Privacy

We hold the minimum necessary. We do not sell or share personal data with advertisers. We do not run advertising or tracking pixels. The user-facing surface has no third-party analytics.

What we hold

• · Account identifiers (email, phone, name, date of birth, region).
• · Your Compass document and its version history.
• · Your Compass Builder conversation transcript and recording.
• · Photos you upload, with authenticity checks.
• · Identity verification metadata from our verification provider.
• · Introduction records, reviewer notes, exit reasons, post-meeting check-ins.
• · Payment records via Stripe or Apple.

What we explicitly do not collect

• · Behavioral analytics on the user-facing app.
• · Advertising IDs, device fingerprints, or cross-site tracking.
• · Location data beyond city / region you self-report.

Watch items are doubly private

The categories you ask us to watch out for in your Compass are visible only to you. They are not visible to reviewers, to candidates, or to researchers. The reviewer process receives a boolean signal, never the term itself.

Builder recording consent (four scopes)

• · Personal archive: you may always re-access your own recording. Always true.
• · Training data: de-identified recording may improve the automated Builder. You may opt out.
• · Evaluation data: de-identified recording may be used in our AI eval suite. You may opt out.
• · Research publication: de-identified excerpts may appear in published research. Opt-in only; off by default.

Deletion

You may close your account at any time. After a 30-day grace period, your Compass, recordings, transcripts, photos, and check-ins are hard-deleted. Aggregated, anonymized introduction/exit/graduation data is retained to preserve the integrity of public quarterly disclosure.

Notification

Our notification system operates on an allowlist; we cannot send you an engagement nudge, weekly digest, or marketing email because the code paths for those do not exist.