Legal
Privacy Policy
Last updated: 11 May 2026
Who we are
What data we collect
We collect the following information when you use Alumden:
- Account information: your email address, full name, and profile photo (if you sign in with Google)
- Profile information: headline, LinkedIn URL, and any other details you choose to add
- Work history: the organisations, roles, teams, and dates you provide during onboarding
- Vouch requests: messages and notes exchanged as part of the vouching process
- Usage data: basic analytics on how you interact with the platform
How we use your data
We use your data solely to provide and improve Alumden:
- To place you in the correct circles based on your work history
- To calculate connection scores and surface relevant colleagues
- To send you transactional emails (invite links, vouch notifications)
- To allow members of your shared circles to find and contact you
We do not sell your data. We do not use your data for advertising. We do not share your data with third parties except as described below.
Who we share your data with
Your data is processed by the following third-party services, each subject to their own privacy policies:
- Supabase — our database and authentication provider, hosted on AWS in the EU (Ireland)
- Vercel — our hosting provider
- Resend — our email delivery provider
- Google — if you choose to sign in with Google OAuth
Data visibility within Alumden
Your profile and work history are visible only to members of circles you share. Vouch requests and their outcomes are visible only to the requester and the voucher. Nothing is publicly visible outside of authenticated, shared-circle members.
CV storage and sharing
You may optionally upload a CV to your Alumden profile. Your CV is stored securely using Supabase Storage and is visible only to you by default. When you express interest in a role, you may choose to attach your CV to that specific referral. If you do, a snapshot of your CV at that moment is created and attached to the referral record. This snapshot is accessible to the job poster within Alumden and, if the poster is a connector who forwards the referral to a third party (for example, an internal recruiter at a hiring company), via the private dossier link. Snapshots are not affected by subsequent changes to your profile CV. Snapshots are automatically deleted 90 days after the referral is created, or sooner if the referral thread is closed.
Referral dossier links
When a member of Alumden makes a referral on your behalf (for example, forwarding your expression of interest to their internal hiring contact), Alumden generates a private dossier link containing your profile information, any note you provided, any attached CV, and any vouches you attached. This link is shared only with the specific recipient of the referral and expires automatically after 90 days. The link requires no account to access. You may request immediate revocation of any active dossier link by contacting support.
Data shared with hiring companies
By expressing interest in a role via Alumden, you consent to your profile information, your note, your availability, your attached CV (if any), and your attached vouches being shared with the role's poster and, if applicable, with their designated hiring contact. This may include employees of the hiring company who are not Alumden members. Alumden does not control how hiring companies subsequently use your information; we recommend reviewing the hiring company's own privacy policy before proceeding with any application.
Job listing imports
When you add a current employer to your work history, you can optionally tick a consent checkbox giving Alumden permission to import publicly listed roles from that employer's careers page so they can be surfaced to members of circles you are a part of. This is strictly opt-in and applies only to publicly available information on the employer's official careers page.
We store this consent as a boolean flag on your work history entry. You can withdraw it at any time in Settings, which will prevent any future listings from that employer being imported on the basis of your consent. We do not share your identity with the employer when importing listings, and we do not link imported listings to your profile.
Your rights under GDPR
If you are located in the UK or EU, you have the following rights:
- Access: request a copy of the data we hold about you
- Rectification: ask us to correct inaccurate data
- Erasure: request that we delete your account and all associated data
- Portability: request your data in a machine-readable format
- Objection: object to how we process your data
To exercise any of these rights, email us at hello@alumden.com. We will respond within 30 days.
Data retention
We retain your data for as long as your account is active. If you request deletion, we will remove your account and all associated personal data within 30 days. Anonymised, aggregated data may be retained for analytics purposes.
- Referral records are retained for as long as your account is active and for 180 days after account deletion.
- CV snapshots are retained for 90 days after referral creation, or until the referral is closed, whichever comes first.
- Profile CVs are retained until you delete them or delete your account.
- Close reasons are retained indefinitely in aggregate form for analytics, but individual-level close reasons are deleted 180 days after referral creation.
Cookies
Alumden uses strictly necessary cookies to maintain your authentication session, and optional analytics cookies (Sentry) to monitor errors with your consent. For full details see our Cookie Policy.
Changes to this policy
We may update this policy from time to time. We will notify active members by email of any material changes. Continued use of Alumden after changes constitutes acceptance of the updated policy.
Contact
Questions about this policy? Email us at hello@alumden.com.