Privacy Policy

Saywise (“Saywise,” “we,” “us,” or “our”), operated by Lifebook Labs LLC, helps you build a next-generation professional profile that shows your work, and helps organizations find and hire people through it. This Privacy Policy explains what information we collect, how we use and share it, and the choices you have. It applies to the Saywise website, applications, and related services (the “Service”). By using the Service, you agree to this Policy and to our Terms of Service.

Two things are worth reading before anything else: your profile is built to be public and machine-readable (section 4), and if it is discoverable, employers can find and contact you without you applying to them (section 5).

1. Information we collect

Information you give us

• Account information: your name, email address, username, and (if you choose to sign in with a third-party provider such as Google) the basic profile information that provider returns to us.
• Profile content: the bio, work history, education, skills, links, photos, videos, audio, written stories, posts, articles, answers to questions, endorsements, and any other content you create or upload to build your profile.
• Imported content: information you choose to import from external sources — a resume you upload, a LinkedIn profile you point us at, or a GitHub account you connect. We parse this content to help structure your Saywise profile, and we keep the raw imported data so we can re-process it and show you where a detail came from.
• Preferences: career interests, industries, seniority, role and location preferences, desired compensation, availability, and other signals you provide to help us surface relevant opportunities.
• Applications: cover notes and your answers to an employer's questions (including video answers), plus the applications, drafts, and their status.
• Communications: messages you send through the Service, support requests, and feedback you provide to us.
• Billing information: if you subscribe to a paid plan, our payment processor (Stripe) collects and processes your payment details and shares limited billing information — such as your name, email, subscription status, and the last digits of your card — with us. We never receive or store your full card number.
• Organization information: if you create, claim, or administer an organization, the details you provide about it, and any credentials you supply to connect an applicant-tracking system (stored encrypted).

Information we collect automatically

• Usage data: actions you take in the Service — pages viewed, features used, content created, search queries, jobs viewed, applications submitted, and similar product events — along with timestamps and session identifiers.
• Device & log data: IP address, browser type and version, operating system, device identifiers, referring URLs, language preferences, and diagnostic data such as crash reports and performance metrics.
• Profile visit data: when a Saywise profile is viewed, we record the visit — including the visitor's IP address, user agent, referring URL, country, and, if the visitor is signed in, their identity. See “Profile visits” below.
• Cookies & similar technologies: we and our service providers use cookies, local storage, and similar technologies for authentication, session management, security, preferences, and product analytics. See “Cookies and analytics” below.

Information from third parties

If you sign in with Google or link another third-party provider, that provider shares limited profile information with us as authorized by you. When you ask us to import a LinkedIn profile, we retrieve it through a third-party scraping provider on your instruction. We also collect information about companies and job listings from public and third-party sources — job boards and applicant-tracking systems, company websites, public datasets, and news sources — to build the organization and role information shown in the Service. That enrichment is about organizations, not about building hidden profiles of individuals.

2. How we use information

We use information to:

• Provide, operate, and maintain the Service and your account.
• Build and host your profile, including transcoding video, generating thumbnails, captions, and transcripts, producing PDF and machine-readable versions of your profile, and rendering your public pages.
• Power AI features that help you build and improve your profile — resume and profile parsing, content coaching and drafting, video scripts, topic and tool suggestions, and narrative structuring.
• Match profiles to opportunities in both directions. We compute and store representations of your background and preferences (including text embeddings and extracted attributes such as seniority, skills, industries, and role families) and compare them with job listings — and, for employers, compare candidate profiles against their open roles to produce ranked candidate lists and written fit assessments.
• Deliver applications, messages, invitations, and notifications between you and organizations.
• Process payments, manage subscriptions, and administer invites and rewards.
• Send transactional emails (for example, verification codes, security alerts, applicant digests, and updates about your account) and, where permitted, notification and marketing emails you can opt out of.
• Personalize the Service — for example, by surfacing roles, organizations, candidates, and content relevant to you.
• Measure usage and engagement, debug and improve the Service, and develop new features.
• Detect, prevent, and respond to fraud, abuse, security incidents, and violations of our Terms of Service.
• Comply with legal obligations and enforce our rights.

We do not sell your personal information, we do not share it for cross-context behavioral advertising, and we do not use your content to train third-party foundation models.

3. AI processing

Many Service features rely on AI. To provide them, we send relevant content — such as parts of your profile, a resume you upload, an experience you want to write about, or a question you ask — to AI providers that process it on our behalf under data-processing terms that prohibit them from using it to train their own foundation models. Today those providers are Anthropic (Claude), Google (Gemini), and OpenAI (text embeddings), and we use a hosted observability tool (Langfuse) to record AI requests and responses so we can debug and improve quality — which means content sent to an AI feature is also recorded in those traces.

Uploaded video is processed by our video provider (Mux), which transcodes it and can generate captions and transcripts automatically.

AI is also used on the employer side: when an organization views a candidate, we may generate a written assessment of how that candidate's background fits the role, based on the candidate's profile and the job description, and cache it. AI outputs — including match scores, rankings, and fit assessments — are automated estimates and can be inaccurate. They are not decisions about you: employers decide whom to contact, interview, and hire. You should review AI suggestions before publishing or relying on them.

4. Public profiles & machine-readable content

Saywise profiles are designed to be shared. Content on your profile that is not marked private — such as your name, username, profile photo, bio, work history, education, stories, videos, posts, answers, and endorsements you accept — is intentionally visible to anyone with the link, may be indexed by search engines, and may be used in link previews. Other users can see, share, and reference it. Do not put information in your public profile that you do not want to be public.

Public profiles are deliberately readable by machines. We publish your public profile in structured formats — JSON, Markdown, vCard, and PDF versions, plus structured data embedded in the page — and our site explicitly permits AI and search crawlers (such as those operated by OpenAI, Anthropic, Google, Perplexity, and others) to read public profiles. Those exports never include your email address. Once third parties have crawled or copied public content, we cannot control or recall it.

In your settings you can make your profile non-indexable. That removes it from search-engine indexing, from our sitemap, from the machine-readable exports, and from employer candidate search — but it does not make your profile private: the page still loads for anyone who has the URL.

5. Employers, discovery & applications

If your primary profile is discoverable, organizations using the Service can find you through candidate search and automated recommendations without you having applied to them. What they can see includes your name, username, photo, headline and role, location preferences, availability, seniority, years of experience, skills, and the compensation preferences you entered, together with a match score and an AI-written fit assessment. We do not give organizations your email address; they contact you through the Service, and they can invite you to apply to a role.

When you submit an application, the organization receives your profile, cover note, and answers (including video answers), and can see your application's status. Withdrawing an application does not retrieve or delete what the organization has already received. Applications you start but do not submit are drafts and are not shared with the organization. Organizations may also receive digests and periodic reports naming candidates who match their roles.

Organizations are separate controllers of the candidate information they receive, and their own privacy practices govern what they do with it once received. Our Terms of Service require them to use it only to evaluate and contact candidates about genuine roles, and prohibit them from exporting, selling, or repurposing it. You can leave the discoverable pool at any time by turning off visibility in your settings.

6. Profile visits

When a profile is viewed, we record the visit so the profile's owner can see who and what is reading it. Each visit record can include the time, the visitor's IP address, user agent, referring URL, and country, whether the visitor was a person, an AI agent, or a crawler (and which one), and — if the visitor was signed in to Saywise — their account identity.

The profile owner sees a visitor breakdown that includes, for signed-in visitors, the visitor's name, username, and photo, and for others the visitor class, agent, referring URL, browser user agent, and country. We do not show the owner a visitor's raw IP address. If you view someone's Saywise profile while signed in, expect them to know you did. Visits from you to your own profile, and repeat visits within a short window, are not counted.

We retain these visit records — including IP address, user agent, and viewer identity — indefinitely, to deduplicate repeat visits and to investigate abuse.

7. Messages

Direct messages are visible to you and the person you are messaging. A message thread with an organization is shared across that organization: every administrator of the organization can read and reply to it and can see its read state. Messages are not end-to-end encrypted; we can access them to operate the Service, investigate abuse, and comply with law.

8. How we share information

We share information only as described below:

• With other users and the public: content you publish on your profile, or otherwise do not mark private, is accessible as described in “Public profiles & machine-readable content”.
• With organizations: as described in “Employers, discovery & applications”.
• With service providers: vendors who process information on our instructions and only for purposes we authorize. Today these include Amazon Web Services (cloud hosting, database, storage, and email delivery), Mux (video processing and delivery), Stripe (payments), Anthropic, Google, and OpenAI (AI processing), Langfuse (AI observability), PostHog (product analytics and feature flags), Sentry (error and performance monitoring), and providers we use for imports and enrichment such as Apify (LinkedIn import at your request) and Brandfetch (company logos).
• With applications you authorize: if you connect a third-party app or AI client to your account, it can access your account with the permissions you granted until you revoke them.
• For legal reasons: when we believe disclosure is required by law, legal process, or government request; to enforce our agreements; to protect the rights, safety, and property of Saywise, our users, or others; or to investigate fraud, security, or technical issues.
• In a corporate transaction: in connection with a merger, acquisition, financing, reorganization, sale of assets, or bankruptcy, your information may be transferred to a successor or affiliate. We will require the recipient to honor this Policy or notify you of any material change.
• With your direction: when you ask us to share information — for example, by sending your profile to a contact, sharing a tailored profile link, or connecting an integration.

9. Cookies and analytics

We use cookies and similar technologies for authentication, security, preference storage, and analytics. We use product-analytics tools (PostHog) to understand how the Service is used, to run feature flags, and to improve it, and error-monitoring tools (Sentry) to detect and diagnose problems. These tools may set their own identifiers and collect device and usage information on our behalf. We do not use advertising cookies. Where required, we will ask for your consent before using non-essential cookies.

10. Data retention

We keep the content and information in your account for as long as your account is active, so the Service works as you expect. Content you delete is removed from the Service, though copies may persist in backups and in caches for a period. Some specifics:

• Profile visit records are retained indefinitely, including IP address, user agent, and viewer identity.
• Read notifications are deleted after 90 days.
• Applications, answers, and messages are retained while the account exists, including after an application is withdrawn — and what an organization has already received stays with that organization.
• Imported source data (such as a parsed resume or an imported LinkedIn profile) is retained so we can re-process it and show provenance.

When you ask us to delete your account, we delete or anonymize the personal information associated with it within a reasonable time, except where we need to retain it to comply with legal obligations, resolve disputes, prevent abuse, or enforce our agreements.

11. Your choices & rights

You can review and update most of your information directly in the Service, control whether your profile is indexable and discoverable by employers, and delete individual content. Depending on where you live, you may also have rights to access, correct, delete, port, or restrict our processing of your personal information, and to object to certain processing or withdraw consent.

To close your account, or to make any other privacy request, email team@saywise.com from the address associated with your account. We will respond within the time required by applicable law. We will not discriminate against you for exercising your rights.

You can opt out of notification and marketing emails using the unsubscribe link in those messages or in your email-notification settings. Transactional emails (such as verification codes and security alerts) are necessary to operate the Service and cannot be opted out of without closing your account.

12. Security

We use technical, administrative, and physical safeguards designed to protect your information, including encryption in transit, encryption of credentials you give us for third-party integrations, access controls, and monitoring. A limited number of Saywise personnel can access production data to operate and support the Service. No system is perfectly secure, and we cannot guarantee the security of your information. Help us keep your account safe by using a strong, unique sign-in method and notifying us at team@saywise.com if you suspect unauthorized access.

13. International users

Saywise is operated from the United States. If you use the Service from outside the United States, your information will be transferred to, stored, and processed in the United States and in other countries where we or our service providers operate. Data-protection laws in these countries may differ from those in your country. By using the Service, you consent to these transfers, subject to applicable law and any safeguards required for international data transfers.

14. Children

The Service is not intended for children under 16, and we do not knowingly collect personal information from anyone under 16. If you believe we may have collected information from a child under 16, contact us at team@saywise.com and we will take appropriate steps to delete it.

15. Changes to this Policy

We may update this Policy from time to time. When we make material changes, we will update the “Last updated” date and, where appropriate, give you additional notice (for example, by email or an in-product message). Your continued use of the Service after the updated Policy takes effect constitutes acceptance of the changes.

16. Contact

Questions about this Policy or our privacy practices? Reach us at team@saywise.com. Postal mail: Lifebook Labs LLC, Saywise Privacy, United States.