Privacy Policy

1. Information we collect

• Account and identity data (such as name, email, login events, and account metadata).
• IV profile content, including work preferences, CARL stories, and uploaded materials.
• Career Agent settings, recruiter message threads, and candidate approval actions.
• Usage and device data needed for security, analytics, and product reliability.

2. Cookies and browser storage

Intraview uses HTTP cookies for authentication, app functionality, and anonymous product telemetry. We also use browser local storage to save your IV drafts and interface preferences on your device. When you opt in, we use PostHog for product analytics, Sentry Session Replay for error reproduction, and Vercel Analytics for page-level web metrics. These analytics tools only activate after you accept the “Analytics” cookie category. We do not use any advertising or cross-site tracking cookies. For a complete list of cookies, local storage keys, and third-party services, see our Cookie & Storage Policy.

3. How we use information

• Provide and secure the Intraview service.
• Generate and route Career Agent drafts based on your configured boundaries.
• Operate support, debugging, and abuse prevention workflows.
• Improve product quality, reliability, and user experience.

4. Legal bases (where applicable)

Depending on your location, we process personal data under legal bases such as contract performance, legitimate interests, consent, and legal compliance.

5. Data sharing

We may share data with:

• AI processing (Anthropic). The Career Agent sends your profile data, work history, CARL stories, and recruiter conversation context to Anthropic's Claude API to generate agent responses. Anthropic does not use API data to train its models. See Anthropic's Privacy Policy.
• Payment processing (Stripe). Subscription billing, payment method storage, and invoicing are handled by Stripe. Intraview never stores credit card numbers on its servers. See Stripe's Privacy Policy.
• Infrastructure (Supabase). Authentication, database hosting, and row-level security are provided by Supabase.
• Monitoring and analytics. Error monitoring (Sentry), product analytics (PostHog), and page-level metrics (Vercel Analytics) — analytics tools activate only after you accept the Analytics cookie category.
• Log aggregation (Axiom). Server and edge request logs — including IP addresses, URL paths, and browser identifiers — are forwarded to Axiom for security monitoring, debugging, and reliability purposes. This processing is based on legitimate interest, not consent. Logs are retained for 30 days. See Axiom's Privacy Policy.
• Recruiters and viewers you authorize through your published profile links.
• Authorities when required by law or to protect rights and safety.

We do not sell personal information.

5a. AI and model training

Intraview does not use your data to train machine-learning models. Data sent to Anthropic's Claude API for Career Agent features is processed under Anthropic's API terms, which prohibit using API inputs and outputs for model training. You may disable the Career Agent at any time from your account settings.

6. Candidate-private fields

Candidate-only fields, including honesty-layer context and private coaching rationale, are not exposed on public recruiter surfaces.

7. Data retention

We retain personal data for as long as necessary to provide the service, maintain account history, resolve disputes, and satisfy legal obligations. When no longer needed, data is deleted or anonymized.

• IV profiles and agent data are retained while your account is active and deleted upon account deletion (subject to the 30-day grace period).
• Career Agent conversation history (recruiter messages, agent responses, coaching insights, and episodic memories) is retained while your account is active. You may request deletion at any time.
• Billing records may be retained for up to 7 years after account closure as required by tax and accounting obligations.
• Audit logs are retained for compliance purposes and are not deleted upon account deletion.

8. Security

We use reasonable administrative, technical, and organizational safeguards to protect personal data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. Your rights and choices

• Access and portability. Download a complete copy of your data in JSON format from Settings → Privacy → Your data.
• Deletion. Request account deletion from Settings → Privacy → Danger zone. Deletion takes effect after a 30-day grace period, during which you may cancel the request.
• Correction. Update your profile, CARL stories, and agent settings directly in the application.
• Visibility controls. Toggle public agent page visibility and talent index participation from Settings → Privacy.
• Communication preferences. Manage email categories (digest, marketing, view notifications) from Settings → Notifications or via one-click unsubscribe links in emails.
• Depending on jurisdiction, you may also request restriction of or objection to processing by emailing privacy@intraview.work.

10. International transfers

If data is transferred across borders, we use appropriate safeguards required by applicable law.

11. Changes to this policy

We may update this Privacy Policy periodically. Material changes will be posted on this page with an updated effective date.

12. Contact

Questions or privacy requests can be sent to privacy@intraview.work.