Privacy Policy

Saywise (“Saywise,” “we,” “us,” or “our”), operated by Lifebook Labs LLC, helps you build a next-generation professional profile that shows your work, and helps organizations find and hire people through it. This Privacy Policy explains what information we collect, how we use and share it, and the choices you have. It applies to the Saywise website, applications, and related services (the “Service”). Lifebook Labs LLC is the company responsible for the personal information described in this Policy (the data controller, where that term applies), except where this Policy says an organization is a separate controller of information it receives. This Policy describes how we process your information; your use of the Service is governed by our Terms of Service.

Three things are worth reading before anything else: your profile is built to be public and machine-readable (section 5), if it is discoverable, employers can find and contact you without you applying to them (section 6), and for some roles the application step is a recorded interview conducted by an AI agent (section 4).

1. Information we collect

Information you give us

• Account information: your name, email address, username, and (if you choose to sign in with a third-party provider such as Google) the basic profile information that provider returns to us.
• Profile content: the bio, work history, education, skills, links, photos, videos, audio, written stories, posts, articles, answers to questions, endorsements, and any other content you create or upload to build your profile.
• Imported content: information you choose to import from external sources — a resume you upload, a LinkedIn profile you point us at, or a GitHub or Hugging Face account you connect. We parse this content to help structure your Saywise profile, and we keep the raw imported data so we can re-process it and show you where a detail came from.
• Preferences: career interests, industries, seniority, role and location preferences, desired compensation, availability, and other signals you provide to help us surface relevant opportunities.
• Applications: cover notes and your answers to an employer's questions (including video answers), your AI screening interviews where a role uses them (see “AI screening interviews”), plus the applications, drafts, and their status.
• Endorsement requests: when you ask someone for an endorsement, the name and email address you provide for them, which we use to send the request and to connect the endorsement to their account if they later join.
• Communications: messages you send through the Service, support requests, and feedback you provide to us.
• Billing information: if you subscribe to a paid plan, our payment processor (Stripe) collects and processes your payment details and shares limited billing information — such as your name, email, subscription status, and the last digits of your card — with us. We never receive or store your full card number.
• Organization information: if you create, claim, or administer an organization, the details you provide about it, and any credentials you supply to connect an applicant-tracking system (stored encrypted).

Information we collect automatically

• Usage data: actions you take in the Service — pages viewed, features used, content created, search queries, jobs viewed, applications submitted, and similar product events — along with timestamps and session identifiers.
• Device & log data: IP address, browser type and version, operating system, device identifiers, referring URLs, language preferences, and diagnostic data such as crash reports and performance metrics.
• Profile visit data: when a Saywise profile is viewed, we record the visit — including the visitor's IP address, user agent, referring URL, country, and, if the visitor is signed in, their identity. See “Profile visits” below.
• Cookies & similar technologies: we and our service providers use cookies, local storage, and similar technologies for authentication, session management, security, preferences, and product analytics. See “Cookies and analytics” below.

Information from third parties

If you sign in with Google or link another third-party provider, that provider shares limited profile information with us as authorized by you. When you ask us to import a LinkedIn profile, we retrieve it through a third-party scraping provider on your instruction. We also collect information about companies and job listings from public and third-party sources — job boards and applicant-tracking systems, company websites, public datasets, and news sources — to build the organization and role information shown in the Service. For our own outreach, we also obtain professional profile information and contact details (including email addresses) about prospective users and organizational contacts from public sources and licensed data providers. We use that information only to invite people to Saywise or to contact organizations, and anyone can ask us to delete it by emailing team@saywise.com, whether or not they have an account.

Information about people without accounts

Some information we hold is about people who do not have a Saywise account. If a member asks us to send you an endorsement request, we receive your name and email address from that member so we can deliver it. If you use public features without an account, such as our career quiz, we collect the answers you submit and keep your results page so your link keeps working. And as described above, we obtain contact information about prospective users from public sources and licensed providers for our own outreach. If you are not a Saywise user, you can ask us to delete information about you at team@saywise.com.

In the categories used by US state privacy laws, the information above includes: identifiers (name, email address, username, IP address); professional and employment information; education information; audio and visual information (videos, audio, and screening interview recordings you create); internet activity (usage and device data, profile visits); commercial information (subscription and billing records); and inferences we derive to power matching (such as embeddings, extracted skills and seniority, and match scores). We do not collect precise geolocation (we derive only your country from your IP address), government identifiers, or other categories of sensitive personal information as those laws define them.

2. How we use information

We use information to:

• Provide, operate, and maintain the Service and your account.
• Build and host your profile, including transcoding video, generating thumbnails, captions, and transcripts, producing PDF and machine-readable versions of your profile, and rendering your public pages.
• Power AI features that help you build and improve your profile — resume and profile parsing, content coaching and drafting, video scripts, topic and tool suggestions, and narrative structuring.
• Match profiles to opportunities in both directions. We compute and store representations of your background and preferences (including text embeddings and extracted attributes such as seniority, skills, industries, and role families) and compare them with job listings — and, for employers, compare candidate profiles against their open roles to produce ranked candidate lists and written fit assessments.
• Deliver applications, messages, invitations, and notifications between you and organizations.
• Process payments, manage subscriptions, and administer referrals and rewards.
• Send transactional emails (for example, verification codes, security alerts, applicant digests, and updates about your account) and, where permitted, notification and marketing emails you can opt out of.
• Personalize the Service — for example, by surfacing roles, organizations, candidates, and content relevant to you.
• Measure usage and engagement, debug and improve the Service, and develop new features.
• Detect, prevent, and respond to fraud, abuse, security incidents, and violations of our Terms of Service.
• Comply with legal obligations and enforce our rights.

We do not sell your personal information, we do not share it for cross-context behavioral advertising, and we do not send your content to AI providers for them to train their foundation models. Public profiles are a separate matter: because they are deliberately open to AI and search crawlers (section 5), third parties that crawl the public web, including AI companies, may use public profile content under their own policies once they have collected it.

Where laws such as the EU or UK GDPR apply to our processing, we rely on: performance of our contract with you (providing the Service, hosting and publishing the profile you build, delivering your applications and messages); our legitimate interests (securing and improving the Service, preventing fraud and abuse, showing profile owners who visited their profile, and reaching out about Saywise), balanced against your rights; your consent where we ask for it, which you can withdraw at any time; and compliance with legal obligations.

3. AI processing

Many Service features rely on AI. To provide them, we send relevant content — such as parts of your profile, a resume you upload, an experience you want to write about, or a question you ask — to AI providers that process it on our behalf under data-processing terms that prohibit them from using it to train their own foundation models. Today those providers are Anthropic (Claude), Google (Gemini), and OpenAI (text embeddings), and we use a hosted observability tool (Langfuse) to record AI requests and responses so we can debug and improve quality — which means content sent to an AI feature is also recorded in those traces.

Uploaded video is processed by our video provider (Mux), which transcodes it and can generate captions and transcripts automatically.

AI is also used on the employer side: when an organization views a candidate, we may generate a written assessment of how that candidate's background fits the role, based on the candidate's profile and the job description, and cache it. AI outputs — including match scores, rankings, and fit assessments — are automated estimates and can be inaccurate. They are not decisions about you: employers decide whom to contact, interview, and hire, and our Terms require organizations to apply human judgment and not to use AI outputs as the sole basis for rejecting or selecting a candidate. You should review AI suggestions before publishing or relying on them. Depending on where you live, you may have rights around automated processing; see “Your choices & rights”.

4. AI screening interviews

Some roles use an AI screening interview as the application step. If a role does, we tell you before anything starts: the interview is a live, recorded video conversation conducted by an AI voice agent, and your camera and microphone are required. During the interview, your live audio, your first name, and a digest of your profile and the role are processed by our conversational-AI voice provider (ElevenLabs) to run the conversation and to produce a transcript. The recording is stored with your application and processed by our video provider (Mux).

After the interview, AI generates a written summary and a structured assessment of the content of your answers (their relevance, specificity, and reasoning; not your accent, fluency, or delivery). If you submit, the organization's admins can review the recording, the transcript, and these AI outputs alongside your application, and the assessment contributes to how that organization's applicant list is ordered. You review your interview and explicitly submit it before anything reaches the organization; a draft you discard without ever submitting is deleted, while attempts that failed for technical reasons or that you replaced with a retake may be retained for integrity and audit purposes.

Interview recordings contain your face and voice, but we do not create or store biometric identifiers from them: no faceprints, voiceprints, or face- or voice-geometry templates, and we do not use interviews to identify you biometrically. The assessment evaluates what you said, not who you are or how you sound.

Practice (mock) interviews use the same live AI conversation, so your audio is processed by our voice provider during the session, but Saywise keeps no recording, transcript, or assessment from a practice interview.

You can always choose not to take an AI interview; for roles that use one as the application step, that means applying through another channel the organization offers, or not applying to that role through Saywise. You can request deletion of an interview recording, its transcript, and its assessment at any time by emailing team@saywise.com; if an organization has received copies, we will pass your request on to it.

5. Public profiles & machine-readable content

Saywise profiles are designed to be shared. Content on your profile that is not marked private — such as your name, username, profile photo, bio, work history, education, stories, videos, posts, answers, and endorsements you accept — is intentionally visible to anyone with the link, may be indexed by search engines, and may be used in link previews. Other users can see, share, and reference it. Do not put information in your public profile that you do not want to be public.

Public profiles are deliberately readable by machines. We publish your public profile in structured formats — JSON, Markdown, vCard, and PDF versions, plus structured data embedded in the page — and our site explicitly permits AI and search crawlers (such as those operated by OpenAI, Anthropic, Google, Perplexity, and others) to read public profiles. Some of these crawlers collect content for AI training as well as for search and assistants; that is part of what makes your profile useful to AI tools, and it means public profile content may be used by third parties under their own policies. Those exports never include your email address. Once third parties have crawled or copied public content, we cannot control or recall it.

In your settings you can make your profile non-indexable. That removes it from search-engine indexing, from our sitemap, from the machine-readable exports, and from employer candidate search — but it does not make your profile private: the page still loads for anyone who has the URL.

6. Employers, discovery & applications

If your profile is discoverable, organizations using the Service can find you through candidate search and automated recommendations without you having applied to them. What they can see includes your name, username, photo, headline and role, location preferences, availability, seniority, years of experience, skills, and the compensation preferences you entered, together with a match score and an AI-written fit assessment. We do not disclose your email address to organizations through candidate discovery, applications, or other hiring features; they contact you through the Service, and they can invite you to apply to a role.

When you submit an application, the organization receives your profile, cover note, and answers (including video answers), and, for roles with AI screening interviews, your interview recording, transcript, and AI assessment, and can see your application's status. Withdrawing an application does not retrieve or delete what the organization has already received. Applications you start but do not submit are drafts and are not shared with the organization. Organizations may also receive digests and periodic reports naming candidates who match their roles.

Organizations are separate controllers of the candidate information they receive, and their own privacy practices govern what they do with it once received. Our Terms of Service require them to use it only to evaluate and contact candidates about genuine roles, and prohibit them from exporting, selling, or repurposing it. You can leave the discoverable pool at any time by turning off visibility in your settings.

7. Profile visits

When a profile is viewed, we record the visit so the profile's owner can see who and what is reading it. Each visit record can include the time, the visitor's IP address, user agent, referring URL, and country, whether the visitor was a person, an AI agent, or a crawler (and which one), and — if the visitor was signed in to Saywise — their account identity.

The profile owner sees a visitor breakdown that includes, for signed-in visitors, the visitor's name, username, and photo, and for others the visitor class, agent, referring URL, browser user agent, and country. We do not show the owner a visitor's raw IP address. If you view someone's Saywise profile while signed in, expect them to know you did. Visits from you to your own profile, and repeat visits within a short window, are not counted.

We retain these visit records, including IP address, user agent, and viewer identity, for as long as the visited profile's account exists, to support all-time visit counts, deduplicate repeat visits, and investigate abuse.

8. Messages

Direct messages are visible to you and the person you are messaging. A message thread with an organization is shared across that organization: every administrator of the organization can read and reply to it and can see its read state. Messages are not end-to-end encrypted; we can access them to operate the Service, investigate abuse, and comply with law.

9. How we share information

We share information only as described below:

• With other users and the public: content you publish on your profile, or otherwise do not mark private, is accessible as described in “Public profiles & machine-readable content”.
• With organizations: as described in “Employers, discovery & applications”.
• With service providers: vendors who process information on our instructions and only for purposes we authorize. Today these include Amazon Web Services (cloud hosting, database, storage, and email delivery), Mux (video processing and delivery), Stripe (payments), Anthropic, Google, and OpenAI (AI processing), ElevenLabs (the voice agent for AI screening and practice interviews), Langfuse (AI observability), PostHog (product analytics and feature flags), Sentry (error and performance monitoring), and providers we use for imports, enrichment, and outreach such as Apify (LinkedIn profile import, and public professional profile information for our outreach), Brandfetch (company logos), and business-contact data providers (currently Amplemarket and FullEnrich).
• With applications you authorize: if you connect a third-party app or AI client to your account, it can access your account with the permissions you granted until you revoke them.
• For legal reasons: when we believe disclosure is required by law, legal process, or government request; to enforce our agreements; to protect the rights, safety, and property of Saywise, our users, or others; or to investigate fraud, security, or technical issues.
• In a corporate transaction: in connection with a merger, acquisition, financing, reorganization, sale of assets, or bankruptcy, your information may be transferred to a successor or affiliate. We will require the recipient to honor this Policy or notify you of any material change.
• With your direction: when you ask us to share information — for example, by sending your profile to a contact, sharing a tailored profile link, or connecting an integration.

10. Cookies and analytics

We use cookies and similar technologies for authentication, security, preference storage, and analytics. We use product-analytics tools (PostHog) to understand how the Service is used, to run feature flags, and to improve it, and error-monitoring tools (Sentry) to detect and diagnose problems. These tools may set their own identifiers and collect device and usage information on our behalf. We do not use advertising cookies. Where required, we will ask for your consent before using non-essential cookies.

11. Data retention

We keep the content and information in your account for as long as your account is active, so the Service works as you expect. Content you delete is removed from the Service, though copies may persist in backups and in caches for a period. Some specifics:

• Profile visit records, including IP address, user agent, and viewer identity, are retained for as long as the visited profile's account exists.
• Read notifications are deleted after 90 days.
• AI screening interviews: recordings, transcripts, and assessments are retained with your application while your account exists, including attempts that failed or were superseded by a retake. You can request deletion at any time (see “AI screening interviews”).
• Career quiz results, including quizzes taken without an account, are retained so result links keep working; email team@saywise.com to have one removed.
• Endorsement-request contact details (the name and email of the person asked) are retained to deliver the request and to connect the endorsement if they join; they can ask us to delete them at any time.
• Applications, answers, and messages are retained while the account exists, including after an application is withdrawn — and what an organization has already received stays with that organization.
• Imported source data (such as a parsed resume or an imported LinkedIn profile) is retained so we can re-process it and show provenance.

When you ask us to delete your account, we delete or anonymize the personal information associated with it within a reasonable time, except where we need to retain it to comply with legal obligations, resolve disputes, prevent abuse, or enforce our agreements.

12. Your choices & rights

You can review and update most of your information directly in the Service, control whether your profile is indexable and discoverable by employers, and delete individual content. Depending on where you live, you may also have rights to access, correct, delete, port, or restrict our processing of your personal information, and to object to certain processing or withdraw consent.

To close your account, or to make any other privacy request, email team@saywise.com from the address associated with your account. We will respond within the time required by applicable law. We will not discriminate against you for exercising your rights. If you are in the European Economic Area, the United Kingdom, or another jurisdiction with a data-protection authority, you also have the right to lodge a complaint with your local supervisory authority, though we would welcome the chance to resolve your concern first.

How requests work.We verify a privacy request by matching the email address it comes from to the account it concerns, and we may ask for more information if we cannot verify it that way. Where your state's law provides, you may use an authorized agent to submit a request on your behalf; we will ask the agent for proof of authorization and may still verify your identity directly. If we decline a request, we will explain why, and you may appeal by replying to our response with “Appeal” in the subject line; if we deny your appeal, you may contact your state attorney general.

Automated decision-making.Saywise generates scores, rankings, and assessments automatically, but it does not make solely automated decisions that produce legal or similarly significant effects about you: hiring decisions are made by the organizations you apply to or that contact you, and our Terms require them to apply human judgment. Depending on where you live, you may have rights to obtain human review of, express your point of view on, and contest a decision you believe was based on automated processing. To exercise these rights for Saywise-generated scores or assessments, email us; where the decision was an organization's, we will tell you which organization to contact and provide the scores and inputs we hold.

Selling and sharing.We do not sell personal information as most people understand that term, and we do not share it for cross-context behavioral advertising. If the disclosure of your discoverable profile to hiring organizations were considered a “sale” under a state law, you can opt out at any time by turning off employer discoverability in your settings, and that setting takes effect immediately. Our sites do not currently respond to browser opt-out signals such as Global Privacy Control because we do not sell or share personal information for advertising; if our practices change, we will honor those signals as required by law.

You can opt out of notification and marketing emails using the unsubscribe link in those messages or in your email-notification settings. Transactional emails (such as verification codes and security alerts) are necessary to operate the Service and cannot be opted out of without closing your account.

13. Security

We use technical, administrative, and physical safeguards designed to protect your information, including encryption in transit, encryption of credentials you give us for third-party integrations, access controls, and monitoring. A limited number of Saywise personnel can access production data, and in support, moderation, or safety situations can act on accounts and organizations (for example, correcting content or configuration); these actions are logged and audited internally. No system is perfectly secure, and we cannot guarantee the security of your information. Help us keep your account safe by using a strong, unique sign-in method and notifying us at team@saywise.com if you suspect unauthorized access.

14. International users

Saywise is operated from the United States. If you use the Service from outside the United States, your information will be transferred to, stored, and processed in the United States and in other countries where we or our service providers operate. Data-protection laws in these countries may differ from those in your country. Where applicable law requires safeguards for international transfers, we rely on measures such as our service providers' data-processing agreements, including standard contractual clauses where applicable.

15. Children

The Service is not intended for children under 16, and we do not knowingly collect personal information from anyone under 16. If you believe we may have collected information from a child under 16, contact us at team@saywise.com and we will take appropriate steps to delete it. We do not sell the personal information of anyone we know to be under 16.

16. Changes to this Policy

We may update this Policy from time to time. When we make material changes, we will update the “Last updated” date and, where appropriate, give you additional notice (for example, by email or an in-product message). Your continued use of the Service after the updated Policy takes effect constitutes acceptance of the changes.

17. Contact

Questions about this Policy or our privacy practices? Reach us at team@saywise.com. Postal mail: Lifebook Labs LLC, Saywise Privacy, United States.