Privacy notice

Information we collect

We collect account and authentication details; profile and eligibility information; saved opportunities; applications, deadlines, and notes; Answer Vault content; AI prompts and drafts; reminder preferences; support and feedback messages; subscription and transaction status; and limited device, security, and website-activity information.

Please do not enter Social Security numbers, complete payment-card details, passwords, medical records, or other highly sensitive data. Payment-card information is handled by the payment provider and is not intended to be stored by OpportunityReady AI.

Why we use information and our legal bases

• Contract: to create and secure your account, provide matching, save and track opportunities, generate requested drafts, manage subscriptions, and deliver requested reminders.
• Legitimate interests: to secure the service, prevent abuse, troubleshoot problems, maintain records, and improve reliability. We balance these interests against your rights.
• Consent: for optional analytics and any optional marketing communications. You may withdraw consent at any time.
• Legal obligation: to comply with tax, accounting, regulatory, and lawful government requirements.

If required information is not provided, some account, matching, drafting, reminder, or billing features may not work.

AI-assisted features

When you request an AI feature, the prompt and relevant profile, application, opportunity, or Answer Vault information are sent to the configured AI provider to produce the requested output. Do not include unnecessary sensitive information. AI matching and drafts support your decisions; they do not make decisions with legal or similarly significant effects about you.

Analytics and local storage

Optional analytics are off by default. If you consent, we collect the page path, an anonymous browser identifier, the referring domain, and, when signed in, your account identifier. We do not collect page content or URL search parameters for analytics. Do Not Track is respected, and analytics events are retained for up to 12 months. See our Cookie and local-storage notice.

Who receives information

We use service providers for hosting and databases (including Supabase), AI generation (OpenAI), authentication, email delivery, payment processing (including Stripe when enabled), security, and support. Providers receive only information needed to perform their services and act under their own terms or data-processing obligations. We may also disclose information when legally required or as part of a merger, financing, acquisition, or sale, subject to appropriate safeguards. We do not sell personal information.

See the current service-provider and subprocessor list.

International transfers

OpportunityReady AI and its providers may process information in the United States and other countries. Where EU, EEA, UK, or Swiss data is transferred internationally, we rely on an adequacy decision, appropriate contractual safeguards such as standard contractual clauses, or another lawful transfer mechanism where required.

Retention

Account and workspace information is kept while your account is active and then only as long as reasonably necessary for deletion processing, security, disputes, legal obligations, and backups. Analytics events are retained for up to 12 months. Billing and transaction records may be kept longer when required by tax, accounting, or fraud-prevention rules. Retention periods may vary by record type and legal requirement.

Your EU and UK privacy rights

Depending on the law and circumstances, you may request access, correction, deletion, restriction, or portability of your information; object to processing based on legitimate interests; and withdraw consent without affecting earlier lawful processing. You may also complain to the data-protection authority where you live, work, or believe a violation occurred. These rights may be limited by law.

Use the support page to submit a request. We may need to verify your identity before responding.

Security and children

We use reasonable administrative, technical, and organizational safeguards, but no online service can guarantee absolute security. The service is not directed to children under 16, and we do not knowingly collect their personal information without appropriate authorization.

Changes and contact

We may update this notice as the beta changes. Material changes will be identified by a new date and, when appropriate, an in-product or email notice. Contact the beta team through Supportfor privacy questions, requests, or complaints.