Privacy Policy

Last updated 3 September 2026 · Applies to the Ahead staging environment

This is the policy. If you're looking for the live record of what happened to your data — every read, write and disclosure on your own account — that's a different page: your privacy activity log.

What we collect

What you give us

• Your name and email address, when you create an account.
• A password, stored only as a salted hash. We never hold the password itself.
• Your job search criteria: target roles, locations, work arrangement, compensation target, industry exclusions.
• Your résumé or LinkedIn URL, if you choose to add one, and the work history extracted from it.
• Your city and state, if you provide them.
• Self-identification information, only if you choose to provide it at application time, with separate explicit consent.

What we generate

• Matches between your profile and job postings, and the reasoning behind each one.
• Applications prepared for your review, and the record of which you approved.
• An append-only audit trail of every application attempt and its verified state changes.
• Product analytics — counts and event names describing whether the product is working. This data is run through a scrubber that drops anything shaped like an email address, phone number or national identifier rather than storing it.

What we do not collect

Ahead never infers race, ethnicity, sex, gender, age, date of birth, disability, veteran status, religion, national origin, marital status, pregnancy or sexual orientation from anything you write, however clearly a sentence might imply it. These are collected only if you volunteer them, at application time, with consent recorded separately.

What we do with it

• Find and qualify job opportunities against the criteria you agreed to.
• Prepare application materials for you to review.
• Prepare you for interviews.
• Keep your search state so you don't have to.
• Understand whether the product works, using the scrubbed analytics described above.

We do not sell your personal information. We do not sell or rent your email address.

Who else sees it

Employers and recruiters see nothing about you by default. Employer visibility is off unless you turn it on, and even when you turn it on it starts at an anonymous scope: your name, résumé and contact details stay hidden until you separately choose to release them for a specific role.

We share data with service providers only as needed to run the product:

• Cloudflare — hosting, the database, and the bot check on our signup form.
• Stripe — payment processing, when you buy Get Ahead. Card details go directly to Stripe; Ahead never sees or stores your card number.
• Resend — transactional email such as password resets.

We disclose information to authorities only where legally required.

Where it lives

Data is stored on Cloudflare infrastructure. Your data is scoped to your account: every query in the product is bound to the identity in your session, and one account cannot read another's records.

How long we keep it

• Profile and search data — while your account is open, and deleted when you close it.
• The application audit trail — retained after account closure, because it is an append-only record of actions taken on your behalf and deleting it would destroy your own evidence of what happened.
• Payment records — retained as long as required for tax and accounting.
• Scrubbed analytics — retained indefinitely; it contains no personal information by construction.

Your rights

• See it. Your privacy activity log shows every access to your data.
• Correct it. Everything Aliya extracts is shown to you for correction before it counts as evidence. Your correction always wins.
• Withdraw permission. Discovery, application preparation and employer visibility are three separate switches in Settings, and any of them can be turned off at any time.
• Delete it. Ask us and we'll delete your account and personal data, subject to the audit trail and payment retention above.

Depending on where you live you may have additional rights under laws such as the GDPR or the CCPA, including access, portability, and the right to object. Exercise any of them by contacting us.

Cookies

Ahead sets one cookie: your session cookie. It is HttpOnly, SameSite=Lax, and Secure everywhere except local development. There are no advertising or third-party tracking cookies on this product.

Children

Ahead is not intended for anyone under 16, and we do not knowingly collect their information.

Changes

If we change this policy materially we'll say so here and update the date at the top. During beta, expect this document to become more specific rather than less.

Contact

Questions about this policy, or a request about your data: reach us through your account settings.