Privacy Policy

1. Who we are (data controller)

Datasphere Dynamics Limited is a company incorporated in Dublin, Ireland. Where Datasphere Dynamics Limited determines the purposes and means of processing your personal data in connection with SoloShift, it acts as the data controller.

For any privacy or data-protection matter — including the requests described below — you can contact us at support@soloshift.io.

2. Personal data we collect

• Account and identity data — your name and email address, and authentication data managed by our sign-in provider when you create an account.
• Profile data — optional details you add, such as job title, location, LinkedIn URL and a short bio.
• Assessment and career data — the answers you give in our readiness and data-transition assessments, the scores and recommendations generated from them, and content you create or upload (for example CV text, résumés, job-post text, portfolio projects, roadmaps and coach conversations).
• Subscription and billing data — your plan, subscription status and a customer reference held by our payment processor. We do not store your full payment-card number (see “Payment processing”).
• Usage and technical data — pages viewed, approximate interactions, device and browser information, and error/diagnostic data used to keep the service working.

3. How we collect it

• directly from you, when you register, complete an assessment, subscribe, or contact us;
• automatically, through cookies and similar technologies as you use the site; and
• from our service providers (for example our authentication and payment providers) who handle parts of the service on our behalf.

4. Purposes and lawful bases

We only process personal data where we have a lawful basis under Article 6 GDPR. We do not rely on consent for everything — most core functionality is necessary to provide the service you ask for:

• To provide SoloShift (create your account, run assessments, generate and store your results, roadmaps and other tools) — performance of a contract with you (Article 6(1)(b)).
• To take payment and manage subscriptions — performance of a contract and compliance with a legal obligation (for example accounting/tax records) (Articles 6(1)(b) and 6(1)(c)).
• To secure, maintain and improve the service (diagnostics, error monitoring, preventing misuse, understanding aggregate usage) — our legitimate interests in running a reliable, safe product (Article 6(1)(f)), balanced against your rights.
• To send service and transactional emails (for example a welcome message or your readiness-score summary) — performance of a contract and/or our legitimate interests.
• Analytics and any non-essential cookies — your consent, where consent is required (Article 6(1)(a)); you can withdraw it at any time.

5. Optional progress updates and plan reviews

Starter and Professional subscribers can choose to receive optional progress communications. These include a weekly summary of completed work, an occasional inactivity reminder, and a monthly roadmap-review notice. These communications are separate from essential account, security, payment and service messages, and they do not contain third-party advertising.

Every progress channel is off by default. We send a channel only after you switch it on. We record the channel you selected and the time of your consent. You can switch a channel off or pause all progress emails from your notification settings, or use the unsubscribe link included in every progress email. Withdrawing consent is free and does not affect the lawfulness of processing carried out before withdrawal.

To prepare these updates, we use your account email address and the activity already recorded in SoloShift, such as completed roadmap activities, portfolio progress, skills being developed, recent activity dates and your next incomplete step. A monthly review may adjust work that is still ahead based on what you have completed. It does not alter completed activities. A visible summary records what changed, and you can turn the monthly review off at any time.

We rely on your consent for these optional progress communications and the associated monthly review (Article 6(1)(a) GDPR). We keep limited consent and delivery records so we can respect your choices, prevent duplicate messages and investigate delivery problems. Delivery records do not contain the email body. Resend processes email delivery on our behalf, as described under “Recipients and processors”.

6. AI processing

Several SoloShift features use artificial intelligence to generate content for you — for example the SoloShift CoWork, CV review, LinkedIn guidance, mock-interview questions and feedback, résumé and application drafts, and your learning and action roadmaps.

To produce these results, the relevant content you provide (such as assessment answers, CV text or messages) is transmitted to our third-party AI provider, Anthropic (the provider of the Claude models), which processes it on our behalf to return a response. AI output can be inaccurate, incomplete or out of date, and you should review it before relying on it — see our Disclaimer.

Interview Notes (a Professional feature) additionally records audio from an interview or meeting running in a Chrome or Edge browser tab — only after you explicitly confirm you have everyone's permission and press Start. The recorded audio is transmitted to OpenAI for transcription and the resulting transcript is sent to Anthropic for summarisation. We delete the raw audio automatically after it has been transcribed (and, if processing fails, within 24 hours); the transcript, summary and your notes are kept until you delete the meeting, which you can do at any time. You can also disconnect SoloShift Desktop from your account whenever you like.

We do not make solely automated decisions that produce legal or similarly significant effects about you; assessment scoring supports your own decisions and is not used to deny you any legal right. We do not claim that our AI provider never retains or trains on data; how a provider handles data is governed by our agreement and their terms, and any provider-specific data-handling commitments should be confirmed as part of a professional review.

7. Payment processing

Payments are processed by Stripe. When you subscribe, your card details are collected and processed directly by Stripe on Stripe's systems. SoloShift receives confirmation of your subscription and a Stripe customer reference, but does not receive or store your full card number, expiry or security code.

8. Recipients and processors

We share personal data with service providers (processors) who help us run SoloShift, under agreements that require them to protect it and use it only on our instructions. Our main providers are:

• Clerk — user authentication and account management.
• Supabase — our application database, where your account and career data are stored.
• Stripe — subscription and payment processing.
• Anthropic — AI processing (including Interview Notes reviews and summaries) for the features described above.
• OpenAI — audio transcription for Interview Notes recordings.
• Resend — sending transactional, service and optional progress emails.
• Vercel — website and application hosting.
• Sentry — error monitoring and diagnostics.
• PostHog — privacy-focused product analytics (EU-hosted).

We may also disclose personal data where required by law, to establish or defend legal claims, or in connection with a business reorganisation. We do not sell your personal data.

9. International transfers

Some of our providers may process personal data outside the European Economic Area (EEA). Where that happens, we rely on appropriate safeguards recognised under the GDPR (such as an adequacy decision or the European Commission's Standard Contractual Clauses) so that your data continues to be protected. The specific transfer mechanism for each provider should be confirmed as part of a professional data-protection review before broad commercial launch.

10. How long we keep data

We keep personal data only for as long as we need it for the purposes described in this policy. In practice that means:

• account, profile, assessment and career data — for as long as your account is active;
• subscription and billing records — for as long as needed to provide the service and to meet legal, accounting and tax obligations; and
• diagnostic and analytics data — for a limited period appropriate to its purpose.
• Interview Notes audio recordings — raw audio is deleted automatically once it has been transcribed, and within 24 hours if processing fails; the transcript, summary and your notes are kept until you delete the meeting.
• progress-email consent and delivery records — for as long as reasonably necessary to respect your communication choices, demonstrate consent, prevent duplicate sends and resolve delivery issues; email bodies are not stored in the delivery record.

When data is no longer needed, we delete it or anonymise it. If you ask us to delete your account (see “Your rights”), we will do so subject to any records we are legally required to keep.

11. Security

We take appropriate technical and organisational measures to protect personal data, including access controls, encryption in transit, and reputable infrastructure providers. No online service can be guaranteed to be completely secure, but we work to protect your data and to respond appropriately to any incident.

12. Cookies and similar technologies

We use a small number of cookies and similar technologies:

• Essential cookies — set by our authentication provider to keep you signed in and to secure the service. These are necessary for the site to work.
• Preference cookies — for example a cookie that remembers which journey (Shift Into Data or Go Independent) you are viewing in your dashboard. These store a display preference only.
• Analytics cookies — set by our analytics provider to understand aggregate usage. Where required, we use these on the basis of your consent.

13. Your rights

Under the GDPR and Irish data-protection law you have the following rights, which you can exercise by emailing support@soloshift.io:

• Access — to obtain a copy of the personal data we hold about you.
• Rectification — to have inaccurate or incomplete data corrected.
• Erasure — to have your data deleted in certain circumstances.
• Restriction — to limit how we process your data in certain circumstances.
• Objection — to object to processing based on our legitimate interests.
• Portability — to receive certain data in a portable format.
• Withdraw consent — where we rely on consent, at any time, without affecting prior processing.

You can update your profile at any time in your account, and you can cancel or manage your subscription through the billing portal linked from your billing settings. You can download a copy of your data, and close your account permanently, from your data and privacy settings — both take effect immediately and neither requires you to contact us. If a step cannot be completed automatically, that page tells you which one and we will finish it by hand. You can also contact us at the address above, and we will respond within the time limits set by the GDPR.

14. Complaints

If you have a concern about how we handle your personal data, please contact us first so we can try to resolve it. You also have the right to lodge a complaint with the Data Protection Commission (Ireland), which is the supervisory authority in Ireland: https://www.dataprotection.ie/. You may also complain to the supervisory authority in your EU country of residence.

15. Children

SoloShift is intended for adults and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, contact us and we will take appropriate steps.

16. Changes to this policy

We may update this policy from time to time. When we do, we will change the “Last updated” date above and, where appropriate, tell you by other means. Please review it periodically.

17. Contact us

Questions about this policy or your personal data can be sent to support@soloshift.io, addressed to Datasphere Dynamics Limited, Dublin, Ireland.