Privacy Policy

Effective date: November 1, 2026 · Last updated: September 12, 2026

Unheld is operated by Unheld, Inc., a Delaware corporation. This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you have over your data. If you have questions, contact us at privacy@unheld.ai.

1. What We Collect

Information you provide directly

  • Account information: When you sign in with Google, we receive your name, email address, and Google account identifier. We do not receive or store your Google password.
  • Conversation content: The messages you send through Unheld — including what you share about your job search, emotional state, interview experiences, and anything else you write — are stored to provide the service.
  • Resume: If you upload a resume, we will store it in your account until you replace or delete it.

Information generated through your use of the service

  • Session data: We log which features you use and when to measure whether the product is actually helping you.
  • Self-Awareness summaries: After you've used Unheld for a period of time, we generate a brief internal summary of patterns across your conversations to power the Self-Awareness feature.
  • Technical data: Standard server logs: IP address, browser type, device type, timestamps, and error logs.

2. How We Use Your Information

  • To run the companion conversation and task features you use.
  • To run the Self-Awareness feature, which requires analyzing patterns across your conversation history using an AI model.
  • To calculate aggregate, anonymized metrics about whether Unheld is working.
  • To send transactional communications: payment confirmations, password reset emails, and service notices.
  • To investigate and respond to security incidents, abuse, or legal obligations.
  • We do not use your data for advertising. We do not sell your data to third parties.

3. Who We Share Your Data With

We share data with a small number of service providers: Anthropic (AI infrastructure), Google (authentication), Stripe (payments), and cloud infrastructure providers. These providers process your data only on our behalf. We may also disclose information if required by law or to protect safety.

4. Artificial Intelligence and Your Conversations

Your conversation content is transmitted to Anthropic's servers each time you send a message. This is not optional — it is how the product works. We do not currently use your conversations to train our own AI models. We do not sell or license your conversation data to any AI company for training purposes.

5. Data Retention

  • Conversation content, session data, and resume: retained until you delete your account.
  • Self-Awareness summaries: retained until account deletion.
  • Anonymized aggregate metrics: retained indefinitely.
  • Billing records: retained as required by law (typically 7 years in the US).
  • Technical logs: retained for up to 90 days, then deleted.
  • When you delete your account, we delete or anonymize your personal data within 30 days.

6. Crisis Safety Records

If a conversation is flagged as a potential crisis situation, a record is retained in a restricted-access log solely to allow us to review our crisis response and improve safety measures.

7. Data Security

We use TLS encryption for all data in transit. Data at rest is encrypted by our hosting infrastructure. No system is completely secure. If we discover a breach that affects your personal data, we will notify you as required by applicable law.

8. Your Rights

  • Access: You can request a copy of the personal data we hold about you.
  • Deletion: You can delete your account from within the app (Settings → Account → Delete account), or email privacy@unheld.ai.
  • Correction: You can update your name within the app. For other corrections, contact us.
  • Portability: You can request a machine-readable export of your conversation data.

California residents: Under the CCPA, you have the right to know what personal information we collect and how it is used, to request deletion, and to opt out of the sale of personal information. We do not sell personal information.

To exercise any of these rights, email privacy@unheld.ai. We will respond within 45 days.

9. Children

Unheld is not directed at children under the age of 18. We do not knowingly collect personal information from anyone under 18.

10. Not a Clinical or Therapeutic Service

Unheld is a psychological support companion, not a mental health treatment service. Nothing in Unheld should be understood as medical or psychiatric advice. If you are experiencing a mental health crisis, please contact a crisis service. In the US, you can call or text 988 (Suicide and Crisis Lifeline) at any time.

11. Governing Law

This Privacy Policy is governed by the laws of the State of Delaware and applicable United States federal law.

12. Changes to This Policy

If we make material changes to this policy, we will notify you by email and update the "Last updated" date at the top of this page.

13. Contact

For privacy-related questions: privacy@unheld.ai