Privacy Policy

Updated: 2026-10-12

This policy explains what data Satori collects, why, who it may be shared with and in what form, how long it is kept, and what you can do about it. We tried to write it concretely rather than in boilerplate: everything below matches what the product actually does.

1. Who we are

Satori (withsatori.com) is a platform that helps you build a path into a new professional role. We are the controller of your personal data and decide how it is processed. For anything data-related, contact us at info@withsatori.com.

2. What we collect

2.1. Account data. Email, an encrypted (hashed) password, name, interface language, account creation date, email verification date, last sign-in date. We never store your password in readable form and cannot read it.

2.2. Your professional profile. The resume text you upload (kept as your Master CV), the skills extracted from it, your current role, years of experience, target roles, preferred cities and work format, answers to a short questionnaire, and any text you write about yourself by hand.

2.3. Product activity. The journeys and goals you create, skills-gap results, generated learning modules, your attempts and scores, saved vacancies and their statuses (saved, applied, and so on), and resumes generated for a specific vacancy.

2.4. Conversations with the assistant. The messages you send to the in-app AI mentor and its replies.

2.5. Technical data. IP address, browser type and version, device and screen characteristics, system language, referrer, request time; page views, clicks and taps inside the app; errors and server response codes. We may also record how you use the site: page transitions, mouse movement, clicks, scrolling and changes on the page (section 6.4). All of this is recorded on our own infrastructure.

2.6. Payments. The fact and contents of a purchase, tier, amount, transaction identifier, promo code applied, credits granted. We never receive or store your card details — payment happens on the payment provider's side.

3. Why we use it

To deliver the service you came for: parse your resume, find the gap between your profile and your target role, build a path, match vacancies, generate a tailored resume. Legal basis: performance of our contract with you.
To keep the service running and secure: troubleshooting, preventing abuse and automated attacks, enforcing limits. Legal basis: our legitimate interest in operating the service safely.
To improve the product: understanding where people get stuck, which prompts fail, how accurately the system scores a match. For this we look at aggregated statistics and heatmaps and review recordings of individual sessions (section 6.4). Legal basis: your consent to session recording and our legitimate interest in improving the service.
To send service email — verification, password reset, important changes to the service.

We do not make legally significant decisions about you automatically. Match scores are a recommendation inside the product, not a hiring decision.

4. AI processing

Resume parsing, gap analysis, and generation of modules and resumes run through third-party LLM APIs from two providers: Anthropic (Claude models, a US company) and DeepSeek (a company based in China). This means the text of your resume and your messages to the assistant are sent to these providers for processing. We send only what a given operation requires, and we do not send your email or payment data there.

Under Anthropic's standard API terms, Anthropic does not use this data to train its models without our explicit permission (we have not given it) and automatically deletes it from its servers within 30 days. It may be kept longer only if Anthropic's automated safety systems flag it or the law requires it.

Please do not put information in your resume that must not reach external services: medical data, other people's personal data, or a previous employer's trade secrets. If we change LLM provider, we will update this section.

5. Who we share data with

5.1. Vendors acting on our behalf. LLM API providers (section 4), infrastructure and hosting, service email delivery, and — if we enable them — web analytics services. They receive only what their function requires, act on our instructions, and may not use your data for their own purposes.

5.2. Job sources. To find vacancies for you, we send search queries built from your profile — role title, city, keywords — to external job aggregators. Neither your resume, nor your email, nor your name is sent there.

5.3. Aggregated and de-identified data — partners, investors, research. To develop the product, raise funding, and report to partners, grant bodies and investors, we prepare and share statistics and de-identified data: user counts and their trend, step-by-step conversion, distribution of roles, cities and industries, matching quality, typical skills gaps, and generalised examples and quotes not tied to any individual. Such materials are prepared so that no specific person can be identified from them. Partners and investors do not get access to your resume, your conversations with the assistant, or your email.

5.4. Legal and financial advisers. As part of investment due diligence, an audit, or legal support, we may provide a limited set of data to advisers and prospective investors — strictly to the extent needed for the review, and only under written confidentiality.

5.5. Change of business ownership. If the service is sold, reorganised, or merged with another company, user data transfers to the new owner along with the service. We will give notice in advance, and this policy continues to apply until it is replaced.

5.6. When the law requires it, or in response to a lawful request from a competent authority.

5.7. What we never do. We do not sell your personal data. We do not send your resume to employers or recruiters without a deliberate action by you. We do not make your profile public.

6. Analytics, cookies and session recording

6.1. First-party analytics. We record in-app activity on our own servers (section 2.5) and store it separately from the main database. The visit counter is also our own service on the same machine, not a third-party product. This data is never sold and is used only to operate, troubleshoot and improve the service.

6.2. Cookies we set. There are three, and this is the complete list:

vr_vid — analytics. A random browser identifier that lets us tell a returning visit from a new one and build visit statistics. Set by our own counter, lasts up to 400 days. It contains no name, no email and nothing from your resume.
NEXT_LOCALE — functional. Remembers the interface language you picked so you do not have to switch it every time.
satori_dl — strictly necessary. A one-off permission to download the resume you just generated; it lives for 60 seconds and disappears.

We set no advertising cookies and nothing that follows you across other sites. One clarification: your sign-in is not kept in a cookie but in your browser's local storage — that is where the session token lives, and in guest mode it disappears when you close the tab.

Browser local storage. Besides cookies, the site keeps in your browser's local storage: the sign-in token (satori_token), analytics session identifiers (satori_session_id, vr_sid and a copy of vr_vid), your session recording choice (satori_consent) and interface settings such as panel widths. None of this is sent to third-party services.

How to refuse them. Cookies are controlled in your browser settings: you can delete them, block them for a specific site, or open the site in a private window so they vanish on close. Ad blockers stop them too. The honest consequences: without vr_vid the service works in full, you simply count as a new visitor every time; without NEXT_LOCALE you will pick your language on each visit; without satori_dl a generated resume file will not download. Clearing your browser's local storage will sign you out.

6.3. Third-party trackers: there are none right now. As of 2026-10-12 the site runs no third-party analytics counter, advertising pixel or session-recording service.

What used to run. From 17.07 to 07.08.2026 the pages carried a tag-manager container belonging to a partner on a test advertising campaign, and through it three third-party services. We name them explicitly, because for those three weeks they saw what real visitors did:

Microsoft Clarity — session replay and heatmaps: playback of how a person moved through the page, where they tapped and scrolled. It is the most sensitive of the three, and the previous version of this policy did not mention it — we are correcting that now. Microsoft's terms: privacy.microsoft.com.
Google Analytics 4 — visit and in-app event statistics. Google's terms: policies.google.com/privacy; you can opt out of Google Analytics measurement in every browser with their add-on: tools.google.com/dlpage/gaoptout.
Meta Pixel — the Facebook/Instagram advertising pixel: it recorded page views and the fact of registration to measure the campaign. Meta's terms: facebook.com/privacy/policy.

On 07.08.2026 we removed that container, and all three services with it, from every page of ours. Data they collected during that period is held by Microsoft, Google and Meta under their own retention rules — we cannot delete it on your behalf, but you can: each of the three explains at the links above how to request access or erasure. Our own session recording and heatmap tools are described in section 6.4: they run on our server, not in third-party services.

6.4. Our own session recording and heatmaps. On every page of withsatori.com we may record how you use the site: page transitions, mouse movement, clicks and taps, scrolling, changes on the page, browser errors. From this we replay the course of a session and build heatmaps of clicks and scrolling, so we can see where the interface gets in the way. The tool is our own, built on the open-source rrweb library. Recordings are stored on our server, are not sent to third-party services, and only the founders can access them.

What is not recorded. The text you type into fields (it is replaced with asterisks in your browser, before anything is sent), the content and preview of your resume, your messages to the assistant and its replies, passwords, payment details. Your resume and conversations are stored in the main database as part of the service (sections 2.2 and 2.4), and session recording does not duplicate them.

Consent. On your first visit we show a short notice about recording at the bottom of the page, with a link to this section. By continuing to use the site after it, you agree to recording. If your browser is set to a time zone of an EU or EEA country, the United Kingdom or another European country, recording starts only after you click «I agree».

How to opt out. Use the switch below; it applies to this browser. To have recordings of your past sessions deleted, write to info@withsatori.com.

7. How long we keep data

Account and profile data — for as long as your account exists. After a deletion request we remove it within 30 days.
Guest sessions (using the product without registering), together with everything created in them, are deleted automatically 12 months after their last activity. We keep them because they help us find bugs and improve the service, and after a year without activity they are no longer needed for that. Closing the tab only ends your access to the session; the data stays until that term ends. You can have it deleted sooner on request, as described in section 8.
Technical logs, analytics, session recordings and heatmap data are kept without a fixed term: for as long as they are needed for security, troubleshooting and improving the service. We will delete records linked to you on request (section 8).
Payment records — for as long as accounting and tax law requires, even after the account is deleted.
Backups. We make backups of the database on our server and keep them without a fixed term. Deleted data may remain in these backups for as long as they exist.
Aggregated de-identified metrics — indefinitely; they are no longer personal data.

8. Your rights

Wherever you are, you can:

find out exactly what data we hold about you and get a copy of it;
correct inaccurate data — most of the profile is editable in the app;
delete your account and data;
restrict or object to processing;
withdraw consent where processing relies on consent;
complain to the data protection authority in your country.

To exercise any of these, write to info@withsatori.com. We respond within 30 days. A registered account can also be deleted by you in the settings. A guest session has no account, so to have it deleted, write to us with the email address from the CV you uploaded or, if there was no CV, the approximate date and time you used the product and what you did. We will confirm the request by email to that address, if there is one, and delete the session within 30 days. California residents: we collect identifiers and internet activity information within the meaning of the CCPA/CPRA, and we do not sell or share it as those terms are defined by that law.

9. Security and where data lives

Data is stored on our own server in the European Union, and the connection to the site is encrypted. Passwords are kept only as an irreversible hash. Only the founders of the service have access to the database. Sending data to the LLM providers and, where needed, to other vendors may mean processing outside your country — we choose providers that maintain an adequate level of protection.

No system is perfectly secure. If a breach occurs that puts your rights at risk, we will notify you and the supervisory authority within the timeframes set by law.

10. Children

The service is intended for adults building a career. We do not knowingly collect data from anyone under 16. If you believe a child has given us their data, write to info@withsatori.com and we will delete it.

11. Changes to this policy

We update this policy whenever what the product does with data changes. The date of the last update is shown at the top. If we start using your data for new purposes or collecting new categories of data, we will announce it by email to the address on your account or with a prominent notice in the app. Changes to or additions of vendors within the categories already named here (LLM providers, hosting, email) are reflected by updating this page.

Automated emails (verification, password reset) are sent from noreply@withsatori.com. Any data question, access or deletion request: info@withsatori.com.