Privacy Policy

We collect the following information when you use Alumden:

• Account information: your email address, full name, and profile photo (if you sign in with Google)
• Profile information: headline, LinkedIn URL, and any other details you choose to add
• Work history: the organisations, roles, teams, and dates you provide during onboarding or import from a CV
• Verified record content: achievements, character tags, skills, education, languages, and the long-form references and notes that you or your colleagues add to your record
• Vouches and requests: the vouches, references and notes you give or receive, and the requests for input you send
• CV files: any CV you upload, and the structured information extracted from it (see CV upload and AI processing below)
• Legacy vouch requests: messages and notes exchanged as part of the earlier standalone vouching flow (now folded into references and vouches on your record)
• Usage data: basic analytics on how you interact with the platform

If you respond to a request for input without an Alumden account (for example, a colleague asks you to vouch for their work or write a reference), we collect the name, job title, working relationship and email address you provide, together with the contribution itself, so it can be attached to that person's record.

We use your data solely to provide and improve Alumden:

• To place you in the correct circles based on your work history
• To calculate connection scores and surface relevant colleagues
• To send you transactional emails (invite links, request and approval notifications)
• To allow members of your shared circles to find and contact you
• To process a CV you upload, using a third-party AI provider, so we can suggest structured achievements, education, languages and skills for your review
• To deliver requests for input to the people you choose, including by email to people who are not yet on Alumden

We do not sell your data. We do not use your data for advertising. We do not share your data with third parties except as described below.

Your data is processed by the following third-party services, each subject to their own privacy policies:

• Supabase - our database and authentication provider, hosted on AWS in the EU (Ireland)
• Vercel - our hosting provider
• Resend - our email delivery provider
• Anthropic provides the Claude AI model we use to read an uploaded CV and structure its contents, and to tidy text you choose to run through an AI feature. Anthropic processes this content only to return the result to us and does not use it to train its models. Anthropic is based in the United States.
• Google - if you choose to sign in with Google OAuth

If you use the “Import from CV” feature, the contents of the CV you upload are sent to our AI provider (Anthropic) to extract structured information: your achievements, education, languages, skills, and the companies and roles in your history. The extracted items are shown to you for review, and nothing is added to your record until you confirm. Achievements are saved as drafts that you can edit, publish or delete.

This processing happens only when you actively upload a CV. The CV content is sent to Anthropic solely to produce the structured output and is not used to train any AI model. If your CV names an employer that is not yet on Alumden, you can choose to add it; new organisations are created in a pending state for our review before any circle is formed.

Your record can be added to by you and by people you have worked with. Vouches are recorded against the relevant item. References and notes are submitted for your approval and are not shown on your record until you approve them; if you reject a contribution it is removed and the contributor is not told.

When you ask someone for input, we send them a request. If they are an Alumden member they receive it in the app; if they are not, we email a personal link to the address you provide so they can respond without creating an account. People who contribute provide their name, job title, working relationship and email; this is stored with the contribution and the email is not shown publicly. Request links expire after 14 days.

Your profile, verified record and work history are visible to members of circles you share. Approved references and notes appear on your record; pending contributions are visible only to you (the record owner) and the person who wrote them. Vouches are shown as counts and voucher names on your record.

There is no public profile lookup. The one exception is a personal, tokenised link you send when requesting input: it lets a specific recipient view your record and respond, and it expires after 14 days. Legacy vouches remain governed by the visibility level the recipient set.

You may optionally upload a CV to your Alumden profile. Your CV is stored securely using Supabase Storage and is visible only to you by default. When you express interest in a role, you may choose to attach your CV to that specific referral. If you do, a snapshot of your CV at that moment is created and attached to the referral record. This snapshot is accessible to the job poster within Alumden and, if the poster is a connector who forwards the referral to a third party (for example, an internal recruiter at a hiring company), via the private dossier link. Snapshots are not affected by subsequent changes to your profile CV. Snapshots are automatically deleted 90 days after the referral is created, or sooner if the referral thread is closed.

When a member of Alumden makes a referral on your behalf (for example, forwarding your expression of interest to their internal hiring contact), Alumden generates a private dossier link containing your profile information, any note you provided, any attached CV, and any vouches you attached. This link is shared only with the specific recipient of the referral and expires automatically after 90 days. The link requires no account to access. You may request immediate revocation of any active dossier link by contacting support.

By expressing interest in a role via Alumden, you consent to your profile information, your note, your availability, your attached CV (if any), and your attached vouches being shared with the role's poster and, if applicable, with their designated hiring contact. This may include employees of the hiring company who are not Alumden members. Alumden does not control how hiring companies subsequently use your information; we recommend reviewing the hiring company's own privacy policy before proceeding with any application.

When you add a current employer to your work history, you can optionally tick a consent checkbox giving Alumden permission to import publicly listed roles from that employer's careers page so they can be surfaced to members of circles you are a part of. This is strictly opt-in and applies only to publicly available information on the employer's official careers page.

We store this consent as a boolean flag on your work history entry. You can withdraw it at any time in Settings, which will prevent any future listings from that employer being imported on the basis of your consent. We do not share your identity with the employer when importing listings, and we do not link imported listings to your profile.

If you are located in the UK or EU, you have the following rights:

• Access: request a copy of the data we hold about you
• Rectification: ask us to correct inaccurate data
• Erasure: request that we delete your account and all associated data
• Portability: request your data in a machine-readable format
• Objection: object to how we process your data

To exercise any of these rights, email us at hello@alumden.com. We will respond within 30 days.

We retain your data for as long as your account is active. If you request deletion, we will remove your account and all associated personal data within 30 days. Anonymised, aggregated data may be retained for analytics purposes.

• Referral records are retained for as long as your account is active and for 180 days after account deletion.
• CV snapshots are retained for 90 days after referral creation, or until the referral is closed, whichever comes first.
• Profile CVs are retained until you delete them or delete your account.
• Close reasons are retained indefinitely in aggregate form for analytics, but individual-level close reasons are deleted 180 days after referral creation.

Alumden uses strictly necessary cookies to maintain your authentication session, and optional analytics cookies (Sentry) to monitor errors with your consent. For full details see our Cookie Policy.

We may update this policy from time to time. We will notify active members by email of any material changes. Continued use of Alumden after changes constitutes acceptance of the updated policy.

Questions about this policy? Email us at hello@alumden.com.