ReliPR Privacy Policy

1. What We Collect

We only collect what we need to operate, secure, and improve ReliPR.

A. You Provide Directly:

• Account & Profile: Your name, email, professional headline, bio, skills, links, and—for Business or Creator accounts—your company or brand details.
• Resume/CV (Optional): When you upload a resume, we parse it to help fill your profile. We do not keep a permanent copy unless you choose to store it.
• User Content: Your posts, comments, peer reviews, feedback, and messages.
• Support & Sales Interactions: Any inquiries or support tickets you submit.

B. Automatically Collected:

• Usage & Device Data: Information about how you interact with our Service, such as pages viewed, your approximate location (from IP address), and browser/device identifiers.
• Cookies & Similar Technologies: Please see our "Cookies & Tracking" section below.

C. Created or Derived by Us:

• PICAR™ Score & Artifacts: Your assessment results, improvement pathways, verifiable achievements, weighted peer‑review data, and community reputation signals.
• Aggregates/Analytics: De‑identified trends that do not personally identify you.

D. From Third Parties:

• Single Sign‑On (SSO): If you sign in with Google or LinkedIn, they provide us with basic profile information like your name and email.
• Payments: Our payment processor, Stripe, handles your payment data. We only store limited billing metadata, such as your subscription plan.

Children: ReliPR is for professionals and is not intended for children under 13. We do not knowingly collect personal information from children.

2. How We Use Personal Data

• To Provide the Service: We use your data to create your account, compute your PICAR score, power search and discovery, and enable community features.
• To Personalize & Improve: We recommend learning paths and collaborators and analyze usage to make our Service better.
• For Community Operations & Safety: We display your public profile and posts as you configure them and use automated moderation to detect spam and abuse.
• For Security & Legal Compliance: We monitor for security incidents and comply with legal obligations like tax and accounting.

We do not sell your personal information, and we do not use it to build advertising profiles for third parties.

3. Legal Bases for Processing (for GDPR/UK-GDPR)

Where GDPR or the UK-GDPR applies, we process your personal data based on Contract, Legitimate Interests, your Consent (for optional marketing), and Legal Obligation.

Profiling & Automated Decision-Making: Our PICAR scoring and safety systems are algorithmic. However, they do not produce decisions with legal or similarly significant effects without human involvement. This means your PICAR score is designed to provide insight and help you get discovered; it is not used to automatically make final hiring decisions or deny you opportunities. You can request a human review of an automated outcome.

4. Cookies & Tracking

We use necessary cookies to run the site (like keeping you logged in) and functional/analytics cookies to help us improve the Service. We currently do not use advertising cookies for cross-site targeted ads. You can manage your preferences through our cookie settings and your browser. We honor Global Privacy Control (GPC) signals where legally required.

5. When We Share Personal Data

We only share the minimum data necessary:

• With Service Providers: Companies like Supabase (hosting) and Stripe (payments) that process data on our behalf under strict confidentiality agreements.
• With Other Users & the Public: Information you choose to make public, such as your profile, PICAR score, and public group posts.
• For Legal & Safety Reasons: To comply with the law, respond to lawful requests, or protect our rights and the safety of our users.

6. International Transfers

We may transfer personal data to other countries (like the United States). When we do, we use appropriate legal safeguards, such as Standard Contractual Clauses and the Data Privacy Framework.

7. Data Retention

We retain your personal data only as long as necessary. Your account profile and PICAR artifacts are kept for the life of your account and are deleted within 90 days after you delete your account.

8. Your Rights & How to Exercise Them

You have the right to access, correct, delete, and restrict your data. You may withdraw consent for marketing at any time. You can exercise these rights using your in-product tools or by contacting us at privacy@relipr.ai. Depending on your location (e.g., California, Europe), you have specific rights detailed by laws like GDPR and CPRA, which we are committed to honoring for all users.

9. Security

We use industry-standard security measures, such as encryption and least-privilege access, to protect your data. No system is perfectly secure, but we are committed to safeguarding your information.

10. Changes to This Policy

We will post any updates to this policy on this page. If a change materially affects your rights, we will provide a more prominent notice, such as an in-product banner or an email.