Skip to main content

Privacy Policy

Last updated: May 2026

1. What We Collect and Why

We collect account info from your OAuth provider (GitHub or Google) or your email address when you sign in with a one-time code; profile and onboarding data you enter; work submissions; AI Coach chat history; and operational logs (AI token usage, audit events). We also collect behavioral signals to operate the credibility scoring system: task attempt counts, time between submissions, task completion rates, and streak activity. These signals are used solely to calculate your credibility score and personalise your plan. Product-analytics usage data is collected separately and only with your consent (see section 4). We use this data solely to operate the platform, generate your credibility profile, and debug and improve the Service. We do not sell your data or use it for advertising.

Role simulation (Time Machine): If you play the role simulation without signing in and choose to provide your email address, we use it to send you your results and add you to the Porvelo waitlist. Providing your email is entirely optional and unrelated to playing the simulation. Your email is stored for waitlist communication and results delivery. You can unsubscribe or request deletion at any time by emailing privacy@porvelo.com with the subject line "Delete my simulation email."

2. Automated Processing

Porvelo uses AI (Anthropic's Claude models) to evaluate submissions and generate mentorship plans. These are first-pass automated decisions; they are not professional career or hiring advice and may be incorrect. To challenge an evaluation, email privacy@porvelo.com and we will review it on a best-effort basis.

3. Third-Party Services

We use the following services to operate. Each processes your data under its own privacy policy.

4. Cookies and Analytics

We use PostHog for product analytics and session replay so we can see how the product is used and improve it. This processing only starts after you accept it in the consent banner shown on your first visit. If you decline, or have not chosen yet, no analytics or session replay runs and nothing is sent to PostHog.

Stripe sets a device fingerprinting cookie (__stripe_mid and related) on pages that load Stripe scripts, including the pricing page. This is set before checkout and is required for payment fraud prevention. Stripe controls this cookie under their own privacy policy.

You can change your choice at any time using the "Cookie settings" link in the footer. Sign-in and security cookies that are strictly necessary to run the Service are always set and are not covered by this choice.

5. Data Retention

We retain your data while your account is active. You can close your account at any time from Settings. On closure, all personal information (name, email, profile, and linked URLs) is erased immediately.

Submissions, evaluation scores, and conversation history are retained in de-identified form under legitimate interest: billing compliance, AI model quality, and aggregate analytics. Billing records are kept only as long as legally required.

6. Your Rights and Contact

You have the right to access, correct, or delete your personal data. EU/EEA/UK users have additional rights under GDPR; California users under CCPA/CPRA. You can exercise these rights directly from your Account settings: download a full copy of your data or permanently delete your account. For requests that cannot be completed in-product, email privacy@porvelo.com.

We may update this policy as the product evolves and will notify users of material changes. Continued use after changes constitutes acceptance.

Porvelo is the data controller for personal data processed through this Service. For general support, email support@porvelo.com.

Terms of Service →