Privacy Policy
Last updated: May 2026
1. What We Collect and Why
We collect account info from your OAuth provider (GitHub or Google), profile and onboarding data you enter, work submissions, AI Coach chat history, and operational logs (AI token usage, audit events). Product-analytics usage data is collected separately and only with your consent (see section 4). We use this data solely to operate the platform, generate your credibility profile, and debug and improve the Service. We do not sell your data or use it for advertising.
2. Automated Processing
Porvelo uses AI (Anthropic's Claude models) to evaluate submissions and generate mentorship plans. These are first-pass automated decisions; they are not professional career or hiring advice and may be incorrect. To challenge an evaluation, email privacy@porvelo.com and we will review it on a best-effort basis.
3. Third-Party Services
We use the following services to operate. Each processes your data under its own privacy policy.
- Anthropic: AI evaluation and mentor chat. Privacy policy
- Stripe: Payment processing. Privacy policy
- Google Cloud Platform: Application hosting. Privacy policy
- Neon: Database hosting. Privacy policy
- Upstash: In-memory caching. Privacy policy
- Resend: Transactional email delivery. Privacy policy
- Sentry: Error monitoring. Privacy policy
- PostHog: Product analytics and session replay, loaded only after you accept analytics in the cookie banner. EU data residency. Privacy policy
- GitHub: OAuth sign-in only. Privacy policy
- Google: OAuth sign-in only. Privacy policy
4. Cookies and Analytics
We use PostHog for product analytics and session replay so we can see how the product is used and improve it. This processing only starts after you accept it in the consent banner shown on your first visit. If you decline, or have not chosen yet, no analytics or session replay runs and nothing is sent to PostHog.
You can change your choice at any time using the "Cookie settings" link in the footer. Sign-in and security cookies that are strictly necessary to run the Service are always set and are not covered by this choice.
5. Data Retention
We retain your data while your account is active. You can delete your account at any time from Settings → Profile, which cascades through all account-linked records. Billing records are kept only as long as legally required.
6. Your Rights and Contact
You have the right to access, correct, or delete your personal data. EU/EEA/UK users have additional rights under GDPR; California users under CCPA/CPRA. To exercise any right, email privacy@porvelo.com.
We may update this policy as the product evolves and will notify users of material changes. Continued use after changes constitutes acceptance.
Porvelo is the data controller for personal data processed through this Service. For general support, email support@porvelo.com.