Privacy Policy
Version 2 · Updated 2026-08-06
Draft pending legal review
What we process and why
Account data (email, sign-in events) to operate your account. Profile and evidence content you add, to provide the product. Q&A logs (questions asked on your page and the answers given) so you can see what was asked and so abuse can be limited. Employer data (organizations, postings, applications, decisions) to run the hiring features. Legal bases: performance of our contract with you, and legitimate interests in security, abuse prevention, and minimal product analytics.
The sharing model
You control visibility. Private content is visible only to you. Published pages show only what you marked public. Share links and applications reveal exactly the items you granted, revocably. Recruiters' questions about you are logged where you can read them — auditability is a feature, and a promise.
AI processing
AI is used to propose structure from your résumé (nothing is added without your approval) and to answer questions strictly from evidence you approved. Questions from visitors are checked against your blocked categories and protected-characteristic rules before any retrieval happens. AI-generated content is always labeled. Your private content is not used to train models.
Processors
We use Supabase (database, auth, storage), Fly.io (application hosting) behind Cloudflare, an AI inference provider (answer and extraction generation), Resend (transactional email, once enabled), and PostHog (EU-hosted, server-side product analytics with no cookies and no client-side tracker; public pages carry no per-visitor identifier). Each receives only what its function needs.
Special category data
We do not ask for, store, or infer race, ethnicity, religion, disability or health status, sexual orientation, gender identity, pregnancy, family status, political opinions, trade union membership, genetic or biometric data. There is no demographic self-identification anywhere in the product and no field for one. Questions probing a protected characteristic are refused before any evidence is retrieved — on your public page, and on an employer's screening questions, which are also refused at the point an employer tries to save one. Criminal history, salary history, credit data, date of birth and graduation year have no column and no form field either. If an employer is a federal contractor with its own duty to invite that information, the invitation would happen after you apply, on its own screen, and no person at that employer or at obradero could read your answer — we have not built it, and will not until a contractor customer needs it.
Where your data is processed
Application hosting is Fly.io in Ashburn, Virginia; the database, authentication and file storage are Supabase in the eastern United States; transactional email is Resend; product analytics is PostHog, EU-hosted. The AI provider processes the text of a question and the evidence retrieved to answer it. These are predominantly US-hosted, so for candidates in the EU/EEA and the UK, transfers rely on the processors' standard contractual clauses and the UK addendum where applicable. Ask us for the current list at any time.
Automated processing
AI writes screening answers from evidence you published, and answers an employer's further questions about that evidence — cited, and readable by you on your applications page. It produces no score about you, ranks no one against anyone, and rejects no application: a person makes every hiring decision, and the product has no mechanism to make one automatically. So no decision with legal or similarly significant effects is made about you solely by automated means, and the safeguards in Article 22 GDPR (and its UK counterpart as amended by the Data (Use and Access) Act 2025) are not engaged. If that ever changes, this section changes first and you will be asked to accept a new version.
Cookies
We set only cookies necessary for sign-in (Supabase auth session) and a functional cookie remembering which workspace you last used. No advertising or analytics cookies exist, which is why there is no cookie banner.
Retention and deletion
Content stays until you delete it or your account. Account deletion is self-serve, immediate, and removes profile, evidence, uploads, Q&A logs tied to your profile, and derived data; a deletion request is also sent to our analytics processor. Export everything as JSON first from the dashboard.
Your rights
Access, rectification, export, deletion, and objection work through the dashboard or by contacting us. If you are in the EU/EEA you can also complain to your supervisory authority.
Reporting content
Anyone can report a page they believe is unlawful via the report link on public pages. Reports are reviewed by a human; reporters who leave an email receive the outcome.
Contact
Privacy questions and rights requests: [email protected] (interim beta contact).