Privacy & data
This page says plainly what we collect, how long we keep it, and what we never do. It is written to be read, not skimmed past.
What we collect
The materials you choose to share (CV, pasted text, transcripts), the answers you type, your email and optional name, and anonymous funnel events (which steps were reached — never the content of your materials). Voice audio is never stored; we accept transcripts only.
How it is used
Only to generate your report and, if you later choose a paid service, to prepare for that work. AI processing extracts a profile that deliberately excludes phone numbers, addresses, and personal emails.
How long we keep it
Raw uploads and pastes are automatically deleted after 90 days. Your report and extracted profile remain available to you until you ask us to delete them.
What we never do
We never use your data to train AI models. We never sell or share it. We never publish your materials as examples or testimonials without your explicit written permission. We never access your LinkedIn, ChatGPT, or Claude accounts — you choose what to paste.
Your choices and rights
You can correct how your background was read on the confirmation page before any judgment is made. You can opt in — or not — to anonymized aggregate insights. And you can have everything deleted: one email, completed within 7 days.
Who processes your data (and where)
This site is run by one person, but it runs on other people’s infrastructure and you are entitled to know whose: Vercel (hosting), Supabase (the database your data actually lives in), Anthropic (the AI read — it receives the material you paste), Resend (email), PostHog (anonymous product analytics), Cal.com or Calendly (booking), and LINE (if you reach me through an “add me on LINE” link, the conversation after that is held and processed by LINE). Their data centres are not necessarily in your country, so your data is processed across borders. That is the current full list, and this page is updated when it changes.
Cookies and analytics
PostHog records anonymous usage (which pages open, where people drop out) and sets a cookie and localStorage entries in your browser. Those records contain no name, no email, no CV content and nothing that points back to you personally. Three things make that true rather than merely intended: automatic click capture (autocapture) is switched off entirely, so what you clicked and what that element said never reach us; every property sent is passed through a redactor that replaces report-URL identifiers with a placeholder; and session recording is off by default. Private browsing or a cookie blocker avoids it entirely and every feature still works.
Deletion requests and any questions: mri@ahamoment-career.com