nothing in them identifies you, and names you added to our shared lists stay there with no link to you. A waitlist address, if you ever left one, is held apart from your account: it goes when the notice it exists for is sent, expires within a year at the latest, and we remove it sooner if you ask. For any request, write to [email protected] and we answer within thirty days.
8. What we do not do
We do not sell personal data. We do not share it for advertising. We do not track you across the web. If any of that ever changed, this policy would change first, with notice, and the promise above about aggregates would still hold.
9. Age
The service is for people eighteen and older and is not directed at children. If we learn an account belongs to someone under eighteen, we delete it.
10. Security
Sign-in is passwordless; there is no password to steal. Email exists in our database only as a hash. Traffic is encrypted in transit. Our database host encrypts all stored data, backups included, and we encrypt your trade answers, and the employers and achievements you type into your work history, a second time with a key of our own. Within Standing, only the founder can reach production data. If a breach ever puts your data at risk, we will say so plainly and promptly on this site, and notify authorities as the law requires.
11. Changes and contact
Material changes to this policy get notice on this site before they take effect. Questions and requests: [email protected]. Standing Intelligence LLC, registered in Illinois; the registered postal address is published here upon completion of filing.
Version one took effect September 2, 2026. Version two corrects it to match exactly how the service works today: what our AI does and how long Anthropic keeps what we send, the record we keep of each AI request, invite links, where you came from, names added to our lists, and how notices reach you. Version three covers answers given before you sign in, now that signing in comes after the second trade.