Privacy Policy

Account and sign-in. Your email address and a record of your sign-ins. You can sign in with a link sent to your email, with Google, or with LinkedIn. With Google or LinkedIn we also receive your name, profile picture and an account identifier from that provider (details in sections 3 and 4). Your browser stores a session cookie so you stay signed in. If you create an account after following one of our posts or newsletters, we store that link's short reference (for example 2026w40-li) with your account; it is included in your data export and deleted with your career data or your account.

Purchases. What you bought, your subscription status and trial dates, amounts, and the Stripe customer and payment identifiers. Card details are entered directly with Stripe; we never see or store card numbers. When a free trial starts we keep the fingerprint Stripe gives the card (a code, not the card number) so each card gets one free trial.

Career tools (members, optional). The CV file you upload; the experience and skills read from it, each with the short passage of your CV it came from; profile fields you enter (such as location, work authorisation and years of experience); your job preferences; jobs you save or dismiss; and the fit results calculated for you.

Email and forms. Newsletter subscriptions, giveaway and waitlist requests, and inquiry forms (name, email, company and your message), with a record of when and where you gave consent to marketing email. Jobs you submit to the board.

Security. Hashed IP address and browser details on form submissions, short-lived rate-limit counters keyed by IP address, and server logs kept by our host.

Analytics. Only if you accept analytics cookies: Google Analytics, loaded through Google Tag Manager, records pages viewed and actions taken on the site, with device, browser and approximate location. Until you accept, neither loads. We do not send it your name, email or CV. Vercel Web Analytics counts page views without cookies or personal identifiers.

• To create your account, sign you in and keep your session secure (performance of our contract with you).
• To process purchases, run subscriptions and trials, and give you access to what you bought (contract; tax and accounting records are a legal obligation).
• To read your CV, build your skills profile and show your fit for each job, when you use the career tools (contract). You review every skill before it counts.
• To send the emails you asked for, such as sign-in links, receipts and billing notices, and for members a weekly job alert with new roles that fit their profile, which they can turn off in one click (contract), and marketing email only if you opted in (consent, which you can withdraw at any time).
• To prevent abuse and fraud and keep the service running (legitimate interests).
• To understand which pages and features are used, so we can improve them (consent, given in the cookie banner and withdrawn the same way).

We do not make decisions with legal or similarly significant effects about you by automated means alone.

When you choose "Continue with Google", Google shares the basic profile information covered by the email and profile permissions: your name, email address, profile picture and Google account identifier. We request no other access: not Gmail, Drive, Calendar, Contacts or any other Google data.

• Use: only to create your Agent Native account, sign you in, recognise you when you return, and show which account you are signed in as. If you already have an account with the same verified email, the Google sign-in is added to that account.
• Storage: in our sign-in database, hosted by Supabase, for as long as your account exists.
• Sharing: with no one except the service providers that host our sign-in and database on our behalf. We do not sell Google user data, do not use it for advertising, and do not send it to AI providers or use it to train AI models.
• Deletion: delete your account (section 8) and it is removed. You can also remove Agent Native's access at any time at myaccount.google.com/permissions.

Agent Native's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

When you choose "Continue with LinkedIn", LinkedIn shares your name, email address, profile picture and LinkedIn account identifier (the openid, profile and email permissions). We use them in the same limited way as Google sign-in data: to create your account and sign you in. We do not read your LinkedIn connections, posts or messages, and we do not post on your behalf. You can remove access in your LinkedIn settings under Data privacy, Permitted services.

The career tools are optional and available to members. When you upload a CV, it is sent to Anthropic, which reads it into experience and skills, each with the passage of your CV it came from. You then confirm or reject each skill. To show your fit for a job, your headline, experience and skills are compared with the job's requirements by TypeSafe, and the results are stored with your account. Your name, email address and sign-in data are not part of that comparison.

These providers process the data only to return results to us. Anthropic does not train its models on data sent through its commercial API. Your fit scores inform you; they are not sent to employers.

We use these service providers. Each processes personal data only on our instructions and for the purpose listed.

We may also disclose data if the law requires it, or to protect the rights and safety of our users and the service.

• Necessary: the sign-in session cookies that keep you signed in, a short-lived cookie used while signing in with Google or LinkedIn, and an_consent, which remembers your cookie choice for 180 days.
• Analytics, only if you accept: Google Analytics cookies (names starting with _ga) that measure how the site is used.
• Attribution, only if you accept: an_ref, which remembers which of our posts or newsletters brought you here (for example 2026w40-li) for 30 days, so we can count which posts bring in members.

The banner asks before any analytics cookie is set, and Reject is as easy as Accept. Change your choice at any time with Cookie settings at the bottom of every page; withdrawing removes the analytics and attribution cookies. You can also block or delete cookies in your browser settings. Blocking the necessary cookies stops sign-in from working.

• Account and sign-in data: while your account exists. To delete your account entirely, email us and we delete it within 30 days.
• Career data: you can export it or delete it yourself at any time on the Your data page in the career hub. Uploaded CV files, and the skills and experience read from them, are deleted automatically 12 months after upload, or 30 days after your membership ends if that comes first.
• Purchase and payment records: as long as tax and accounting law requires, typically up to 7 years.
• Card fingerprints kept to limit free trials: as long as we offer free trials, so a card cannot start a second one.
• Marketing email: until you unsubscribe, using the link in any email.
• Job alert records (which roles we sent you, and when): with your career data, deleted with it.
• Roles you saved or dismissed: with your career data, deleted with it.
• Analytics data: according to our Google Analytics retention setting, at most 14 months.
• Security logs and rate-limit counters: kept only as long as needed to protect the service.

Depending on where you live, including the European Union and the United Kingdom, you have the right to access your personal data, to correct it, to have it deleted, to restrict or object to its processing, to receive it in a portable format, and to withdraw consent at any time. Email desk@agentnative.dev and we answer within one month. Members can export or delete their career data themselves in the career hub. You also have the right to complain to the data protection authority where you live or work.

Some of our providers process data in the United States and other countries. Where data leaves the European Economic Area or the United Kingdom, those transfers rely on the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework.

Data is encrypted in transit. Uploaded CVs are kept in private storage that only our servers can read. Access to personal data is limited to what is needed to run the service. No system is perfectly secure; if a breach affects you, we will tell you as the law requires.

Agent Native is not directed at children under 16, and we do not knowingly collect their personal data.

We update this policy when our practices change and show the date at the top. If a change materially affects how we use your data, we will tell you by email or on the site before it takes effect.

For any privacy question or request, email desk@agentnative.dev.