Privacy Policy
Last updated: March 28, 2026
1. Introduction
ValueSignal ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our Service.
By using ValueSignal, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
2.0 Evidence vs. Personal Data
ValueSignal distinguishes between "Evidence" and "Personal Data" to provide transparent, reviewable skill signals while protecting your privacy:
- Evidence refers to anonymized, structured representations of skills derived from your conversations. Evidence includes:
- Skill scores and capability assessments (e.g., "Problem Solving: 85/100")
- Extracted evidence snippets that demonstrate skills (e.g., "Analyzed complex data structure and proposed optimization")
- Work type classifications and tags
- Aggregated patterns and trends
- Personal Data refers to information that directly identifies you or contains your full conversation content. Personal Data includes:
- Your complete prompts and AI responses
- Account information (email, name, profile details)
- Conversation metadata (timestamps, platform identifiers, message signatures)
- Any information that could be used to identify you personally
When you share your profile, you are sharing Evidence (skill signals and anonymized evidence snippets), not your Personal Data (full conversations or identifying information). You maintain full control over what Evidence is visible and can edit or delete any Evidence at any time.
2.1 Account Information
When you create an account, we collect:
- Email address
- Password (stored as a hashed value)
- Name (optional)
- Account type (user or recruiter)
2.2 Conversation Metadata
When you use our browser extension or web console, we collect:
- Conversation content (prompts and responses)
- AI platform and model information (e.g., ChatGPT, Claude, Gemini, Cursor)
- Timestamps and interaction metadata
- Work type classifications
- Message hashes for deduplication
Message hashes: We compute hashes to deduplicate messages and improve system efficiency. In some jurisdictions (for example, under the GDPR), a hash derived from message or conversation content may be treated as pseudonymous personal data, not anonymous data. We protect message hashes with the same technical and organizational measures we apply to conversation content and related metadata (including encryption in transit, access controls, and retention aligned with your account).
Extension updates: We publish the ValueSignal extension through applicable browser extension marketplaces (for example, the Chrome Web Store today, and other supported channels if we add them). New versions may be delivered automatically by the browser or platform, replacing the previous version where the store supports it. We describe material changes to data practices in this Privacy Policy and in the relevant marketplace listing when required.
Talent vs. recruiter accounts in the extension: Today, conversation capture via the extension applies to talent (user) accounts using supported AI platforms as described above. If you use a recruiter account in the extension, you may see an informational screen only; we do not collect AI conversation content from the extension for recruiter accounts in that configuration. Recruiter-related data you submit through the web application (for example, job or workspace information) is handled under the applicable sections of this Policy and your account settings.
2.3 Profile Information
You may provide additional profile information:
- Headline and summary
- Skills and preferences
- Industry and job role preferences
- Location and work preferences
2.4 Usage Data
We automatically collect information about how you use the Service:
- Pages visited and features used
- Time spent on the Service
- Device and browser information
- IP address (for security and analytics)
3. How We Use Your Information
We use the collected information for the following purposes:
- Service Provision: To provide, maintain, and improve the Service
- Skill Analysis: To analyze your AI conversations and generate skill signals
- Profile Building: To create and maintain your talent profile
- Job Matching: To match your profile with relevant job opportunities (if applicable)
- Communication: To send you service-related notifications and updates
- Security: To detect and prevent fraud, abuse, and security threats
- Analytics: To understand usage patterns and improve our Service
4. Data Storage and Security
We implement industry-standard security measures to protect your data:
- Encrypted data transmission (HTTPS/TLS)
- Hashed passwords (never stored in plain text)
- Secure database storage
- Regular security audits and updates
- Access controls and authentication
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.
4.1 Data Minimization
ValueSignal follows a "Private by Default" principle and practices data minimization:
- We only collect data that is necessary to provide the Service and generate your skill signals
- We do not collect data without your explicit action — data capture only occurs when you explicitly activate the capture feature
- We minimize the scope of data collection — we capture conversation content only when you choose to capture it, not continuously or in the background
- We store only what is needed — full conversation data is stored only for generating skill signals; we do not retain unnecessary metadata or browsing history
- We anonymize where possible — when generating evidence and skill signals, we extract structured, anonymized representations rather than storing full conversation context
- We apply automated filtering patterns — to detect and redact common sensitive patterns where our systems support it today (for example, validated payment card sequences, email addresses, phone numbers, and certain government ID–like number formats); patterns and coverage may evolve, the filtering is not exhaustive, and you remain responsible for reviewing and editing what you capture before sharing
You have full control over what data is captured, stored, and shared. You can delete any captured data at any time, and deleted data is permanently removed from our systems.
4.1.1 Evidence, conversation-derived content, and encryption
Evidence (skill signals, evidence snippets, and related structured fields) and the underlying conversation-derived content you choose to capture are transmitted to our servers using TLS (HTTPS) and stored in our production environment with encryption at rest on the infrastructure we use (for example, encrypted volumes and database services offered by our hosting providers), together with access controls and authentication as described in Section 4.2. We do not intend for Evidence to include direct identifiers when shown to third parties; it is still associated with your account in our systems until you delete it or close your account, subject to legal retention.
Where we produce aggregated or analytics datasets, we apply industry-standard de-identification techniques so that such data cannot reasonably be linked back to an individual user, consistent with the limitations described in our Terms of Service. No method eliminates all theoretical re-identification risk.
4.2 Access Control
ValueSignal implements strict access controls to ensure your data remains private by default:
- User-controlled access — only you can access your full conversation data and personal information through your authenticated account
- Role-based access controls — ValueSignal employees and contractors have access only to data necessary for their role (e.g., technical support, system maintenance), and access is logged and audited
- No default sharing — your data is never shared with third parties (including recruiters) without your explicit consent
- Granular sharing controls — when you choose to share your profile, you control what information is visible (evidence and skill signals, not full conversations)
- Encrypted storage — all personal data is encrypted at rest and in transit
- Regular access reviews — we regularly review and audit who has access to user data and remove access when no longer needed
If you believe your account has been accessed without authorization, please contact us immediately at privacy@valuesignal.ai.
5. Data Sharing and Disclosure
We do not sell your personal information. We may share your data only in the following circumstances:
- With Your Consent: When you explicitly authorize sharing (e.g., sharing your profile with a recruiter)
- Service Providers: With trusted third-party services that help us operate the Service (e.g., hosting, analytics)
- Legal Requirements: When required by law, court order, or government regulation
- Business Transfers: In connection with a merger, acquisition, or sale of assets (with notice to users)
- Protection of Rights: To protect our rights, property, or safety, or that of our users
6. Your Rights and Choices
You have the following rights regarding your personal information:
- Access: Request a copy of your personal data
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of your account and data
- Export: Export your data in a portable format
- Opt-Out: Unsubscribe from marketing communications
- Control: Control what data is captured and shared through your account settings
To exercise these rights, contact us at privacy@valuesignal.ai.
7. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to:
- Maintain your login session
- Remember your preferences
- Analyze Service usage
- Improve user experience
You can control cookies through your browser settings. However, disabling cookies may limit your ability to use certain features of the Service.
8. Third-Party Services
Our Service may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.
8.1 Third-Party AI Services
ValueSignal works with third-party AI services (ChatGPT/OpenAI, Claude/Anthropic, Gemini/Google, Cursor/Anysphere) to analyze your conversations, where supported. When you use these services through ValueSignal:
- Your conversation data may be processed by these third-party AI services according to their terms and privacy policies
- ValueSignal is not responsible for how third-party AI services handle your data, including their data retention, security practices, or use of your data for training purposes
- Third-party AI services may experience downtime, errors, or changes to their services that affect ValueSignal's functionality
- ValueSignal is not liable for any losses, damages, or data incidents resulting from third-party AI service failures, security breaches, or policy changes
We encourage you to review the privacy policies and terms of service of any third-party AI services you use. ValueSignal does not guarantee the availability, accuracy, or reliability of any third-party AI service.
9. Data Retention
We retain your personal information for as long as your account is active or as needed to provide the Service. When you delete your account, we will delete or permanently de-identify your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes.
Aggregates and Evidence after closure: Anonymized Evidence or other information that has been irreversibly de-identified may remain in aggregated datasets used for analytics or service improvement; such data will no longer be linked to your identity or account. Where we rely on reversible pseudonymization only, we will delete or de-identify it consistent with the paragraph above and our Terms of Service.
10. Children's Privacy
ValueSignal is not intended for users under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child under 18, we will take steps to delete such information.
11. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. By using the Service, you consent to the transfer of your information to these countries.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.
13. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:
Email: privacy@valuesignal.ai
Website: valuesignal.ai