Privacy Policy

1. What data we collect

• GitHub account data: Username, display name, avatar, public email, bio, location, follower/following counts, and public repository activity — obtained via GitHub OAuth when you sign in.
• Usage data: Pages visited, profile view counts, and feature interactions via Vercel Analytics.
• Location (approximate): We optionally capture your device's city-level location if you grant permission — used to show you on the developer map and leaderboard.
• Email: Only if you join the waitlist or contact us. Not required for GitHub sign-in.

2. How we use your data

• To compute and display your hireability score
• To render your public profile page
• To show you on the developer map and leaderboard (opt-in)
• To send transactional emails (invite codes, account notifications)
• To improve the platform through aggregated analytics

3. Who can see your data

Your public profile is visible to anyone by default. You can set your profile to private in your dashboard settings.

Company accounts can view your score and profile if your visibility is set to public. We do not sell your personal data to third parties.

4. Data storage

Data is stored in MongoDB (hosted on MongoDB Atlas). We use Upstash Redis for caching. All services are cloud-hosted with encryption at rest and in transit.

5. Third-party services

• GitHub OAuth: For authentication and public activity data.
• Vercel: Hosting and analytics.
• Resend / Nodemailer: Transactional email delivery.
• Mapbox: Developer map rendering (no user data sent).

6. Cookies and local storage

We use session cookies for authentication (via NextAuth). We do not use advertising or tracking cookies.

7. Your rights

You have the right to:

• Access the data we hold about you
• Request deletion of your account and all associated data
• Update your profile visibility to private at any time
• Opt out of the leaderboard from your dashboard settings

To exercise these rights, contact us.

8. Data retention

We retain your data as long as your account is active. When you delete your account, we delete your personal data within 30 days, except where retention is required by law.

9. Changes

We may update this policy. We will notify you of material changes via the platform or email.

10. Contact

Privacy questions? Contact us.