privacy policy · last updated 6 July 2026 We keep your email, your report, and a row of anonymous numbers. That’s the whole list.
§1Who is responsible
Warm Doors is the data controller for the personal data described here. Contact: hello@warmdoors.com.
§2What we hold, and for how long
Your email addresswhile you have an account
Your uploaded export (.zip)minutes — deleted after processing, even on failure
The content of your messagesnever stored — read in memory, discarded
Your rendered report12 months, or until you delete it
Anonymous metrics (scores & counts, no names)12 months — powers your rerun comparison
Payment detailsheld by Stripe, not by us — we keep a session reference
“Delete my data & account” on your dashboard erases all of the above from our systems immediately.
§3Why we process it (lawful bases)
We process your export and produce your report to perform our contract with you. We keep anonymous metrics and send service emails (your sign-in link, your stage-two notification) on the same basis. We do not use your data for advertising, we do not sell it, we do not train models on it, and we send no marketing without separate consent.
§4Other people in your export
Your export naturally mentions other people — connections, recruiters who messaged you, colleagues who endorsed you. We process that information under legitimate interests, solely to prepare your report, and we designed the service to hold as little of it as possible: it appears in your report (which only you can access) and nowhere else in our systems. We never contact those people, never combine data across customers, and never use it for any other purpose. Names are not retained in our database.
§5Where it lives, and who touches it
Data is stored with Supabase (database, files) and processed on Vercel (application), configured in UK/EU regions; payments are handled by Stripe. Each acts as our processor (Stripe also as an independent controller for payment data). We have data-processing agreements with each. No other third parties receive your data.
§6Cookies
One kind: the session cookie that keeps you signed in. It is strictly necessary, so there is no consent banner. No analytics cookies, no tracking pixels, no third-party ad tech.
§7Your rights
You can access, correct, export, restrict, object to processing of, or erase your data at any time — the dashboard’s delete control covers erasure instantly; for anything else email hello@warmdoors.com and we respond within one month. You can complain to the Information Commissioner’s Office (ico.org.uk) — though we’d appreciate the chance to fix it first.
§8Changes
If this policy changes materially we will email the address on your account before the change takes effect.