Home / Privacy

Privacy policy

Updated June 2026 · Competably

Handing over your career history takes trust. So we made the safe choices the default: no cookies, analytics only if you say yes, and the absolute minimum of data. This policy explains, in plain language, what we collect, why, who processes it, and the control you keep. It covers this website and the waitlist, and the Competably app — including the documents you share and how we use AI to help with your applications.

Who we are

The data controller for this website and the waitlist is Competably. For anything in this policy — questions, requests, complaints — email legal@competably.com.

What we collect, and why

• Waitlist: your email address, your explicit consent to be emailed about the launch, and which part of the page you signed up from (so we know what’s working). Legal basis: your consent (GDPR Art. 6(1)(a)), given by ticking the box on the form. That’s the only personal data the form collects.
• Analytics (only if you allow it): anonymous, cookieless usage statistics — pages viewed, country-level location, browser and device type. No personal identifiers, no cross-site tracking, and visitor sessions are discarded within 24 hours. Nothing loads until you click “Allow analytics”. Legal basis: consent (Art. 6(1)(a)), which you can withdraw at any time via Privacy choices in the footer.
• Security: when you submit the waitlist form, your IP address is checked in memory to block spam and abuse (rate limiting). It is used transiently and never stored. Legal basis: our legitimate interest in keeping the service working (Art. 6(1)(f)).

When you use the Competably app, you can share documents like your CV, P11/PHP or a LinkedIn export so Competably can help with your applications. We use these to build your profile, and the coaching text you write (your examples and experience) to generate drafts and feedback — both on the basis of your consent (Art. 6(1)(a)). We don’t store the files themselves: see How we use AI and how long we keep it.

Cookies & browser storage

This site sets no cookies. None — not for analytics, not for advertising, not for anything. Even when you allow analytics, it works without cookies or personal identifiers. We do use your browser’s own storage for three small, functional flags that never leave your device and contain no personal data:

• cmp_consent — remembers your analytics choice (yes or no) so we don’t ask again. Kept until you clear your browser data or change it via Privacy choices.
• cmp_waitlisted — remembers that you already joined, so we stop showing you the signup reminder. Kept until you clear your browser data.
• cmp_exit_shown — remembers that you’ve seen the signup reminder, so it doesn’t reappear. Deleted when you close the tab.

Who processes your data

We don’t sell or share your data for advertising — ever. Three service providers process data on our behalf, under data-processing agreements:

• Supabase (waitlist storage) — your email is stored in an EU region, encrypted at rest and in transit.
• Vercel (website hosting, and the opt-in analytics) — a US company, certified under the EU–US Data Privacy Framework.
• Resend (sends the welcome email with your free guide) — a US company, certified under the EU–US Data Privacy Framework. Delivery can use an EU sending region, but some email metadata is processed in the US under those safeguards.
• Anthropic, PBC (AI processing, via the Claude API) — a US company. When you use the app, the content of the documents you upload and the coaching text you submit is sent to Anthropic’s Claude API to extract your profile and generate drafts and feedback. Anthropic processes this only as our sub-processor under its Data Processing Agreement, which incorporates the EU Standard Contractual Clauses. Under Anthropic’s commercial terms, your data is not used to train Anthropic’s models. Its own sub-processors are listed at trust.anthropic.com/subprocessors.

In short: your waitlist data and your saved profile live in the EU. Some processing takes place in the United States — analytics and email under the EU–US Data Privacy Framework, and AI processing by Anthropic under the EU Standard Contractual Clauses (GDPR Chapter V).

How we use AI

Competably uses Anthropic’s Claude AI to read the documents you upload and to generate coaching content. Your uploaded file is processed in memory only to extract a structured profile — we don’t store the file itself. We keep only the structured profile (summary, roles, languages, competency examples) that you review and confirm, stored in the EU, and you can delete it at any time. The coaching text you write is also sent to the Claude API to produce drafts and feedback. Under Anthropic’s commercial terms, data sent to its API is not used to train Anthropic’s models, and it is processed in the United States. Competably coaches — it never invents experience, and never auto-fills or submits applications for you.

How long we keep it

Waitlist data is kept until the launch communications it was collected for are done, or until you ask us to delete it — whichever comes first. We keep a record of your consent for as long as we hold your email, as proof it was given. Analytics data is aggregated and anonymous; no individual profiles exist to retain.

We don’t retain uploaded files. A document you upload is discarded as soon as your profile has been extracted; only the structured profile text is stored, in the EU, and you can delete it at any time from your settings. Our AI sub-processor, Anthropic, deletes API inputs and outputs from its systems within about 30 days by default (longer for certain features, and up to 2 years if content is flagged for a policy violation), as described in its data-retention terms.

Your rights

Your data is yours. Under the GDPR you can ask us to access, correct, delete, restrict or export your data, and you can object to processing based on legitimate interest. You can withdraw consent at any time: unsubscribe from any email, or change your analytics choice via Privacy choices in the footer. To make any request, email legal@competably.com and we’ll action it. You also have the right to complain to a supervisory authority — ours is the CNPD in Luxembourg, but you can contact the authority in your own EU country.

What we never do

We never sell your data. We never auto-apply to jobs on your behalf or fill in portal fields for you — you stay in control of every submission. And Competably never invents experience; it only ever works from what you provide.

This is a plain-language policy written to be read, not a substitute for formal legal advice. If you have a question about your data, email legal@competably.com. Competably is independent and not affiliated with the United Nations or any of its agencies.