Privacy Policy

Inglehoff LLC, doing business as WorkWomp ("WorkWomp," "we," "us," or "our"), operates the WorkWomp career decision advisor service. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights you have over your data.

By using WorkWomp, you agree to the collection and use of information in accordance with this policy. This policy applies to all users, including users in the European Economic Area (EEA) and California.

Data controller (GDPR). For users in the European Economic Area, Inglehoff LLC is the data controller of your personal information under the GDPR. Contact for data-protection matters: privacy@workwomp.com.

1. Information We Collect

Information you provide directly:

• Account information: email address and password (hashed, never stored in plain text)
• Career profile: industry, current role, years of experience, location, remote preferences, salary expectations (current and target), tech stack
• Values assessment: your responses to our 20-question values spectrum assessment
• Red flags: deal-breaker criteria you specify
• Job opportunities: company name, role title, salary range, location, notes, and status
• Interview notes: notes you enter during the interview process for each opportunity
• Resume content: text extracted from resumes you upload (PDF or DOCX) or paste manually. The original PDF/DOCX file is parsed in memory and discarded after extraction; only the extracted text is stored.
• Chat messages: conversational messages you send to our AI assistant

Information collected automatically:

• Usage events: which features you use and when (e.g., analysis runs, opportunity views) — collected without cookies
• Error and performance data: stack traces, page load times, and exceptions when they occur
• Browser and device type (used for error debugging only)
• IP address (used for security and fraud prevention; not linked to your profile)

2. How We Use Your Information

• To provide the service: authenticate you, save your profile and opportunities, generate AI analyses
• AI analysis: transmit relevant profile and opportunity data to a third-party AI inference provider to generate scores, comparisons, and conversational responses. The current named provider is listed on our Subprocessors page.
• Product improvement: analyze aggregate usage patterns to understand how the product is used and where to improve it
• Error tracking: detect and fix bugs and performance issues
• Security: detect and prevent unauthorized access or abuse
• Communications: send transactional emails (account confirmation, password reset). We do not send marketing emails without your explicit opt-in.

3. Third-Party Service Providers

We use the following third-party service providers to operate WorkWomp. Each provider processes your data only as necessary to provide their service.

The current named subprocessor for each role is published on our Subprocessors page, updated whenever a provider changes. We do not sell your personal data to third parties. We do not share your data with advertisers.

4. Cookies and Tracking

WorkWomp uses no advertising cookies or third-party tracking cookies.

• Essential cookies: We use a session cookie set by Supabase to keep you logged in. This cookie is strictly necessary for authentication and cannot be disabled.
• Analytics: We use PostHog in cookieless mode (persistence: 'memory'). PostHog does not set any cookies and does not persist data between browser sessions. No cookie consent banner is required.

5. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required by law to retain it longer (e.g., billing records).

Error logs (Sentry) are retained for 90 days. Anonymous usage analytics (PostHog) are retained according to PostHog's standard retention policy.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data ("right to be forgotten")
• Data portability: Request your data in a machine-readable format
• Objection: Object to processing based on legitimate interests
• Restriction: Request that we restrict processing of your data
• California residents (CCPA): Right to know, right to delete, right to opt-out of sale (we do not sell personal data), right to non-discrimination

To exercise any of these rights, email us at privacy@workwomp.com. We respond to verifiable requests within 30 days when possible, and no later than 45 days as permitted by Cal. Civ. Code §1798.130. Where additional time is needed (up to an additional 45 days), we will notify you of the extension and the reason. You can also export or delete your account and all associated data directly from your account settings.

Notice for California Residents (CCPA / CPRA)

In the preceding 12 months we have collected the following CCPA-defined categories of personal information about California residents:

• Identifiers: email address, IP address
• Customer records: resume text, salary expectations
• Professional or employment information: current role, work history, interview notes
• Internet activity: in-app usage events and feature interactions
• Inferences: AI-generated values-alignment scores and comparisons

We collect this information for the purposes described in §2 above. We do not sell or share personal information as those terms are defined under the CCPA / CPRA, and we do not use or disclose sensitive personal information for purposes other than those permitted under Cal. Civ. Code §1798.121.

We do not collect "sensitive personal information" as defined by Cal. Civ. Code §1798.140(ae) — we do not collect SSN, government ID numbers, financial account credentials, precise geolocation, race, religion, union membership, biometric identifiers, or the contents of mail, email, or text messages — and therefore California residents' right to limit use of sensitive PI does not apply.

7. Data Security

We take reasonable technical and organizational measures to protect your data, including:

• Encryption of data in transit (TLS/HTTPS) and at rest (Supabase encryption)
• Authentication via Supabase Auth with JWT tokens
• Row-level security policies on the database (users can only access their own data)
• No plain-text storage of passwords

No method of transmission or storage is 100% secure. If you become aware of a security issue, please contact us immediately at security@workwomp.com.

8. International Users

WorkWomp is operated in the United States. If you access the service from the European Economic Area (EEA), United Kingdom, or other regions with data protection laws, your data will be transferred to and processed in the United States. By using WorkWomp, you consent to this transfer.

We rely on Standard Contractual Clauses (SCCs) with our service providers where required for cross-border data transfers.

9. Children's Privacy

WorkWomp is not directed at children under the age of 16. We do not knowingly collect personal data from anyone under 16. If you believe we have inadvertently collected data from a child, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and notify you by email or via a prominent notice in the app at least 30 days before the changes take effect. Your continued use of WorkWomp after the effective date constitutes acceptance of the updated policy.

11. Contact Us

For privacy-related inquiries, data requests, or questions about this policy: