Privacy Policy — what is actually stored

1. Who is responsible for your data

[Vinsights.Club — registered name and UEN to be inserted], Republic of Singapore, is the organisation responsible for the personal data described here.

Data Protection Officer. Write to [email protected] about anything on this page: to ask what is held, to correct it, to withdraw consent, or to complain. We will acknowledge within 5 working days and answer within 30 days. If an answer will take longer we will tell you why and when.

For anything else, [email protected].

2. What we do not store

Your CV. It is sent to Anthropic to generate a strategy and then discarded. It is never written to the database — only a flag saying one was provided.

Request bodies in logs. Errors record the type, message and status only. Logs are retained and searchable and sit outside any deletion promise, so nothing you wrote goes into them.

Card details. Card payments for digital products are taken by Fungies, which is the merchant of record for those sales. Your card details go to Fungies and never pass through this site or our servers. We receive the fact that a payment succeeded, the amount, and the email address you gave Fungies — never a card number, and never anything that could be used to charge you again.

Your IP address. It is not read, not logged by the application, and not used for analytics. This is the single decision that keeps our visit counts outside the PDPA, and it is why this site has no cookie banner: there is nothing to consent to.

3. What we store, and why

Your email address and first name. To identify your account, to send you a sign-in link or code, and to address you by name. A name is optional.

Your objectives, and the advice generated from them. So the Archive works, and so later advice can build on earlier advice.

Journal entries, in their own column. These are candid, and they often describe colleagues. They are held under the same per-account scoping as everything else, they are cleared by the reset in clause 9, they are erased with the account, and they are never analysed to produce an assessment of you.

Contacts you save, the outcomes you log, drafts written for you, your self-assessment answers, your values and principles, your credit balance, and what each generation cost.

What you have bought, and the licence it carries. For a downloadable product — the StrataGEM Digital Planner, say — we keep Fungies' order reference, the product, the amount, the date, the billing country, and the email address the purchase was made with. The country comes from Fungies, which collects it because tax law requires it; we use it only to see which markets buy, and we publish it only in aggregate, never as a figure small enough to point at one person. That record is what lets us send the file again when somebody loses it, which is a promise made in digital products and cannot be kept without it.

A purchase record outlives the account it was made from. This is the one exception to the erasure described in clause 9, and it is not a choice we make case by case: Singapore tax law requires the record for five years, and the promise above cannot be kept without it. What goes on erasure is the link between the purchase and your account. What stays is the purchase — the reference, the product, the amount, the date and the email it was bought with. Nothing you wrote is in it.

A record of what you consented to, and when, and against which version of this notice. That record is how either of us can answer the question later.

Page views, with no identifier. The path, the referring site, and the device's own time zone — which the browser volunteers and from which we derive a country for aggregate counts. No cookie is set and nothing is stored in your browser by the marketing site.

4. Why we are allowed to hold it — consent and purpose

We hold your data because you gave it to us to obtain the product, and we use it only for that. We do not use it for anything you were not told about on this page, and we will ask again if that ever changes.

We collect what the feature needs and no more. A first name rather than a full name, because a greeting is all it is for.

We do not sell, rent or trade your personal data to anyone, for any purpose. This covers everything on this page, not only the parts where it is said again: your email address, your objectives, your journal entries, your archive and your saved contacts. Clause 5 lists every service that receives any of it and why. There is no other recipient.

You may withdraw consent at any time, by writing to the DPO. Withdrawing it means we can no longer provide the product, so the account is closed and unspent credits are refunded. The record of what you previously agreed to is kept, for the reason given in clause 3.

5. Who else sees it

Your data is disclosed only to the services the product actually needs. Each receives the minimum for its job and is engaged under terms that require it to protect the data and use it only on our instructions.

- Anthropic — the language model. Receives your objectives, your CV while a strategy is generated, journal text and contact fields when you ask for a letter or a fit assessment. - Resend — sends your sign-in email. Receives your email address. - Fungies — takes payment for digital products, and is the merchant of record for them: Fungies Inc. is the seller on your receipt and handles the sales tax. Receives your email address, your card details and your billing country, directly from you. We never see the card. Fungies handles that data as its own controller, under its privacy policy. - Google Cloud Storage — holds the planner file. It receives no information about you: the download link is signed by us, expires after fifteen minutes, and carries no name, email or order reference. - Brave Search, Firecrawl, Adzuna, and the job-board APIs of Greenhouse, Lever, Ashby and Workday — receive the search terms or the public posting URL you supplied. They are not sent your identity. - Neon — hosts the database in which everything above is stored.

Nothing you write is offered, sold or shown to an employer unless you choose to send it — for instance by answering an employer challenge. Nothing is inferred about your capability from your journal or your archive and passed on. Where market statistics are published they are aggregated so that no individual can be identified, and never derived from free text.

6. Where it is held, and sending it abroad

The database and the services in clause 5 are hosted outside Singapore.

Under the PDPA's Transfer Limitation Obligation we may only transfer personal data overseas where it will be protected to a standard comparable to the PDPA. Our agreements with each provider require that, by contract, for as long as they hold the data.

7. How it is protected

Sign-in is by a single-use link or a six-digit code sent to your email address. There is no password to steal, lose or reuse.

Sessions can be revoked, which invalidates every token already issued for an account. Sign-in codes are stored hashed and limited to a small number of attempts. A file you attach to an employer challenge is stored outside the public web root, so it cannot be fetched by guessing a URL. Every query is scoped to the signed-in account.

If a breach occurs that is likely to result in significant harm, or that is of a significant scale, we will notify the Personal Data Protection Commission and the affected people as the PDPA requires.

8. How long it is kept

We keep personal data only for as long as there is a purpose for it.

- Your account and its contents — until you ask for erasure, or until the account is closed. - An account created for an email address that was never confirmed — deleted after 30 days. Nobody ever occupied it. - Invoices and payment records — five years, because Singapore tax law requires it. These hold your name, the amount and the date, and nothing you wrote. - Consent records — kept after erasure of the rest, as the only way to show what was agreed. They hold no content.

9. Your rights, and how to use them

Access. One request returns everything held about you as a JSON file, in the shape it is stored in — not a summary you would have to trust.

Correction. Tell the DPO what is wrong and we will correct it, and tell anyone we passed it to where that matters.

Reset. A button on your account page clears the record of a campaign that is over — strategies, journal entries, logged outcomes, drafts, and the strategist's standing file. Your account, your unused credits and your saved contacts stay. This is what most people want after landing a job. It cannot be undone, so export first.

Erasure. Write to us and we will delete the account and every row beneath it: archive, journals, outcomes, drafts, contacts, consents, usage, and any unused credits. Ask from the address on the account so we know it is you.

There is deliberately no self-serve delete button. It sat beside the reset button for a short time and invited exactly the wrong mistake — ending an account, and losing paid credits, when all somebody wanted was a clean journal. Handling erasure by request costs you an email and costs us a minute; it does not reduce the right.

Complaint. If you are not satisfied with our answer you may complain to the Personal Data Protection Commission of Singapore.

10. The Workplace Culture e-Survey is anonymous

The survey asks for no name, no email and no account, and none is stored. A completed response is an organisation's name, the country and industry you picked from the two lists, up to eight scores between 1 and 5, and the date. It is not attached to your account even if you are signed in, and there is nothing in it that could be traced back to you. The table that holds it has no column for a person.

The country and industry exist so that scores can be compared like with like — a bank in Zurich and a charity in Manila do not belong in one average. They also narrow the group a response sits in, so the minimum number of responses is applied after any filter, never before it.

That cuts both ways and we would rather say so: because responses are anonymous, we cannot verify who gave them or stop one person answering twice.

We publish scores by sector and country, never for a named organisation. "Banking in Singapore" names nobody; one employer's collective score, in a small team, comes close to naming the people who gave it. Every published figure carries the number of responses behind it and is described as what it is — self-reported and unverified.

Because nothing identifies a response, an anonymous survey answer cannot be found and removed on request. That is the same property that protects it.

11. Questions put to Ascent are anonymous

Ascent is the chatbot on the marketing site. What is asked of it is recorded without any account identifier, so that we can see which questions the product fails to answer. The table has no column for a person. As with the survey, that means a question cannot afterwards be found and removed on request.

12. People who are not you

Saving a contact stores information about somebody else. They are a real person who never came here and never agreed to anything, so this clause is about what happens to them.

What is kept. Their name, job title, employer, location, a link to a public page about them, and whatever note you write. Nothing else. No photograph, no connection list, no message history.

Where it comes from. Public sources — a company page, a speaker list, a conference programme, a published profile. The search looks for people who match a description you wrote, not for private details about a person you named.

We do not guess anybody's email address. The tool used to construct a likely one from a company's naming pattern when it could not find a real address. That was removed on 1 September 2026 and the addresses it had already produced were deleted. An email address is stored only when you put it there yourself.

What is drawn from it. Saved contacts are connected to each other and to the organisations you are aiming at, so you can see which route to a company already runs through somebody you know of. That map is built only from the fields listed above and is visible only to you.

Who else sees it. These fields are sent to Anthropic when you ask for a letter or a fit assessment, on the same terms as clause 5. They are never sold, never shared with another user, and never used to build a directory. Delete a contact and our record of it goes; erase your account and our record of every contact goes too — with the one exception set out immediately below.

One copy we cannot reach. Until 1 September 2026 there was a MentorFinder browser extension, and every contact saved through it was also written to a file on that person's own computer. The extension is retired and nothing writes those files any more, but the ones already written are theirs, not ours. Deleting a contact here, or erasing an account, does not remove them — we have no way to reach a file on somebody else's machine, and we would rather say so than imply a reach we do not have.

If you are the person in somebody's list and want to know what is held about you, or want it removed, write to [email protected] or to the DPO at [email protected]. You do not need an account here to ask.

13. Children

This product is for adults. You must be 18 or over to hold an account, as clause 2 of the terms says. We do not knowingly collect personal data from anyone under 18, and if we learn that we hold any we will delete it.

14. Changes to this notice

If this notice changes materially, the reference at the top changes with it and we will tell you before the new version applies to your account.

15. Contact

Data Protection Officer, Vinsights.Club — [email protected]

Everything else — [email protected]