Privacy Policy

1. Introduction & Scope

Waypointer ("we," "us," or "our") is an AI-powered career transition platform. Employers purchase seat licenses on behalf of departing employees to provide personalized career support including resume optimization, job matching, interview preparation, and outreach assistance.

This Privacy Policy describes how we collect, use, store, and protect your personal information when you use the Waypointer platform, website, and related services (collectively, the "Service"). It applies to all users of the Service, including employees who receive access through their employer and employers who administer seat licenses.

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use the Service.

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, and authentication credentials. Employer administrators also provide company name and billing information.

Career Data

To provide personalized career support, we collect information you provide including work history, job titles, skills, achievements, education, certifications, target roles, seniority level, management experience, industry preferences, and career goals.

Uploaded Documents

You may upload resumes, LinkedIn profile data, and other career-related documents. These files are stored securely and used solely to provide the Service.

AI-Generated Content

The Service generates tailored resumes, cover letters, LinkedIn profile rewrites, outreach messages, and interview preparation materials on your behalf. This generated content is stored in your account.

Job Application & Outreach Data

We store records of jobs you save, applications you track, outreach messages you compose, and your interaction with job listings.

Interview Session Data

If you use our mock interview feature, we process voice data through our voice AI provider to conduct practice interviews. We store transcripts and feedback from these sessions.

Usage Data

We automatically collect information about how you interact with the Service, including pages visited, features used, timestamps, browser type, device information, and IP address.

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service, including AI-powered resume optimization, job matching, interview preparation, and outreach assistance
• Process your career data through AI to generate personalized content tailored to your target roles and industries
• Match you with relevant job listings based on your skills, experience, and preferences
• Provide aggregated, anonymized analytics to your employer about overall program usage (never individual data)
• Send you transactional emails related to your account and Service usage
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations

4. AI Processing Disclosure

Waypointer uses artificial intelligence to generate career content on your behalf. When you use AI-powered features, relevant portions of your career data are sent to our AI provider, Anthropic, via their Claude API for processing.

Important: Your data sent to Anthropic's Claude API is processed solely to generate your requested content. Per Anthropic's API data policy, data submitted through the API is not used to train or improve their AI models. Your career information is not retained by Anthropic after processing your request.

AI processing is used for the following features: resume content extraction, resume generation and optimization, cover letter generation, LinkedIn profile rewrites, outreach message drafting, interview question generation, interview feedback, and career readiness scoring. All AI-generated content is reviewed and editable by you before use.

5. Data Sharing

With Your Employer

Your employer, who purchased your Waypointer seat license, receives only aggregated, anonymized program metrics. These include overall activation rates, general feature usage statistics, and program-wide engagement trends. Your employer never has access to your individual career data, uploaded documents, AI-generated content, job applications, outreach messages, interview sessions, or any other personal information. This separation is enforced at the technical level through our database architecture and access controls.

With Third-Party Service Providers

We share data with third-party providers solely to operate the Service (see Section 6). These providers are contractually obligated to use your data only for the purposes of providing their services to us and are bound by appropriate data protection obligations.

We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to third parties for marketing or advertising purposes.

Legal Requirements

We may disclose your information if required to do so by law or in response to valid legal process, such as a court order or subpoena.

6. Third-Party Services

The Service relies on the following third-party providers to operate. Each provider receives only the minimum data necessary to perform its function:

• Anthropic (Claude API) — AI content generation. Receives career data relevant to the specific content being generated. Data is not used for model training.
• Supabase — Database hosting, authentication, and file storage. All user data is stored in Supabase infrastructure with row-level security enforced.
• Vercel — Application hosting and deployment. Processes web requests and serves the application.
• Resend — Transactional email delivery. Receives email addresses and message content for account-related communications sent from support@getwaypointer.com.
• OpenWeb Ninja (JSearch API) — Job listing data. We send job search queries (job titles, locations, keywords) to retrieve relevant listings. No personal career data is shared with this provider.
• ElevenLabs — Voice AI for mock interview practice sessions. Voice data is processed in real time to conduct practice interviews.

7. Data Security

We take the security of your data seriously and implement multiple layers of protection:

• All data is transmitted over HTTPS with TLS encryption in transit
• Data at rest is encrypted using industry-standard encryption provided by our infrastructure providers
• Uploaded files (resumes, documents) are stored in private storage buckets and are never publicly accessible. Access is granted through time-limited presigned URLs that expire after one hour
• Row-level security (RLS) policies are enforced at the database level, ensuring that each user can only access their own data
• Authentication is handled through industry-standard protocols with secure session management
• Server-side API keys and secrets are never exposed to client-side code
• We conduct regular reviews of our security practices and update them as needed

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

8. Employer-Employee Data Separation

A core principle of Waypointer is the strict separation between employer and employee data. This separation is fundamental to our platform design and is enforced at every level:

• Employers cannot access individual employee data. The employer dashboard displays only aggregated, anonymized metrics about overall program engagement.
• Employers cannot see which specific employees have activated their accounts, what jobs they are applying to, what content they have generated, or any other individual activity.
• This data isolation is enforced at the database level through access control policies. It is not merely a user interface restriction but a technical enforcement built into our data architecture.
• Waypointer support staff access to individual data is limited to what is necessary for troubleshooting and is governed by internal access policies.

9. Data Retention

Your access to the Waypointer platform is active for 90 days from the date you activate your seat. During this period, you have full access to all features and your stored data.

After your 90-day access period expires:

• Your account will transition to a read-only state. You will no longer be able to generate new content or use AI-powered features, but you may still access and download your existing data.
• We retain your data for a reasonable period after access expiry to allow you to retrieve your materials. After this retention period, your data will be securely deleted.
• You may request deletion of your data at any time by contacting us (see Section 15).

Unused seat licenses that have not been activated expire 12 months from the date of purchase.

10. Your Rights

You have the following rights regarding your personal data:

• Access: You can access your personal data at any time through your Waypointer account. You may also request a copy of all data we hold about you.
• Correction: You can update or correct your personal information through your account settings or by contacting us.
• Deletion: You can request that we delete your account and all associated data. We will process deletion requests within 30 days, subject to any legal retention requirements.
• Data Portability: You can export your career data, generated documents, and other content from the platform in standard formats (PDF, DOCX).
• Objection: You can object to certain types of processing of your data. If you object to AI processing, please note that this may limit the functionality available to you.

To exercise any of these rights, contact us at support@getwaypointer.com.

11. Cookies & Tracking

Waypointer uses cookies strictly for essential platform functionality:

• Authentication cookies: Used to maintain your login session and keep you securely authenticated as you use the platform.
• Preference cookies: Used to remember your settings and preferences within the application.

We do not use third-party advertising cookies, tracking pixels, or any form of cross-site tracking. We do not serve ads and do not share browsing data with advertising networks.

12. Children's Privacy

Waypointer is a professional career transition platform designed for adults in the workforce. The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from anyone under 18 years of age. If we become aware that we have collected data from someone under 18, we will take prompt steps to delete that information. If you believe a minor has provided us with personal data, please contact us at support@getwaypointer.com.

13. International Data Transfers

Your information may be transferred to and processed in countries other than the country in which you reside. Our service providers, including our hosting, database, and AI processing providers, operate infrastructure in the United States and other jurisdictions.

When we transfer data internationally, we ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by posting the updated policy on this page with a revised effective date. For significant changes, we may also notify you via email.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: