1. Who we are
Futurly (the "Service") is operated by Futurly Group. For privacy questions you can reach us at privacy@futurlyapp.com. Under EU GDPR, we are the data controller for the personal data described below.
2. What we collect
We try to collect the minimum we need to deliver the assessment.
From everyone who uses the assessment
- Your assessment answers — current role, years of experience, day-to-day tasks, values, openness to change, and any optional context you provide. Used to generate your personalised result.
- Your IP address — kept transiently for rate limiting and abuse prevention. Not linked to your assessment content.
- Basic browser metadata sent automatically with every web request (user agent, language).
If you sign in or create an account
- Email address — to authenticate you and let you retrieve past assessments.
- Saved assessments — only stored if you're signed in and choose to save. Your saved assessment does not include your CV (see below).
If you make a payment
- Payment and subscription records — your email, the product purchased, the amount, and Stripe identifiers are stored so we can grant and manage your access. Your card details are handled directly by Stripe; we never see or store your full card number.
If you upload a CV (optional)
- The CV file and its extracted text — used solely as context to generate that one assessment. The CV text is sent to our AI provider (Anthropic) to produce your result. We do not store the CV file or its text on our servers: even when you save an assessment to your account, the CV content is stripped out before saving.
3. What we don't collect
- We do not use third-party advertising trackers, Google Analytics, Facebook Pixel, or similar.
- We do not sell or rent your data to anyone, ever.
- We do not use your assessment answers to train AI models.
4. Why we process your data (legal bases)
- To deliver the service you asked for (Article 6(1)(b) GDPR — performance of a contract): generating and showing you your assessment.
- Legitimate interests (Article 6(1)(f)): rate-limiting, security, fixing bugs.
- Consent (Article 6(1)(a)): for anything optional you explicitly opt into, like saving an assessment to an account.
5. Who we share data with
We use a small number of carefully chosen processors to run the service. They process your data only on our instructions:
- Anthropic, PBC (United States) — generates the AI analysis. Your assessment answers (and CV text/file, if provided) are sent to Anthropic's API. Anthropic does not train on this data per their commercial API terms.
- Stripe, Inc. (United States) — processes payments and manages subscriptions. When you pay, your email and card/billing details are handled by Stripe under their terms; we receive only confirmation of payment and non-sensitive identifiers, never your full card number.
- Supabase Inc. (data hosted in the EU) — stores user accounts and saved assessments, only if you create an account.
- DreamHost, Inc. — hosts the website and application server.
Where data is transferred outside the European Economic Area, we rely on Standard Contractual Clauses or equivalent safeguards required by GDPR.
6. How long we keep it
- Anonymous assessments (no account): the result lives only in your browser session. We do not store it on our servers.
- Saved assessments: kept until you delete them or close your account.
- CV files and CV text: not stored — used only transiently to generate your assessment, then discarded.
- Payment and subscription records: kept while your account is active and afterwards only as long as required to meet tax and accounting obligations, then deleted.
- Account email: kept while your account is active, deleted within 30 days of account closure.
- Server logs (IP, request metadata): rotated within 30 days.
7. Your rights under GDPR
You can exercise any of these by emailing privacy@futurlyapp.com. We respond within one month.
- Access — get a copy of the data we hold about you.
- Rectification — correct anything that's wrong.
- Erasure — delete your account and associated data ("right to be forgotten").
- Portability — receive your saved assessments in a portable JSON format.
- Restriction — ask us to pause processing in certain cases.
- Object — object to processing based on legitimate interests.
- Withdraw consent at any time, where processing is based on consent.
- Lodge a complaint with your local data protection authority.
8. Cookies
We use a single first-party cookie to keep you signed in if you have an account. We do not use third-party cookies, advertising cookies, or analytics cookies. No cookie banner is needed because we don't set any non-essential cookies.
9. Security
All traffic uses HTTPS. API keys for AI providers are held server-side and never sent to your browser. We follow standard practices for secure storage of credentials and limit access to production systems to the engineers who need it.
10. Children
Futurly is intended for adults navigating their careers. We do not knowingly collect data from anyone under 16. If you believe a child has used the service, contact us and we will delete their data.
11. Changes to this policy
If we make material changes, we'll update the "Last updated" date above and, where required, notify account holders by email. Continued use of the service after changes means you accept the updated policy.
12. Contact
Questions, requests, or complaints: privacy@futurlyapp.com.