Privacy Policy

Who we are

EDF is an early-stage foundation whose nonprofit registration is still in progress. Until registration completes there is no registered entity acting as data controller; the founders listed on our Who We Are page are responsible for this site and the data it holds. You can reach us at dev@endangered.dev.

What we collect

• Account details. Your name, email address, and a hashed password. Passwords are stored using bcrypt and are never readable by us.
• Profile details you add. Bio, skills, LinkedIn URL, languages, location, citizenships, hobbies, and your chosen track. All of these are optional.
• Resumes you upload. The file itself and any AI-generated recommendations produced from it.
• Activity on the platform. Event registrations, training enrolments and progress, credit claims, and notifications we have sent you.
• Contact details of people you invite. If you invite someone to an event, we store the name and email or phone number you provide so we can send that invitation. Please only invite people who would welcome the message.
• Analytics. We use Google Analytics 4, which sets cookies and collects usage data such as pages viewed, approximate location, and device or browser information.

How resumes are stored

We want to be specific here rather than vague. Uploaded resumes are currently stored as files on our server under a path derived from your account identifier, and are served over the web without an additional access check. The path is not linked or listed anywhere, but anyone who knows or guesses the exact URL could retrieve the file. We are working to place resume downloads behind an authentication check. If you would rather not upload a resume until that is done, the rest of the platform works without one.

Automated processing and AI

Our resume review and career guidance features send the content you submit to DeepSeek, a third-party AI provider, for processing. Do not paste information into these tools that you would not want leaving our systems. We do not use your data to train our own models.

Why we process your data

To operate your account and authenticate you; to deliver the programmes, events, and guidance you ask for; to send you transactional email such as password resets, event confirmations, and invitations; and to understand in aggregate how the site is used so we can improve it. We do not sell your personal data, and we do not share it with advertisers.

Who we share it with

Only the service providers needed to run the platform: our hosting provider, our email provider (Hostinger) for outbound mail, DeepSeek for the AI features described above, and Google Analytics. Where a programme is delivered with a named partner, we will tell you before sharing anything about you with them.

How long we keep it

Account and profile data is kept while your account exists. Password reset links expire one hour after they are issued and are deleted once used. If you ask us to delete your account, we remove your profile, resumes, and associated records.

Your rights

You can ask us for a copy of the data we hold about you, ask us to correct it, or ask us to delete it entirely. Email dev@endangered.dev and we will action it. You can opt out of Google Analytics using your browser settings or Google's opt-out tools. Depending on where you live, you may have additional statutory rights.

Changes to this policy

We will update the date at the top of this page when this policy changes. If a change materially affects how we handle your data, we will tell account holders by email.