Privacy Policy

Summary of Key Points

What personal information do we process?

When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us. See Section 1.

Do we process any sensitive personal information?

We do not process sensitive personal information such as racial or ethnic origins, sexual orientation, or religious beliefs.

Do we collect any information from third parties?

We do not collect any information from third parties.

How do we process your information?

We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. See Section 2.

With whom do we share personal information?

We may share information in specific situations with specific third parties. See Section 4.

How do we keep your information safe?

We have organizational and technical processes in place to protect your personal information. See Section 8.

What are your rights?

Depending on where you are located, applicable privacy law may give you certain rights regarding your personal information. See Section 10.

1. What Information Do We Collect?

Personal information you disclose to us

We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

The personal information we collect may include:

• Names
• Email addresses
• Job titles
• Career situation
• Resume and career documents uploaded by the user — including employment history, education, skills, dates of employment, and other career information
• Questionnaire answers provided during the assessment — including task allocation, work character, decision authority, business orientation, and aspiration frame responses
• Generated Career Resilience Report stored in your account — including resilience score, task-level exposure analysis, augmentation pressure analysis, resilience assets, and paths forward

Sensitive Information. We do not process sensitive information such as racial or ethnic origins, sexual orientation, religious beliefs, health data, or biometric data.

Payment Data. We may collect data necessary to process your payment if you choose to make purchases. All payment data is handled and stored by Stripe, Inc. You may find their privacy notice at stripe.com/privacy.

Information automatically collected

Some information — such as your IP address and browser characteristics — is collected automatically when you visit our Services.

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity but may include device and usage information such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, and information about how and when you use our Services.

We derive your approximate geographic location (city, region, country) from your IP address using the DB-IP geolocation database. We do not collect precise GPS or device-level location data. Your IP address is not stored.

We also collect information through cookies and similar technologies. For more information, see our Cookie Policy.

2. How Do We Process Your Information?

We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.

• Facilitate account creation, authentication, and account management
• Deliver and facilitate delivery of services
• Respond to user inquiries and offer support
• Send administrative information
• Fulfill and manage orders and payments
• Request feedback about your use of our Services
• Protect our Services (fraud monitoring and prevention)
• Identify usage trends to improve our Services
• Deliver the career assessment and generate your personalized report
• Improve accuracy and quality of assessments using aggregate, anonymized patterns
• Send transactional and service-related communications

3. What Legal Bases Do We Rely On?

We only process your personal information when we believe it is necessary and we have a valid legal reason under applicable law.

EU, UK, and Switzerland

Under the GDPR and UK GDPR, we rely on the following legal bases:

• Consent — You can withdraw your consent at any time by contacting us.
• Performance of a Contract — Fulfilling our contractual obligations to you, including providing our Services.
• Legitimate Interests — We may process your information when we believe it is reasonably necessary to achieve our legitimate business interests and those interests do not outweigh your interests and fundamental rights and freedoms. Specifically:
  • Provide the service you requested when you submitted your resume and completed the assessment
  • Improve the product for current and future users while ensuring results remain grounded in current labor market research
  • Maintain the integrity and security of user accounts and assessment data
  • Keep users informed about the service they signed up for and any changes that affect how their data is used
  • Analyze how our Services are used so we can improve them to engage and retain users
  • Diagnose problems and/or prevent fraudulent activities
  • Determine the effectiveness of promotional campaigns
• Legal Obligations — Compliance with applicable law.
• Vital Interests — Protecting safety when necessary.

Canada

We may process your information if you have given us express or implied permission. You can withdraw your consent at any time.

4. When and With Whom Do We Share Your Personal Information?

We may share information in specific situations described below.

• Business Transfers — In connection with any merger, sale of company assets, financing, or acquisition.
• Service Providers — Third-party providers who perform services on our behalf, including AI processing (Anthropic, OpenAI) and payment processing (Stripe). These providers are contractually bound to keep your information confidential.

We never share your resume, questionnaire answers, or generated report with employers or third parties without your explicit consent.

5. Do We Use Cookies and Other Tracking Technologies?

We use cookies only for essential functionality. We do not use advertising or analytics cookies.

We use cookies solely to maintain the security of our Services and your account, and to support core product functionality. For full details, see our Cookie Policy.

6. Do We Offer Artificial Intelligence-Based Products?

We offer products powered by artificial intelligence, machine learning, and similar technologies.

As part of our Services, we offer products powered by AI and machine learning (collectively, "AI Products"). These tools deliver the career assessment and generate your personalized Career Resilience Report.

Use of AI Technologies

We provide AI Products through third-party service providers ("AI Service Providers"), including Anthropic and OpenAI. Your input (resume, questionnaire answers) and personal information will be shared with and processed by these providers to enable delivery of your assessment.

Our AI Products

• Resume parsing and structured data extraction
• Personalized questionnaire generation
• Career resilience score computation and report generation

Important Limitation

The Career Resilience Report is generated using AI and published labor market research. It is informational only and does not constitute professional career advice, financial advice, or a guarantee of employment outcomes.

How to Opt Out

AI processing is integral to delivering the assessment. If you do not wish your data to be processed by AI, please do not use the assessment feature. Contact us at contact@hatalign.com with any questions.

7. How Long Do We Keep Your Information?

We keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Notice unless otherwise required by law.

Your resume, questionnaire answers, and any generated results are stored in your account for as long as your account is active. You may delete your account and all associated data at any time by contacting us at contact@hatalign.com.

If your account is inactive for 24 months, we may delete or anonymize your data after providing notice. When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it.

8. How Do We Keep Your Information Safe?

We aim to protect your personal information through organizational and technical security measures.

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure. You should only access the Services within a secure environment.

9. Do We Collect Information From Minors?

We do not knowingly collect data from or market to children under 18 years of age.

By using the Services, you represent that you are at least 18 years old. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data.

10. What Are Your Privacy Rights?

Depending on your location, you have rights that allow you greater access to and control over your personal information.

EU, UK, and Switzerland

If you are located in the EEA, UK, or Switzerland, you have the right to:

• Request access to and obtain a copy of your personal information
• Request rectification or erasure
• Restrict the processing of your personal information
• Data portability (where applicable)
• Object to processing
• Not be subject to automated decision-making

Withdrawing consent

You have the right to withdraw your consent at any time by contacting us at contact@hatalign.com. Withdrawal will not affect the lawfulness of processing carried out prior to withdrawal.

Account information

To review, update, or terminate your account, contact us at contact@hatalign.com. Upon request, we will deactivate or delete your account and information from our active databases, subject to legal retention requirements.

11. Controls for Do-Not-Track Features

Most web browsers include a Do-Not-Track ("DNT") feature. No uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals.

12. Do United States Residents Have Specific Privacy Rights?

If you are a resident of certain US states, you may have specific rights regarding your personal information.

If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have the right to request access to, correct, or delete your personal information.

Categories of personal information we collect

Your rights

• Know whether we are processing your personal data
• Access your personal data
• Correct inaccuracies
• Request deletion
• Obtain a copy of previously shared data
• Non-discrimination for exercising your rights
• Opt out of targeted advertising, sale of personal data, or profiling

We will use and retain the collected personal information for as long as your account is active (Categories A, B, D, I, and K). Data may be deleted or anonymized after 24 months of account inactivity.

How to exercise your rights

To exercise these rights, contact us at contact@hatalign.com. We will consider and act upon any request in accordance with applicable data protection laws.

Under certain US state data protection laws, you can designate an authorized agent to make a request on your behalf. We may deny a request from an authorized agent that does not submit proof of valid authorization.

Request verification

Upon receiving your request, we will need to verify your identity to determine you are the same person about whom we have information in our system.

Appeals

If we decline to take action regarding your request, you may appeal our decision by emailing us at contact@hatalign.com. If your appeal is denied, you may submit a complaint to your state attorney general.

California "Shine The Light" Law

California Civil Code Section 1798.83 permits California residents to request information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes. If you are a California resident and would like to make such a request, please contact us at contact@hatalign.com.

13. Do We Make Updates to This Notice?

We may update this Privacy Notice from time to time. The updated version will be indicated by an updated "Last updated" date at the top. If we make material changes, we may notify you by prominently posting a notice or by directly sending you a notification.

14. How Can You Contact Us?

15. How Can You Review, Update, or Delete Your Data?

Based on applicable laws, you may have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. You may also have the right to withdraw your consent.

To request to review, update, or delete your personal information, please email us at contact@hatalign.com.