Privacy Policy

1. Who we are

Seen (“Seen,” “we,” “us”) is a hiring-transparency platform operated by [PLACEHOLDER — legal entity name], located at [PLACEHOLDER — business address]. This policy explains what we collect, how we use and protect it, who can access it, and the choices you have.

2. What we collect

If you create an account, we collect:

• your email address and authentication credentials (managed by our auth provider);
• optional profile details you provide — name/display name, city, industry, experience level, and onboarding survey answers;
• content you add — application-tracker entries, saved jobs, submitted reports, and any resume text or file you upload (used for resume tools you request);
• your subscription, credit balance, and entitlement status;
• session and authentication tokens needed to keep you signed in.

If you submit a report without an account, we store the report text, the company name, a general location, a timestamp, and a hashed session identifier — not your name or email.

Automatically, we collect basic technical and usage data (such as request logs and, where enabled, privacy-conscious product-analytics events) to operate, secure, and improve the service. We use minimal, functional cookies/local storage; we do not run behavioral advertising.

3. How we use it

• to provide the service — company scores, search, the tracker, resume tools, and reports;
• to operate accounts, process payments and subscriptions, and manage credits;
• to send transactional email you have asked for or that is necessary to the service;
• to provide support, investigate issues, moderate content, and prevent abuse and fraud;
• to keep the service secure and to comply with law.

4. Who can access your account data

We want to be straightforward about this rather than overstate it. Authorized Seen administrators can access account data when it is necessary to run the service. Our systems include an administrative interface, protected by authenticated access, that can be used to provide support, moderate content, investigate abuse and security issues, manage subscriptions and credits, and — at a user's request or where required — reset access or delete an account and its data. Performing these functions can involve elevated access to the underlying database and authentication system.

In plain terms: we access account data only to operate the service, provide support, ensure security, and comply with law. We do not sell it, and we do not access it for purposes unrelated to running Seen. Administrative actions are recorded in an internal audit log, and access is limited to authorized personnel.

We also rely on third-party service providers (below) who process data on our behalf under their own security and confidentiality obligations.

5. Third-party processors

We share data with a small set of service providers strictly to run Seen. Each processes data only as needed to provide its service:

• Supabase — database and user authentication.
• Stripe — payment and subscription processing. Seen does not store full card numbers; Stripe handles payment details.
• Vercel — application hosting and serverless infrastructure (including request logs).
• Resend — delivery of transactional email.
• PostHog — privacy-conscious product analytics, where enabled.
• Anthropic — AI processing used for features such as summarizing public discussion and resume tools; inputs are sent for processing to generate the requested output.

[PLACEHOLDER — counsel/owner to confirm this list is complete and current, and to add any data-processing agreements or sub-processor disclosures required.]

6. We do not sell your data

We do not sell, rent, or lease personal data, and we do not use it for third-party behavioral advertising or profiling. We may share data when required by valid legal process, to protect the rights and safety of users or the public, or in connection with a business transfer, in which case we will seek to protect your information consistent with this policy.

7. Retention

We keep account data for as long as your account is active and as needed to provide the service, then delete or anonymize it within a reasonable period, except where longer retention is required by law or for legitimate business or security purposes. Reports and public-discussion items may be retained in aggregated or de-identified form. [PLACEHOLDER — counsel to set specific retention periods.]

8. Your rights and choices

• access, correct, or update your account data;
• delete your account and associated data (available in-product and on request);
• request a copy/export of your data;
• opt out of non-essential analytics;
• exercise rights under applicable law, which may include CCPA/CPRA (California) and GDPR (EEA/UK) rights such as access, deletion, portability, and objection.

To exercise any right, contact hello@seenjobs.io. [PLACEHOLDER — counsel to confirm required disclosures, verification steps, and any jurisdiction-specific rights and appeal processes.]

9. Security, transfers, and children

We use reasonable administrative and technical safeguards, including access controls and audit logging for administrative actions. No system is perfectly secure. Data may be processed in the United States and other countries where our providers operate. Seen is not directed to children, and we do not knowingly collect data from anyone under [PLACEHOLDER — 16/18].

10. Changes and contact

We may update this policy and will revise the effective date above; material changes will be communicated as required. Questions or requests: hello@seenjobs.io. See also our Terms of Service and Content Policy.