This Privacy Policy explains how Our Appologies LLC ("Haliscope," "we," "our," "us") collects, uses, shares and protects Personal Data when you use the Haliscope website at haliscope.com (the "Website") and the Haliscope web application (the "App"; together, the "Services"). It also explains your rights and how to use them.
Who is responsible for your data. Our Appologies LLC, 8 The Green, Suite B, Dover, DE 19901, United States, is the controller of your Personal Data. You can reach us at help@haliscope.com.
The short version
- We collect your assessment answers and any résumé you upload so that we can write your report.
- Your answers and résumé text are sent to Google's Gemini API, which writes the report on our behalf. We use a paid Gemini plan, under which Google does not use your data to train its models.
- Only you, signed in to your Account, can view your report.
- We do not sell your Personal Data. If you reach us through one of our ads and then buy, we tell Google Ads, so that we know which ads work. Global Privacy Control turns this off.
- We keep your data until you ask us to delete it. Email help@haliscope.com, and we will delete it within 30 days.
"Personal Data" means any information that identifies you or can reasonably be linked to you, alone or combined with other data, and any other information treated as personal data or personal information under applicable privacy law. Capitalized terms not defined here have the meaning given in our Terms of Service.
1. Information We Collect
Information you give us
- Account information: your email address, which we use to send you sign-in codes.
- Assessment answers: your answers to our assessment, which may include information about your habits, values, personal philosophy, career interests, age, education and work history.
- Résumé or CV: the text of any résumé or CV you choose to upload.
- Communications: what you write when you contact us, including your name if you give it, and your choices about marketing emails.
- Comments on assessment questions and reports: A comment you send about a question or your report reaches our team by email and is kept in that mailbox, alongside the question or report it was about and your account's identifier — never your answers or what your report says. Deleting your account includes deleting these emails.
Information from our payment processor
When you buy a report, Stripe processes your payment. Stripe tells us whether the payment succeeded, the amount, and limited details such as the card brand, the last four digits and the billing country. We never see or store your full card number.
Information collected automatically
When you use the Services, our servers collect information such as your IP address, your approximate location (such as country and city) derived from it, the pages you visit, the page that referred you, the campaign that brought you to us, and your device and browser type ("Usage Data"). If you allow analytics Cookies, our analytics providers receive this Usage Data too: PostHog, sent through our own domain, and Google Analytics, along with the steps you complete, such as starting the assessment or making a purchase. PostHog also receives which of our listed reasons for taking the assessment you chose, but never anything you typed. Seena Labs runs only on our public pages, never in the assessment, your report, checkout or your profile, and receives what you click there but never the text you type. None of them receives your other answers or your report. If you do not allow them, Google Analytics and Seena Labs receive nothing, and PostHog receives only a record of any purchase you make and of your choices about our emails. We do not record your sessions. Section 3 explains the Cookies we use.
Your report
We use your answers and résumé text to create your report, which contains conclusions about your strengths, interests and possible careers. Your report is Personal Data about you and is treated the same way as your answers.
Sensitive information
Your answers about your values and personal philosophy may reveal your philosophical or religious beliefs, and a résumé can contain other sensitive details. Some laws, including the GDPR, treat this as special category or sensitive data. We use your answers only to create your report and, in de-identified form, the statistics described in Section 2, and you can ask us to delete them at any time. Please do not include information such as health details, government ID numbers or financial account numbers in your résumé.
2. How We Use Information, and Our Legal Bases
We use Personal Data for the purposes below. If you are in the EEA, the UK or Switzerland, the law requires us to have a legal basis for each use, which we list alongside.
| Purpose | Data used | Legal basis (EEA, UK, Switzerland) |
|---|---|---|
| Create your Account and sign you in | Account information | Performing our contract with you |
| Run the assessment and write your report, including sending your answers and résumé text to Google's Gemini API | Assessment answers, résumé text, report | Performing our contract with you |
| Take payments, issue refunds and keep financial records | Account information, payment details from Stripe | Performing our contract; complying with tax and accounting law |
| Answer support requests | Communications, account information | Performing our contract; our legitimate interest in helping users |
| Understand how the Website is used and improve it | Usage Data, analytics Cookies | Your consent, which you can withdraw at any time in Cookie settings |
| Create aggregated, de-identified statistics and research, such as trends across occupations | Assessment answers, reports | Our legitimate interest in improving our methods and understanding careers |
| Measure which of our ads lead to a purchase | The identifier of the ad you clicked, the value and reference number of your purchase, and a hashed email address | Our legitimate interest in knowing whether our advertising works; you can opt out with Global Privacy Control |
| Send marketing emails | Email address | Your consent |
| Keep the Services secure, prevent fraud and fix errors | Usage Data, server logs, error reports, account information | Our legitimate interest in running a secure service |
| Comply with the law, respond to lawful requests, and establish or defend legal claims | Any of the above, as needed | Complying with legal obligations; our legitimate interests |
De-identified data. Statistics we create are aggregated and de-identified so that they cannot reasonably be linked to you. We do not try to re-identify them, and we may publish or share them.
AI and automated processing. Your report is written automatically by AI from your answers. It gives you information and suggestions, and it is not used to make decisions about you that have legal or similarly significant effects, such as hiring, credit or insurance decisions. Google processes your answers and résumé text for us under its paid Gemini API terms, which do not allow Google to use them to train or improve its models. Google may keep them for a limited time to detect abuse, as those terms permit.
If you do not provide information. You need an email address to create an Account and must answer the assessment to receive a report. Everything else is optional, but leaving it out may make your report less specific.
4. How We Share Information
Service providers. We share Personal Data with service providers that process it on our behalf, under contracts that require them to protect it and use it only to provide their services to us. Our current service providers are:
| Provider | What it does | Data it receives |
|---|---|---|
| Fly.io | Hosts the Services and their database | All data held in the Services |
| Tigris | Stores generated reports | Reports |
| Stripe | Processes payments and refunds | Email address and payment details |
| PostHog | Product analytics | Usage Data and a random browser identifier |
| Google (Google Analytics) | Website and campaign analytics, only if you allow analytics Cookies | Usage Data, a random browser identifier, and the value and reference number of a purchase |
| Seena Labs | Website behaviour analytics on our public pages, only if you allow analytics Cookies | Usage Data, the text of the links and buttons you click on those pages, and a random browser identifier |
| Google (Google Ads) | Measuring which of our ads lead to a purchase, sent from our servers | The identifier of the ad you clicked, the value and reference number of a purchase, and a hashed email address |
| Sentry | Error reporting | Your account identifier, browser type and the addresses of pages where errors occurred |
| Google (Gemini API) | The AI service that writes your report | Assessment answers and résumé text |
| Resend | Delivers email, including sign-in codes, our replies to you, the messages and comments you send us and, if you opt in, marketing emails | Email address and message content |
We may also use professional advisers, such as lawyers and accountants, who are bound by confidentiality.
Legal requests. We may disclose Personal Data if the law requires it or in response to valid legal process, such as a subpoena or court order, and to protect the rights, safety and property of Haliscope, our users or others.
Business transfers. If Haliscope is involved in a merger, acquisition, financing, bankruptcy or sale of assets, Personal Data may be transferred to the parties involved, subject to this Privacy Policy.
With your consent. We share Personal Data with others when you ask us to or agree to it.
Measuring our advertising. When you arrive from one of our Google ads and later buy, our servers send Google Ads the identifier of the ad you clicked, the value and reference number of your purchase, and your email address in hashed form, so that Google can match the purchase to the ad. For buyers in the European Economic Area, the United Kingdom and Switzerland we tell Google not to use that email address for advertising. Nothing is sent if your browser sends Global Privacy Control.
No selling. We do not sell Personal Data. Some U.S. state privacy laws may treat sending Google Ads the information above as "sharing" for cross-context behavioral or targeted advertising. You can opt out of it with Global Privacy Control.
5. International Data Transfers
Haliscope is based in the United States, and our service providers store and process Personal Data in the United States. If you are outside the United States, your Personal Data will be transferred to, and processed in, the United States, where data protection laws may differ from those where you live.
When we transfer Personal Data from the EEA, the UK or Switzerland, we rely on the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum and the Swiss equivalents, included in our agreements with our service providers, or on a provider's certification under the EU-U.S. Data Privacy Framework, its UK Extension or the Swiss-U.S. Data Privacy Framework. You can ask us for more information about these safeguards by emailing help@haliscope.com.
6. How Long We Keep Information
- Account information, assessment answers, résumé text and reports: kept until you ask us to delete them, so that your report stays available to you in your Account. There is no automatic deletion. When you ask, we delete them within 30 days. Copies in our backups and our storage provider's recovery copies are removed within 7 days after that.
- Payment and refund records: kept for as long as tax and accounting law requires, usually up to 7 years, even after the rest of your data is deleted.
- Usage Data: analytics events are kept for [TBC], and server logs for [TBC].
- Support communications: kept for [TBC] after the conversation ends, or until you ask us to delete them.
- Marketing preferences: if you unsubscribe, we keep your email address on a suppression list so that we do not email you again.
- De-identified statistics: kept indefinitely, because they do not identify you.
We may keep data longer if the law requires it or if it is needed to resolve a dispute or legal claim.
7. How We Protect Information
We use technical and organizational measures designed to protect Personal Data, including encryption in transit, access controls that limit who can see your data, and sign-in by one-time code. Your report can be viewed only by you when signed in to your Account. No system is completely secure, so please keep control of the email account you use to sign in. If a security breach affects your Personal Data, we will notify you and the relevant authorities where the law requires.
8. Your Privacy Rights
Rights for everyone. Wherever you live, you can ask us to:
- tell you what Personal Data we hold about you and give you a copy (access);
- correct inaccurate Personal Data (correction);
- delete your Personal Data (deletion);
- give you your Personal Data in a portable, machine-readable format (portability);
- stop sending you marketing emails; and
- withdraw any consent you have given, which does not affect processing that took place before you withdrew it.
Additional rights in the EEA, UK and Switzerland. You can also object to processing based on our legitimate interests, ask us to restrict processing, and complain to your local data protection authority. We would appreciate the chance to address your concern first.
Additional rights in U.S. states. If you live in California or another U.S. state with a comprehensive privacy law, you have the rights that law gives you, which may include the right to know the categories and sources of Personal Data we collect, the purposes for which we use it and the categories of recipients (all described in this Privacy Policy); the right to opt out of the sale or sharing of Personal Data or targeted advertising (we do not sell Personal Data, and Global Privacy Control opts you out of the sharing described in "Measuring our advertising"); and the right to limit the use of sensitive Personal Data (we use it only to provide the Services and for de-identified statistics). We will not discriminate against you for using your rights. You may use an authorized agent to make a request, and we may ask the agent for proof of authority. If we decline your request, you may appeal by replying to our decision with the word "Appeal," and we will respond within the time the law requires.
How to make a request. Email help@haliscope.com from the email address on your Account. To protect your data, we may ask you to confirm the request from that address. We respond within 30 days, or sooner if the law requires. Requests are free, unless a request is clearly unfounded or excessive, in which case the law may allow us to charge a reasonable fee or refuse. Nothing in this Privacy Policy limits your statutory rights.
Deleting your Account. Email help@haliscope.com to delete your Account and all associated data. We complete deletion within 30 days, except for records we must keep by law, as described in Section 6.
9. Children
The Services are for adults aged 18 and over. We do not knowingly collect Personal Data from anyone under 18. If we learn that someone under 18 has given us Personal Data, we will delete it. If you believe a minor has used the Services, please contact us at help@haliscope.com.
10. Links to Third-Party Services
The Services may link to websites and services that we do not own or control, including Stripe's checkout. We are not responsible for their privacy practices, and we encourage you to read their privacy policies.
11. Emails From Haliscope
We send emails you need in order to use the Services, such as sign-in codes, replies to your support requests and notices of important changes to our Terms or this Privacy Policy. You cannot opt out of these while you have an Account.
We send marketing emails only if you opt in and confirm your email address. Every marketing email includes a link to unsubscribe, and you can also unsubscribe by emailing help@haliscope.com.
12. Additional Information for Specific Regions
California. We do not disclose Personal Data to third parties for their own direct marketing purposes. The categories of Personal Data we collect, their sources, the purposes for which we use them and the categories of recipients are described in Sections 1, 2 and 4. Sensitive Personal Data is described in Section 1.
Canada. You can contact our privacy officer at help@haliscope.com.
Other countries. If you live in a country with its own data protection law, such as Brazil, Japan, South Korea, India or Australia, you have the rights that law gives you. Contact us at help@haliscope.com, and we will respond as that law requires.
13. How to Contact Us
If you have questions or concerns about this Privacy Policy or want to use your rights, contact us:
Email: help@haliscope.com
Post: Our Appologies LLC, 8 The Green, Suite B, Dover, DE 19901, United States
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time and will change the "Last Updated" date above when we do. If we make a material change, such as using your Personal Data for a new purpose or sharing it with a new type of recipient, we will email you before the change takes effect and, where the law requires, ask for your consent.