Privacy Policy

1. What we collect

• Your email address, to send the sign-in link. The engine that holds your career data stores only a one-way hash of it, never the address itself. The one system that briefly handles the raw address is our email delivery provider.
• Your career answers: the target you are competing for, your current position, level, team size, city, work mode, industry, employment details, compensation bands, satisfaction and outlook answers, your role history, skills and experience, education by category, learning, and achievements. Every question is optional; you answer what you like.
• Your employer’s name, held privately, used only to derive its size and industry. It is never shown to any other user.
• A resume, if you upload one: read once to propose your record for your confirmation, then discarded. The file is not stored. School names in it are reduced to a coarse category and the names are not kept.
• Text you type in your own words, which the AI reads into structured entries you confirm.
• The waitlist: if you ask to be emailed when something opens, that address is kept until the notice is sent, then deleted.
• Technical basics: your IP address passes through our infrastructure for delivery and rate limiting (the rate limiter keeps only a hash); your browser’s local storage holds your session and cached answers on your own device. We set no advertising or analytics cookies and load no third-party trackers of any kind. If you arrive from a link carrying campaign tags, we keep those tags with your account so we can tell which doors bring people in; they describe the link you clicked, never you.

What we deliberately never collect: your name, your photo, your contacts, your precise location, and school names.

2. What we use it for

Four purposes, and no others: computing your own standings and readings; building the anonymous aggregate statistics that are the product; sending sign-in links and service notices; and keeping the service secure. We will update this policy before ever using data for a new purpose.

3. What other users see

Counts, averages, composites, and standings that your data contributes to, never your individual record and never your identity. Numbers open only when enough people stand behind them: comparison surfaces open at twenty-five sharers, individual readings may draw on target groups as small as twelve, and below a minimum floor a figure is suppressed and shows nothing at all. A composite is a middle, spoken and marked, never drawn as a person.

4. Anonymous end to end, precisely

Here is exactly what the promise means. We do not collect names or photos. The engine holding career data stores no email addresses, only hashes. No user-facing surface ever displays your individual data to another person, only aggregates over groups. Employer and school names never appear to anyone. Inside our systems your answers are keyed to an internal account number so that your own page can work; that is the full extent of the link between you and your data, and it is never exposed.

5. Who processes data on our behalf

• Anthropic runs the AI that parses uploads and writes readings. Career data and uploaded files pass through its API under commercial terms that prohibit using them to train models. For the model we use, Anthropic does not retain prompt or response content once the response is returned, except where its safety systems flag content for review.
• Cloudflare delivers the site and, as the network front door, sees IP addresses in transit.
• Railway hosts the application and the database.
• Resend delivers the sign-in email and is the one processor that handles your raw email address.

We add no processor without updating this list first.

6. How long we keep things

• Career answers: as long as your account exists. They stay banked and live, recomputed as the field moves; that is the product.
• Resume files: not stored. Read once, then gone.
• Sign-in link records: purged within forty-eight hours; links themselves die in fifteen minutes and work once.
• The waitlist address: until the notice it exists for is sent, one year at most.
• Backups: deleted data leaves the live system immediately and ages out of backups within thirty days.

7. Your rights, wherever you live

We honor these for everyone, not only where a law requires it. You can see what you shared, on your own pages. You can correct it, in the product. You can download it as a file, and you can delete your account, both at your account. Deletion removes your career records, your email hash, and any waitlist entry; aggregates your data was already blended into persist, because nothing in them identifies you. For any request, write to [email protected] and we answer within thirty days.

8. What we do not do

We do not sell personal data. We do not share it for advertising. We do not track you across the web. If any of that ever changed, this policy would change first, with notice, and the promise above about aggregates would still hold.

9. Age

The service is for people eighteen and older and is not directed at children. If we learn an account belongs to someone under eighteen, we delete it.

10. Security

Sign-in is passwordless; there is no password to steal. Email exists in the engine only as a hash. Traffic is encrypted in transit and data encrypted at rest. Access to production data is restricted and recorded. If a breach ever puts your data at risk, we will tell you plainly and promptly, and notify authorities as the law requires.

11. Changes and contact

Material changes to this policy get notice by email or in the product before they take effect. Questions and requests: [email protected]. Standing Intelligence LLC, registered in Illinois; the registered postal address is published here upon completion of filing.