Skip to main content
Alinea60

Effective 2 August 2026

Privacy Policy

This Privacy Policy explains how Blossomidea (UEN 53505228J), trading as Alinea60 (“we”, “us”), collects, uses, retains, and protects personal data when you use Alinea60. We are the accountable operator of your data. You can contact our Data Protection Officer at dpo@alinea60.com.

1. Scope

This policy covers the Alinea60 web application and the information processed to provide it. It does not cover services we do not operate; where third-party services have their own terms, we identify them below.

2. The information we handle

  • Information you supply directly: the job descriptions you paste or upload, and the CVs you upload, including any third-party or confidential content they contain.
  • Information from authentication: when you sign in with Google or an email link, we receive the identity details your provider shares (such as your email address and, for Google, the name on your account).
  • Information generated or inferred by AI: role signals, the qualitative fit assessment, and practice coaching we produce from your CV, job description, and practice answers.
  • Voice and transcript data: if you choose to practise by voice, your recordings and their transcripts. Voice is optional; text is always available.
  • Technical diagnostics: device and browser information needed to keep the service running, secure, and reliable.
  • Feedback and screenshots: information you choose to submit when you report a problem or send feedback, including an optional screenshot.
  • Optional location: approximate location, only if you provide it, used to improve relevance.

3. Why we use it

  • To operate your account and authenticate you.
  • To provide fit assessments, role signals, practice, and coaching.
  • To provide support and keep the service safe and secure.
  • To enable private opportunity discovery only if you turn it on (see section 11).
  • To send product news, opportunity notifications, or research invitations only if you separately opt in (see section 11). Essential account, security, and legal notices are not marketing and cannot be disabled via these preferences.

4. AI providers (OpenAI and Anthropic)

We use the OpenAI API (not the consumer ChatGPT product) for analysis and coaching. OpenAI’s API processes inputs and outputs to return results. Unless we explicitly opt in, our current use of the OpenAI API is not used to train OpenAI’s models. OpenAI may retain inputs and outputs for abuse monitoring for up to 30 days by default, with endpoint-specific exceptions. We do not promise “Zero Data Retention” unless our production OpenAI organisation is approved and verified for it.

Our application code also supports Anthropic (Claude) as an alternative AI provider for analysis and coaching; whether it is enabled depends on the deployed configuration, and OpenAI is the default. If Anthropic is enabled, it processes only the inputs and outputs needed to produce your fit assessment, role signals, and coaching, on the terms published in Anthropic’s API terms.

5. Sentry (error and performance diagnostics)

We use Sentry to understand errors, performance, and to receive your feedback. We send only your internal user identifier as explicit user context. Session replays mask all text and block all media. Profiling data helps us improve performance. Feedback forms do not collect your name or email, and screenshots are optional and submitted only if you choose to add one. Screenshots may contain information you choose to include.

6. Other processors

Based on our deployed configuration, we use the following processors: a hosting provider for the web application; Supabase for the database, authentication, and file storage; Google for sign-in; OpenAI (and, where enabled, Anthropic) for AI processing; Sentry for diagnostics; and an address-lookup service for optional location. We transfer only the data each processor needs for its function.

7. International transfers

Some processors operate outside Singapore. We rely on appropriate safeguards for such transfers, including the processor agreements and standard contractual terms they make available, and we limit what is transferred to what is necessary.

8. How long we keep it

  • New voice recordings you consent to are retained privately for the life of your account and are deleted when you delete the practice session or your account.
  • Some older recordings may retain a temporary policy of up to 30 days; we do not silently convert them.
  • Other account data is retained while your account is active. A verified account-deletion request is completed across active systems and ordinary backup cycles within 90 days, subject only to narrow legal, security, fraud, or claims-preservation exceptions.

9. Your rights

Subject to applicable law, you may ask to access, correct, or delete your personal data, withdraw consents you have given, and lodge a complaint with a supervisory authority. To exercise any of these, email dpo@alinea60.com or use the in-product deletion path described in our Terms of Use.

10. Cookies and browser storage

We use essential cookies and browser storage to keep you signed in and make the application work. We do not use advertising cookies or behavioural advertising trackers.

11. Opportunity discovery, marketing, and employer sharing

Acknowledging this Privacy Policy is not consent for any of the following. Each is a separate, off-by-default choice:

  • Private opportunity discovery: if you turn it on, we may privately compare your professional information and preferences with job descriptions to show you potentially relevant roles. Potential roles are shown only to you. Turning this on does not share anything with an employer.
  • Marketing: product news, opportunity notifications, and research invitations are separate preferences, each off by default. You can withdraw any of them at any time.
  • Employer sharing: your CV, contact information, recordings, transcripts, private profile, or identifiable match results are not disclosed to an employer without a separate, explicit grant that shows the recipient, the purpose, and the exact fields before anything is sent.

12. Security

We use access controls, encryption in transit, row-level data isolation, and private file storage. No method of storage or transmission is perfectly secure, and we do not guarantee absolute security. If a personal-data breach occurs that we are required to notify you about, we will do so as required by applicable law.

13. Children

Alinea60 is intended for users who are at least 18 years old. This age threshold is subject to final legal review.

14. Changes to this policy

When this policy materially changes, we will update the effective date above and provide notice as described in our Terms of Use. Continued use after a material change constitutes acceptance of the updated policy where lawful.

Questions or requests? Email dpo@alinea60.com.