Privacy Policy

Inglehoff LLC, doing business as WorkWomp ("WorkWomp," "we," "us," or "our"), operates the WorkWomp career decision advisor service. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights you have over your data.

By using WorkWomp, you agree to the collection and use of information in accordance with this policy. This policy applies to all users, including users in the European Economic Area (EEA) and California.

1. Information We Collect

Information you provide directly:

• Account information: email address and password (hashed, never stored in plain text)
• Career profile: industry, current role, years of experience, location, remote preferences, salary expectations (current and target), tech stack
• Values assessment: your responses to our 20-question values spectrum assessment
• Red flags: deal-breaker criteria you specify
• Job opportunities: company name, role title, salary range, location, notes, and status
• Interview notes: notes you enter during the interview process for each opportunity
• Resume content: text extracted from resumes you upload (PDF or DOCX) or paste manually
• Chat messages: conversational messages you send to our AI assistant

Information collected automatically:

• Usage events: which features you use and when (e.g., analysis runs, opportunity views) — collected without cookies
• Error and performance data: stack traces, page load times, and exceptions when they occur
• Browser and device type (used for error debugging only)
• IP address (used for security and fraud prevention; not linked to your profile)

2. How We Use Your Information

• To provide the service: authenticate you, save your profile and opportunities, generate AI analyses
• AI analysis: transmit relevant profile and opportunity data to our AI infrastructure provider (Groq) to generate scores, comparisons, and conversational responses
• Product improvement: analyze aggregate usage patterns to understand how the product is used and where to improve it
• Error tracking: detect and fix bugs and performance issues
• Security: detect and prevent unauthorized access or abuse
• Communications: send transactional emails (account confirmation, password reset). We do not send marketing emails without your explicit opt-in.

3. Third-Party Service Providers

We use the following third-party service providers to operate WorkWomp. Each provider processes your data only as necessary to provide their service.

We do not sell your personal data to third parties. We do not share your data with advertisers.

4. Cookies and Tracking

WorkWomp uses no advertising cookies or third-party tracking cookies.

• Essential cookies: We use a session cookie set by Supabase to keep you logged in. This cookie is strictly necessary for authentication and cannot be disabled.
• Analytics: We use PostHog in cookieless mode (persistence: 'memory'). PostHog does not set any cookies and does not persist data between browser sessions. No cookie consent banner is required.

5. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required by law to retain it longer (e.g., billing records).

Error logs (Sentry) are retained for 90 days. Anonymous usage analytics (PostHog) are retained according to PostHog's standard retention policy.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data ("right to be forgotten")
• Data portability: Request your data in a machine-readable format
• Objection: Object to processing based on legitimate interests
• Restriction: Request that we restrict processing of your data
• California residents (CCPA): Right to know, right to delete, right to opt-out of sale (we do not sell data), right to non-discrimination

To exercise any of these rights, email us at privacy@workwomp.com. We will respond within 30 days. You can also delete your account and all associated data directly from your account settings.

7. Data Security

We take reasonable technical and organizational measures to protect your data, including:

• Encryption of data in transit (TLS/HTTPS) and at rest (Supabase encryption)
• Authentication via Supabase Auth with JWT tokens
• Row-level security policies on the database (users can only access their own data)
• No plain-text storage of passwords

No method of transmission or storage is 100% secure. If you become aware of a security issue, please contact us immediately at security@workwomp.com.

8. International Users

WorkWomp is operated in the United States. If you access the service from the European Economic Area (EEA), United Kingdom, or other regions with data protection laws, your data will be transferred to and processed in the United States. By using WorkWomp, you consent to this transfer.

We rely on Standard Contractual Clauses (SCCs) with our service providers where required for cross-border data transfers.

9. Children's Privacy

WorkWomp is not directed at children under the age of 16. We do not knowingly collect personal data from anyone under 16. If you believe we have inadvertently collected data from a child, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and notify you by email or via a prominent notice in the app at least 30 days before the changes take effect. Your continued use of WorkWomp after the effective date constitutes acceptance of the updated policy.

11. Contact Us

For privacy-related inquiries, data requests, or questions about this policy: