← Back to home

Privacy Policy

Last updated: 28 February 2026

1. Who we are

GetPromoted ("we", "us", "our") provides an online tool that helps tech professionals build promotion packets. This policy explains how we handle your information when you use getpromoted.app (the "Service").

2. Information we collect

We collect information you provide directly:

  • Setup details: your first name, role, company, current level, target level, and promotion timeframe.
  • Interview responses: the answers you give during the guided interview.
  • Promotion criteria: if you paste your company's promotion criteria or level expectations, this text is used to tailor your interview and packet. It is processed in-session and not stored on our servers.
  • Uploaded documents: files you choose to upload (performance reviews, chat exports, emails, calendar data). These are processed in your browser and only the extracted text is sent to our servers.
  • Payment information: if you purchase a packet, payment is processed by Stripe. We never see or store your card details.

We also collect standard technical data such as browser type, device information, and usage patterns to keep the service running smoothly.

3. How we use your information

  • To conduct your interview and generate your promotion packet
  • To process payments via Stripe
  • To improve the quality of the service
  • To respond to support requests

4. Third-party services

We use the following third-party services to operate:

  • Anthropic (Claude): processes your interview responses to generate your packet. Your data is sent to Anthropic's API, which does not use API inputs or outputs to train models. Anthropic may retain API logs for up to 30 days for safety and abuse monitoring, after which they are deleted. See their privacy policy.
  • Stripe: handles payment processing. Subject to Stripe's privacy policy.
  • Google (optional): if you choose to connect your Google account, we access Gmail, Calendar, and Chat data with read-only permissions. Tokens are encrypted and stored in HTTP-only cookies.
  • Slack (optional): if you choose to connect your Slack workspace, we access message history with read-only user-level permissions. Tokens are encrypted with AES-256-GCM and stored in HTTP-only cookies.
  • Microsoft Clarity: if you accept analytics cookies, we use Clarity to understand how visitors interact with the Service (e.g. clicks, scrolls, page views). Clarity may use cookies and does not collect personal data. Subject to Microsoft's privacy statement. You can opt out via the cookie consent banner.

5. Google user data

If you choose to connect your Google account, the Service requests read-only access to your Gmail, Google Calendar, and Google Chat data. This access is used solely to extract evidence (e.g. accomplishments, peer feedback, project references) that strengthens your promotion packet.

How we use Google user data:

  • To search for and display relevant messages, events, and conversations within your browser session so you can select evidence for your promotion packet.
  • To send selected evidence to our AI provider (Anthropic) for processing as part of generating your promotion packet. Anthropic does not use API inputs or outputs to train models and deletes API logs within 30 days.

Sharing, transfer, and disclosure: We do not share, transfer, or disclose your Google user data to any third parties other than Anthropic, and only to the extent necessary to provide the Service (generating your promotion packet). We do not use Google user data for advertising, market research, or any purpose unrelated to providing the Service.

Storage and retention: Google OAuth tokens are encrypted with AES-256-GCM and stored in HTTP-only cookies that expire at the end of your session. We do not store your Google user data (emails, calendar events, chat messages) on our servers. All Google data is processed in-session and discarded after your packet is generated.

Revoking access: You can disconnect your Google account at any time from the evidence screen within the Service, or by revoking access at myaccount.google.com/permissions.

GetPromoted's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

6. Data retention

Your promotion packet is stored in your browser's local storage. We do not maintain a database of user accounts or generated packets. Interview transcripts are not stored on our servers after your packet is generated. Payment tokens expire after 7 days. Anthropic (our technology provider) may retain API request data for up to 30 days for safety monitoring, after which it is automatically deleted. They do not use your data to train their models.

7. Security

We use encryption in transit (HTTPS) and encrypt sensitive tokens with AES-256-GCM. File uploads are processed entirely in your browser. We do not store raw uploaded files on our servers.

8. Your rights

Since we don't maintain user accounts or a database of your data, most of your information lives in your browser. You can clear your local storage at any time to remove your packet. If you connected a Google or Slack account, you can disconnect it from the evidence screen. For any data-related requests, contact us at the email below.

Depending on where you live, you may have additional rights under GDPR, CCPA, or other local laws. See sections 9 and 10 below.

9. For users in the European Economic Area (GDPR)

If you are located in the EEA, UK, or Switzerland, the General Data Protection Regulation (GDPR) applies to how we process your personal data.

Legal basis for processing: We process your data based on (a) your consent (e.g. when you accept analytics cookies or connect Google/Slack), (b) contractual necessity (e.g. to generate your promotion packet after purchase), and (c) our legitimate interests (e.g. to detect fraud and maintain security).

Your rights under GDPR:

  • Access: request a copy of the personal data we hold about you.
  • Rectification: ask us to correct inaccurate data.
  • Erasure: request deletion of your personal data ("right to be forgotten").
  • Restriction: ask us to limit how we process your data.
  • Portability: receive your data in a structured, machine-readable format.
  • Object: object to processing based on legitimate interests.
  • Withdraw consent: where processing is based on consent, you may withdraw it at any time (e.g. by declining analytics cookies or disconnecting Google/Slack).

Data transfers: Your data may be processed in the United States by our service providers (Anthropic, Stripe, Vercel). These transfers are protected by Standard Contractual Clauses or equivalent safeguards.

To exercise any of these rights, email support@getpromoted.app. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

10. For users in California (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) and its amendment, the California Privacy Rights Act (CPRA), give you specific rights regarding your personal information.

Categories of personal information we collect:

  • Identifiers: first name, email address (if provided via exit-intent form).
  • Professional information: role, company, level, promotion criteria.
  • Internet activity: browsing data collected via Microsoft Clarity (if you consent).
  • Commercial information: payment records processed via Stripe.

Your rights under CCPA / CPRA:

  • Right to know: request what personal information we collect, use, and disclose.
  • Right to delete: request deletion of your personal information.
  • Right to opt out of sale or sharing: we do not sell or share your personal information for cross-context behavioural advertising.
  • Right to non-discrimination: we will not treat you differently for exercising your rights.
  • Right to correct: request correction of inaccurate personal information.
  • Right to limit use of sensitive data: we only use sensitive data (interview responses, uploaded documents) to provide the Service.

To exercise these rights, email support@getpromoted.app with the subject "CCPA Request". We will verify your identity and respond within 45 days.

11. Cookies

We use a minimal number of cookies: an encrypted HTTP-only cookie for Google/Slack OAuth tokens (if you connect those services), and standard session cookies. If you accept analytics cookies via our consent banner, Microsoft Clarity may set cookies to analyse usage patterns. We do not use advertising or tracking cookies. You can withdraw cookie consent at any time by clearing your browser cookies and revisiting the site.

12. Children's privacy

The Service is not intended for anyone under 16. We do not knowingly collect information from children. If you believe we have collected data from a child under 16, contact us and we will promptly delete it.

13. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top will reflect any changes. Continued use of the Service after changes constitutes acceptance.

14. Contact us

If you have questions about this privacy policy or want to exercise your data rights, email us at support@getpromoted.app.