Privacy Policy

1. What we collect

We collect only what is necessary to deliver your skill risk assessment and improve the service:

• Assessment inputs. Job descriptions, role descriptions, task descriptions, profession choices, career stage, priorities, industry, and years of experience that you enter into the assessment form.
• Your email address. Required if you want us to email your results. Optional if you submit a bug report and want us to follow up.
• Marketing preferences. Whether you opt in to Amanda Bruun's Substack newsletter or express interest in B2B services.
• Assessment results. The generated analysis, including velocity scores, task classifications, recommendations, repositioning paths, and human edge items.
• Session and usage data. A session identifier for sharing results, CTA click events (which offer you expressed interest in), and the page URL when you submit a bug report.
• Bug reports. Description, category, and optional email when you use the bug-reporting feature.

2. What we do not collect

• We do not require you to create an account or log in.
• We do not collect your name, address, phone number, or government ID.
• We do not use cookies for tracking or advertising.
• We do not sell or rent your data to third parties.

3. How we use your data

• To generate your assessment. Your inputs are sent to AI models via the Lovable AI Gateway to produce the analysis. Inputs and outputs are stored so you can retrieve and share your results.
• To email your results. If you provide an email, we send you a link to your assessment. We may also send you the Substack newsletter if you opted in.
• To improve the service. We review aggregated, de-identified patterns in assessments and bug reports to fix issues and refine the methodology.
• To communicate with you. Only if you explicitly provide an email and request follow-up (e.g., bug reports).

4. AI processing

Your inputs are processed by large language models (via the Lovable AI Gateway) to generate the assessment. These models do not retain your data for training purposes in this context, and we do not use your inputs to train our own models. Your assessment is generated in real time and stored in our backend database.

5. Data storage and security

Your data is stored in Lovable Cloud (powered by Supabase), which uses industry-standard encryption at rest and in transit. Access to raw data is limited to the Hartfull IQ team. We use Row-Level Security policies to prevent unauthorized access to assessment records.

While we take reasonable precautions, no online service is perfectly secure. We do not store payment information — all payments are processed directly by Stripe on their secure infrastructure.

6. Sharing with third parties

We share data only with the following service providers, and only what is necessary for them to perform their function:

• Lovable / Supabase — backend database and authentication infrastructure.
• Stripe — payment processing (if you purchase a coaching session). Stripe receives only the payment details you enter on their checkout page.
• AI model providers — your assessment inputs are sent to models via the Lovable AI Gateway for analysis. No personally identifying information is sent beyond what you type into the assessment form.

7. Data retention

We retain assessment records and bug reports indefinitely so you can access shared results links and so we can improve the service. If you want your data deleted, email amanda@hartfulliq.com and we will remove your records within 30 days.

8. Your rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Withdraw marketing consent at any time
• Lodge a complaint with a data protection authority

To exercise any of these rights, contact us at amanda@hartfulliq.com.

9. Children

While the student pathway is designed for people choosing college majors and career paths, we do not knowingly collect data from children under 13. If you believe a child under 13 has submitted personal information, contact us and we will delete it.

10. Changes to this policy

We may update this privacy policy as the service evolves. If we make material changes, we will update the "Last updated" date at the top of this page. Continued use of the service after changes constitutes acceptance of the revised policy.

11. Contact

Questions about this privacy policy? Reach out to amanda@hartfulliq.com.