1. Who we are

GetPromoted ("we", "us", "our") provides an online tool that helps tech professionals build promotion packets. This policy explains how we handle your information when you use getpromoted.app (the "Service").

2. Information we collect

We collect information you provide directly:

Setup details: your first name, role, company, current level, target level, and promotion timeframe.
Interview responses: the answers you give during the guided interview.
Promotion criteria: if you paste your company's promotion criteria or level expectations, this text is used to tailor your interview and packet. It is processed in-session and not stored on our servers.
Uploaded documents: files you choose to upload (performance reviews, chat exports, emails, calendar data). These are processed in your browser and only the extracted text is sent to our servers.
Payment information: if you purchase a packet, payment is processed by Stripe. We never see or store your card details.

We also collect standard technical data such as browser type, device information, and usage patterns to keep the service running smoothly.

3. How we use your information

To conduct your interview and generate your promotion packet
To process payments via Stripe
To improve the quality of the service
To respond to support requests

4. Third-party services

We use the following third-party services to operate:

Anthropic (Claude): processes your interview responses to generate your packet. Your data is sent to Anthropic's API, which does not use API inputs or outputs to train models. Anthropic may retain API logs for up to 30 days for safety and abuse monitoring, after which they are deleted. See their privacy policy.
Stripe: handles payment processing. Subject to Stripe's privacy policy.
Microsoft Clarity: if you accept analytics cookies, we use Clarity to understand how visitors interact with the Service (e.g. clicks, scrolls, page views). Clarity may use cookies and does not collect personal data. Subject to Microsoft's privacy statement. You can opt out via the cookie consent banner.

5. Evidence you upload

You can optionally add evidence - performance reviews, 1:1 notes, emails, calendar exports, chat threads, or a LinkedIn export - to strengthen your promotion packet. You can also paste text directly.

Files are read in your browser. Uploaded files are parsed to plain text entirely on your own device. The files themselves are never transmitted to us and are never stored on our servers.

What does leave your device: the extracted text is included in the prompt sent to our AI provider (Anthropic) to generate your packet. Anthropic does not use API inputs or outputs to train models, and deletes API logs within 30 days. We do not retain that text after your packet is generated.

You stay in control: every item is optional, can be removed before the interview starts, and the entire evidence step can be skipped. Clearing your browser storage removes any evidence held locally.

The Service does not connect to your Google, Microsoft, or Slack accounts, and does not request access to your email, calendar, files, or messages.

6. Data retention

Your promotion packet is stored in your browser's local storage. We do not maintain a database of user accounts or generated packets. Interview transcripts are not stored on our servers after your packet is generated. Payment tokens expire after 7 days. Anthropic (our technology provider) may retain API request data for up to 30 days for safety monitoring, after which it is automatically deleted. They do not use your data to train their models.

7. Security

All traffic is encrypted in transit (HTTPS). Uploaded files are parsed entirely in your browser, so raw files never reach our servers. The token that unlocks a purchased packet is cryptographically signed (HMAC-SHA256), carries no personal data, and expires after 7 days.

8. Your rights

Since we don't maintain user accounts or a database of your data, most of your information lives in your browser. You can clear your local storage at any time to remove your packet. If you added evidence, you can remove it from the evidence screen. For any data-related requests, contact us at the email below.

Depending on where you live, you may have additional rights under GDPR, CCPA, or other local laws. See sections 9 and 10 below.

9. For users in the European Economic Area (GDPR)

If you are located in the EEA, UK, or Switzerland, the General Data Protection Regulation (GDPR) applies to how we process your personal data.

Legal basis for processing: We process your data based on (a) your consent (e.g. when you accept analytics cookies or upload evidence), (b) contractual necessity (e.g. to generate your promotion packet after purchase), and (c) our legitimate interests (e.g. to detect fraud and maintain security).

Your rights under GDPR:

Access: request a copy of the personal data we hold about you.
Rectification: ask us to correct inaccurate data.
Erasure: request deletion of your personal data ("right to be forgotten").
Restriction: ask us to limit how we process your data.
Portability: receive your data in a structured, machine-readable format.
Object: object to processing based on legitimate interests.
Withdraw consent: where processing is based on consent, you may withdraw it at any time (e.g. by declining analytics cookies or removing uploaded evidence).

Data transfers: Your data may be processed in the United States by our service providers (Anthropic, Stripe, Vercel). These transfers are protected by Standard Contractual Clauses or equivalent safeguards.

To exercise any of these rights, email support@getpromoted.app. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

10. For users in California (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) and its amendment, the California Privacy Rights Act (CPRA), give you specific rights regarding your personal information.

Categories of personal information we collect:

Identifiers: first name, email address (if provided via exit-intent form).
Professional information: role, company, level, promotion criteria.
Internet activity: browsing data collected via Microsoft Clarity (if you consent).
Commercial information: payment records processed via Stripe.

Your rights under CCPA / CPRA:

Right to know: request what personal information we collect, use, and disclose.
Right to delete: request deletion of your personal information.
Right to opt out of sale or sharing: we do not sell or share your personal information for cross-context behavioural advertising.
Right to non-discrimination: we will not treat you differently for exercising your rights.
Right to correct: request correction of inaccurate personal information.
Right to limit use of sensitive data: we only use sensitive data (interview responses, uploaded documents) to provide the Service.

To exercise these rights, email support@getpromoted.app with the subject "CCPA Request". We will verify your identity and respond within 45 days.

11. Cookies

We set no cookies of our own. Your packet, your cookie choice, and any evidence you add are kept in your browser's local storage, not on our servers. If you accept analytics cookies via our consent banner, Microsoft Clarity may set cookies to analyse usage patterns, and Stripe sets cookies on its own checkout pages to process your payment. You can withdraw consent at any time by clearing your browser storage and revisiting the site.

12. Children's privacy

The Service is not intended for anyone under 16. We do not knowingly collect information from children. If you believe we have collected data from a child under 16, contact us and we will promptly delete it.

13. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top will reflect any changes. Continued use of the Service after changes constitutes acceptance.

14. Contact us

If you have questions about this privacy policy or want to exercise your data rights, email us at support@getpromoted.app.

Privacy Policy