Privacy Policy

RĒSONA provides an online career reflection and diagnostic experience. We help users understand patterns in their work life and generate personalised insights and reports based on questionnaire responses.

For privacy enquiries, contact us at [email protected].

Account and identity data. When you sign in, we collect your email address and authentication identifiers through our auth provider (magic link or Google sign-in). We may store your name if you provide it.

Questionnaire and career data. We collect the answers you submit in the intro and full diagnostic questionnaires, including free-text responses, optional demographic fields (such as age range or gender), LinkedIn profile URLs you choose to share, and any voice transcriptions you submit where that feature is available.

Generated content. We store AI-generated previews, diagnostic reports, and related metadata produced from your answers.

Payment data. If you purchase access to the full diagnostic, payments are processed by Stripe. We receive payment status, customer identifiers, and checkout session references — not your full card details.

Feedback. If you submit report feedback, we collect your message and associated account identifier.

Technical and usage data. We do not run optional client analytics until you choose Accept or Reject on our consent banner. If you accept, we use analytics tools (including cookies) to collect page views, feature usage, device and browser information, and similar diagnostic data; session recordings, where enabled, mask form inputs by default. If you reject, we may still collect limited anonymous usage data in your browser session only (in-memory, without analytics cookies) to understand aggregate traffic.

Local storage. We may store questionnaire progress, consent choices, and similar preferences in your browser until you clear them or complete the flow.

We use personal information to:

• Provide, operate, and improve the diagnostic experience
• Authenticate you and save your progress across sessions
• Generate personalised previews and career diagnostic reports
• Process payments and confirm access to paid features
• Send service-related communications, including sign-in links and result delivery
• Respond to support requests and feedback
• Monitor performance, security, and product usage (with consent where required)
• Comply with legal obligations

We do not sell your personal information. We do not use your questionnaire answers to train public AI models for unrelated purposes.

If you are in the European Economic Area or United Kingdom, we rely on:

• Contract — to deliver the service you request, including generating your diagnostic and managing your account
• Consent — for analytics cookies, advertising conversion measurement, marketing attribution storage, session recordings, and where you explicitly agree (for example, before we email your results)
• Legitimate interests — to secure the platform, prevent abuse, and, if you reject analytics cookies, to measure limited anonymous in-session usage without storing analytics cookies, where that does not override your rights
• Legal obligation — where we must retain or disclose information by law

We use cookies and browser storage on our website and application. Some are strictly necessary to run the service; others are optional and require your consent.

Strictly necessary. Authentication and session cookies (for example, through Supabase) keep you signed in and protect your account. These are required for the service to work and do not require consent.

Analytics cookies (accept required). If you choose Accept, we use PostHog (hosted in the EU at eu.i.posthog.com) to understand how visitors use RĒSONA. PostHog may set cookies such as ph_phc_* and ph_posthog, and store identifiers in your browser's local storage. We use this data for page views, feature usage, error tracking, and session recordings (form inputs are masked by default).

Anonymous in-session measurement (reject). If you choose Reject, we do not set analytics cookies or load advertising tags. We may still send limited, anonymous usage events to PostHog for the current browser session only (stored in memory, not in analytics cookies). We do not use this mode for advertising attribution or session recordings.

Advertising / conversion measurement (accept required). If you choose Accept, we also load Google Ads (gtag.js) to measure advertising conversions. Google may set cookies related to ads and conversion tracking when this tag runs.

Your choice. A consent banner asks you to Accept or Reject before optional analytics run. Until you choose, we do not run client analytics. Your choice applies across withresona.com and app.withresona.com via a shared cookie. You can also clear site data in your browser settings or contact us to withdraw consent.

We share data only with service providers that help us run RĒSONA, under appropriate contractual safeguards. These may include:

• Supabase — authentication and database hosting
• Stripe — payment processing
• Google (Gemini) — AI processing to generate previews and reports
• PostHog — product analytics (EU-hosted; see section 5 for cookies)
• Google Ads — advertising conversion measurement (see section 5)
• Resend — transactional email delivery for feedback notifications
• Cloudflare — application hosting and delivery

Your diagnostic report may be viewable by anyone with the report link you share. Report pages are designed for sharing at your discretion — do not share the link if you want to keep results private.

We may also disclose information if required by law, court order, or to protect the rights, safety, and security of users and RĒSONA.

We and our providers may process data in the United Kingdom, European Union, United States, and other countries. Where data is transferred outside your country, we use appropriate safeguards such as standard contractual clauses or equivalent mechanisms where required.

We keep your account and questionnaire data for as long as your account is active or as needed to provide the service. You may request deletion of your account and associated data by contacting us.

Payment records may be retained longer where required for accounting, tax, or fraud prevention. Analytics data is retained according to our analytics provider's settings.

Depending on where you live, you may have the right to access, correct, delete, or export your personal data; object to or restrict certain processing; withdraw consent where processing is consent-based; and lodge a complaint with your local data protection authority.

To exercise these rights, email [email protected]. We may need to verify your identity before responding.

You can decline analytics cookies via the consent banner (your choice is remembered across our website and app). Rejecting cookies may still allow limited anonymous in-session measurement as described in section 5. You can clear cookies and local browser storage at any time through your browser settings.

We use technical and organisational measures appropriate to the sensitivity of the data, including encrypted connections (HTTPS), access controls, and row-level database policies. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

RĒSONA is intended for adults. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us data, contact us and we will delete it.

We may update this Privacy Policy from time to time. The "Last updated" date at the top will change when we do. Continued use of the service after changes take effect constitutes acceptance of the revised policy.

Questions about this Privacy Policy or our data practices: [email protected]