Privacy Policy

Version v1.1 · Effective 2026-06-29

STEADION ("we") helps serious professionals take control of their careers. This policy

explains exactly what data we hold, why, how long we keep it, and the rights you have

over it. It is written to be CCPA- and GDPR-aware.

What We Collect

• Account data — name, email, authentication method.
• Career data — work history, skills, resumes, target roles, opportunities, contacts, and the Career Intelligence we build with your consent.
• Usage data — feature usage and, only with your cookie consent, product analytics.

How We Use It

We use your data to operate STEADION's career tools. Our AI processes your career data

only for the consent classes you have turned on (see Settings → AI Privacy). You can

revoke any AI consent at any time.

Your Data Is Never Sold

We never sell or share your personal data with third parties for their own purposes.

This is a contractual commitment, not just a statement of intent. Career data is among

the most personal data a person can entrust to a system, and we treat it that way.

Data Retention

We keep your data for as long as your account is active. When your account is cancelled,

your trial lapses without converting, or you delete your account, your data is retained

for 90 days and then permanently and irreversibly purged. During

the 90-day window after an explicit deletion you can log back in and

restore your account.

Active Sessions and IP Addresses

Your account's active-session list displays the IP address associated with each

session so you can spot sessions you do not recognize. We process IP addresses to secure

your account.

Military / Veteran Data

For STEADION Warrior, veteran status is verified through ID.me. **We never store your

ID.me credential data, government ID numbers, or service documents.** We retain only the

boolean fact is_veteran_verified and your branch of service to apply Warrior benefits

and to help translate military experience for civilian roles.

Third-Party Sub-Processors

We use a small set of vetted sub-processors that may process your data on our behalf:

• Anthropic — AI analysis, generation, and coaching (career content you consent to).
• OpenAI — AI extraction and audio transcription.
• MongoDB Atlas — secure database hosting (stores your account and career data).
• Emergent — application hosting and compute infrastructure.
• Google — "Sign in with Google" authentication (only if you use it).
• PostHog — product analytics (only if you accept analytics cookies).
• Stripe — payments and subscriptions.
• SendGrid — transactional email.

International transfers. Where a sub-processor processes data outside your region, the

transfer is governed by Standard Contractual Clauses (SCCs) or an equivalent lawful

transfer mechanism. We never send government ID numbers to any AI provider.

Your Rights

You can export all of your data and delete your account at any time from

Settings → Privacy & Data. You may also access, rectify, restrict, or object to specific

processing. See the AI Disclosure for how our AI uses your data.