Privacy Notice

This notice covers the Still Qualified product workspace and the support we provide for it. Our public marketing website at stillqualified.com is live: it uses advertising and measurement technologies, which are described in Section 6 below and in the Cookies and Advertising Tracking Notice — together the controlling disclosures for that activity. Checkout and payment are handled by our commerce provider. Nothing here limits the disclosures below, which describe the product completely.

• Account identifiers — your email address and the preferred first name you choose.
• Authentication and session information — sign-in state and session cookies.
• Entitlement and order reference — the record that you have paid access, and a reference to the order, received from the checkout provider.
• Diagnostic answers, scores, and results.
• Roadmap information generated from your diagnostic.
• RETURN exercise responses, including repeatable records, trackers, scorecards, and checklists.
• Career Copilot inputs and the facts you confirm before generation.
• Generated drafts you choose to save, and Copilot status and rate-limit events.
• Career Relaunch Kit content, output versions, and verification markers.
• Export requests, account-data export requests, and deletion requests.
• Support messages you send us.
• Lifecycle email delivery metadata — that a message was sent, to which address, and whether it succeeded.
• Security, access, audit, and troubleshooting records.
• Device and browser information necessary for essential cookies and security.
• Payment and order data received from the commerce provider. Full payment-card numbers are handled by the payment provider and are not intentionally stored by this product.

• Directly from you, when you type it into the product or email support.
• Automatically from your use of the product, such as session and security information.
• From the checkout and commerce provider, for entitlement and order reference.
• From authentication, hosting, email, AI, and security service providers that operate parts of the product.

• Provide access to the product and authenticate you.
• Personalise your diagnostic result and roadmap.
• Save your exercise work and keep it available when you return.
• Operate the Career Copilot on facts you confirm.
• Assemble your Kit outputs and create your exports.
• Provide support and process refunds and entitlement changes.
• Send transactional communications about your account and outputs.
• Prevent fraud and abuse, and enforce usage limits.
• Secure and troubleshoot the product.
• Comply with legal obligations.
• Improve product reliability using minimised operational information.

We use service providers in these categories: authentication and database, hosting, commerce and payment, AI processing, transactional email, security and fraud prevention, and legal or compliance advisers. Providers may only process information to provide their service to us.

We may also disclose information where required by law, to protect rights and safety, to investigate fraud or abuse, or in connection with a business transfer subject to applicable law.

• We do not sell personal information for monetary payment.
• Our public marketing website at stillqualified.com currently uses the Meta Pixel for advertising measurement and attribution — for example, to understand which site visits and checkout starts follow our ads, including the associated order value and currency. The Cookies and Advertising Tracking Notice describes this in more detail.
• Some U.S. state privacy laws treat this kind of advertising activity as "sharing", "targeted advertising", or a similar regulated activity even when no money changes hands. Where those laws apply to you, you may opt out — see "Your choices and rights" below and the Cookies and Advertising Tracking Notice.
• The authenticated product workspace runs no advertising or analytics tracking: those advertising technologies are not loaded anywhere in the workspace, and no career-workspace content is transmitted to any advertising technology.
• If we add other advertising or measurement technologies to the marketing website, we will update the Cookies and Advertising Tracking Notice and provide the applicable choices there.

The workspace uses essential cookies and storage for authentication, session continuity, security and request integrity, and preferences. Disabling essential cookies may prevent sign-in or saved sessions from working. See the Cookies and Advertising Tracking Notice for detail.

We use reasonable administrative, technical, and organisational safeguards, including access controls, a least-privilege data architecture, encryption where appropriate, security monitoring, and contractual controls on service providers.

We retain information only for as long as reasonably necessary for the purposes described here. The Data Retention and Deletion Policy explains this by category, including what deletion does and does not remove.

A limited set of legal records — evidence of the policy versions you accepted (and their content digests), and any arbitration opt-out — is kept even after account deletion, in pseudonymized form: the record is keyed to a reference derived from your email with a private server key, not to your email itself, and the link to your account is removed. These records are minimized, are not used to contact or profile you, and are kept only for a defined, configured retention period — not indefinitely — after which they are automatically removed or irreversibly de-identified.

Depending on where you live and which laws apply to us, you may have rights to access or know what we hold, correct it, delete it, obtain a portable copy, opt out of sale, sharing, or targeted advertising, limit certain uses of sensitive information, appeal a decision on your request, and not be discriminated against for exercising a right. Not every customer has every right, and we will tell you if an exception applies.

Separately from any legal right, the product gives you these controls directly:

• Edit your preferred name in Account & Privacy.
• Download a complete account-data export of your own information as a readable file.
• Request account deletion, see its status, and cancel it before processing begins.
• Control verification markers on your own Kit outputs.
• Contact us at support@stillqualified.com for anything else.

• Categories of covered information collected: those listed in section 2 above.
• Categories of third parties with whom information may be shared: the service-provider categories listed in section 5.
• Process to review and request changes: email support@stillqualified.com from your account address, or use the controls in Account & Privacy.
• Process for material changes to this notice: we will update the effective date and communicate material changes appropriately.
• Whether third parties may collect information about your online activities over time and across different sites: not through the authenticated product workspace under the current implementation.
• Designated request address: support@stillqualified.com.
• You may submit a verified request regarding the sale of covered information to support@stillqualified.com. We do not sell covered information for monetary payment.

• We use reasonable steps to verify who is making a request.
• Sending your request from your account email address is usually enough.
• We do not collect extra information solely to verify you when we can avoid it.
• An authorised agent may act for you where the law allows, with proof of authorisation.
• Some requests have lawful exceptions; we will explain if one applies.

The product is for customers 18 and older. It is not directed to children, and we do not knowingly provide accounts to anyone under 18. If you believe someone under 18 has provided information, contact support@stillqualified.com and we will address it.

We will update the effective date when this notice changes and will communicate material changes appropriately. Questions or requests: support@stillqualified.com.