Privacy Policy

What we collect

• Employer accounts: your email address, used to create your account and send you sign-in links. No passwords are stored because we don’t use passwords.
• Candidate profiles: the information candidates submit about themselves (name, photo, location, work history, skills, preferences) for the purpose of being presented to hiring companies.
• Interview requests: which signed-in employer asked about which candidate, so we can coordinate the interview.
• Certification waitlist: the email address you give us, so we can tell you when certification opens. You can leave it from the empty directory page or, once you’ve had a conversation, from the optional prompt at the end of a chat with our AI assistant. Either way it goes on the same list.
• Operational records: short-lived rate-limit counters (which may be keyed by network address) to prevent abuse of our forms.
• AI assistant conversations: if you chat with our AI assistant, we save the conversation together with a non-reversible fingerprint of your network address, for abuse review. It is not linked to a candidate or employer account. There is currently no fixed deletion schedule for these conversations.
• Resumes: if you upload a resume, we send it to an AI provider to read it and pull out your work history. We do not store the file itself, only the text you choose to keep on your profile is saved.

What we don’t do

• No advertising trackers, ad pixels, or ad retargeting.
• No sale of personal information to anyone.
• The only cookie we set is a session cookie that keeps you signed in.

How information is used and shared

Published candidate profiles are listed in a directory that only signed-in hiring companies can browse. An individual profile can also be opened by anyone holding its link, so it can be shared without the recipient needing an account. Published profiles are excluded from search-engine indexing. We share data only with the service providers that run the product: Supabase (database and file storage), Vercel (hosting), Resend (transactional email), and Anthropic, the AI provider that reads uploaded resumes and powers our AI assistant. Each processes data on our behalf.

Retention and your choices

Expired sessions, sign-in tokens, invites, and rate-limit records are deleted automatically on a nightly schedule. Candidate profiles persist until the candidate or our team removes them. If you have an account, you can take your profile off the public directory yourself, at any time, from Privacy & account in your dashboard. It happens immediately and you can put it back up the same way. You can also delete your account and everything attached to it from that same page, it happens immediately and cannot be undone. To access or correct your information, or to come off the waitlist, email mike@sendwarmup.com and we’ll take care of it.

Changes

If this policy changes in a way that matters, we’ll update this page and adjust the date above.