Privacy Policy

1. About This Policy

This policy explains what personal information Shinastra ("Shinastra," "we," "us") collects when you use shinastra.com and our matching platform (the "Platform"), how we use it, who we share it with, and the choices you have. It is operated by [LEGAL ENTITY NAME AND MAILING ADDRESS — SARAH TO FILL IN]. You can reach us at privacy@shinastra.com.

2. Information We Collect

We collect the following, most of it provided directly by you:

• Account information: your email address, a password (stored only as a one-way hash, never in readable form), your account type (job seeker or employer), your plan, and one-time codes we generate to verify your email or reset your password.
• Job seeker profile: your first and last name; expected pay range; work-location preferences; your resume (a file you upload); a profile photo; an optional intro video; skills and the "Proof Point" text you write about them; answers to profile questions; and your answers to our "vibe" questions about how you like to work. If you have Pro, we also store the list of companies you choose to hide your profile from.
• Employer profile and listings: company name, mission and description, logo, website and LinkedIn links, answers to our "vibe" questions about your culture, typical interview process, and each job listing you post (title, description, required skills, pay range, work model, city and state).
• Activity on the Platform: the listings you swipe on and how, matches, messages you send and receive, notifications, your notification preferences, daily swipe counts, and reports you submit or that are made about you. We also record the first date an employer opens a candidate's profile in their review list for a given listing.
• Billing information: payments are handled by Stripe. We never see or store your full card number. We store the identifiers Stripe gives us (customer and subscription IDs), your plan, the subscription status and the renewal date. Founding-partner applications also include the name, email, phone number and message you submit.
• Technical information: your IP address and basic request details, which appear in our hosting provider's server logs and in small records we use to limit repeated login and signup attempts (these can include your IP address and lowercased email address), and error logs.
• Communications: if you email us, we keep the message and our reply.

Your resume and messages may contain other personal details you choose to include. Please don't upload or send anything you wouldn't want the other party to see.

3. How We Use Your Information

• To run the matching described in our Terms of Service, which scores listings and candidates on skills, culture fit and logistics such as pay and work location.
• To let matched users message each other and to show employers the candidates who have swiped on their listings.
• To send service emails and in-app notifications: email verification, password resets, match updates, notices that a match was closed, and "still hiring?" checks to employers. We also send alert emails when something happens that you would want to know about: a new match or message, a daily summary to employers when new candidates are waiting, and a warning to employers five days before a listing expires. Each alert email has a link to stop that kind of email in one click, and you can switch them on or off in Settings. We keep a short record of which alert emails we sent you so we don't send the same one twice, and we delete it if you delete your account.
• To process subscriptions and payments, and to manage your plan.
• To provide Pro features: hiding your profile from companies you choose, showing you when an employer has reviewed your profile, and comparing your skills with open listings.
• To keep the Platform safe: preventing spam and abuse, handling reports, and fixing errors.
• To meet legal obligations and enforce our Terms.

4. How We Share Information

We do not sell your personal information, and we do not share it for advertising or cross-site tracking.

We share information only in these ways:

• With other users, as part of matching. Employers can see the profile details of candidates who swipe on their listings (name, skills and Proof Points, profile answers, culture preferences and a match score). Your profile photo and your resume are shown to an employer only after you match with that employer. Candidates see employer and listing details, including pay range and location. Messages are visible to the two people in the conversation. Candidates with Pro can hide their profile from companies they choose, and those companies will not see them. If you have Pro, we show you the date an employer first opened your profile for a listing you swiped on, but not who at the company did.
• With service providers that process data for us:
  • Netlify — website hosting, server functions, server logs, DNS, and storage for the files you upload (resume, photo, video, logo).
  • Turso — the database that holds your account, profile, match and message data.
  • Stripe — payment processing and subscription billing.
  • Resend — sending our emails (it receives the recipient address and the email content).
  • Cloudflare (Turnstile) — a bot check on the signup page.
  • Google Fonts — delivers the font we use, which means your IP address and browser type are sent to Google when a page loads.
• For legal and safety reasons, if required by law or legal process, or to protect the rights, safety and property of Shinastra and our users.
• In a business transfer, such as a merger or sale of the company. We would tell you before your information becomes subject to a different privacy policy.
• With your direction or consent.

5. Cookies and Tracking

• We do not use analytics, advertising or tracking tools such as Google Analytics, advertising pixels or session-recording tools.
• Staying logged in: we keep a login token and basic account details in your browser's local storage, not in cookies. They stay until you log out, the token expires (after 24 hours) or you clear your browser data.
• Third parties on our pages: Cloudflare Turnstile (on the signup page) and Stripe (on its hosted checkout and billing pages) may use cookies or similar technologies and receive your IP address and device details to do their jobs. Google Fonts receives your IP address when fonts load. Their use of that information is covered by their own privacy policies.
• Other than the security and payment providers above, we are not aware of any third party that collects information about your online activity over time and across different websites when you use the Platform. We do not respond to "Do Not Track" signals because we do not track you across sites.

6. AI and Automated Matching

Our matching is automated, rules-based scoring that compares skills, culture-fit answers and logistics such as pay and location, and then suggests connections between job seekers and employers. We do not send resumes, profiles or messages to any outside AI service, and we do not use your data to train AI models. If we add an AI service in the future, we will name it here and ask for your consent where the law requires it.

• Matches are suggestions only. They are not a hiring decision, and they do not on their own have a legal or similarly significant effect on you.
• You can email privacy@shinastra.com to ask how a match score was generated or to request human review of a decision that significantly affects you.

8. Security

We use measures designed to protect your information, including HTTPS encryption in transit, one-way hashing of passwords, login tokens that expire after 24 hours, and access controls on our database. Our hosting and database providers apply their own security controls to the data they store for us; please see their security documentation for details.

Your resume, profile photo and intro video are private. They are opened only through short-lived links that our own pages create for you and for employers you have matched with, and those links stop working after about an hour. Company logos are public because they appear on listings. No online service can be guaranteed to be completely secure, so please use a strong, unique password.

9. Your Privacy Rights

Depending on where you live, you may have the following rights. We offer them to all users:

To make a request, email privacy@shinastra.com. We may need to verify your identity first. We aim to respond within 45 days. If you disagree with our response, reply to it and ask for a review.

10. Notice for Nevada Residents

This section is provided under Nevada law (NRS 603A.340 and 603A.345).

• Categories of personal information we collect: name; email address; phone number (only if you give it to us, for example in a founding-partner application); IP address; account and profile details; and the other items listed in Section 2.
• Categories of third parties we share it with: hosting and storage providers, database provider, payment processor, email delivery provider, and a bot-check provider (Section 4). We also share profile information with other users as part of matching.
• Reviewing and changing your information: you can review and edit your profile in Settings, or email privacy@shinastra.com to ask for a change.
• Notice of changes: we will email you and post a notice on the Platform when this policy changes in a material way (see Section 12).
• Tracking across sites: see Section 5. We do not allow third parties to track you across websites for advertising.
• Opt-out of sale: we do not sell covered information. To submit an opt-out request anyway, email privacy@shinastra.com.
• Effective date: October 7, 2026.

11. Children

Shinastra is for people 18 and older. It is not directed to children under 13, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has created an account, email privacy@shinastra.com and we will delete it.

12. Changes to This Policy

We may update this policy from time to time. We will change the "Last Updated" date above, and for material changes we will notify you by email to the address on your account and with a notice on the Platform. If a change materially affects how we use personal information we already hold about you, we will ask for your consent before applying it to that information.

13. User-Generated Content

The Platform lets job seekers and employers submit content such as resumes, profile information, Proof Points, job descriptions and company profiles ("User Content"), and some of it is visible to other users as part of matching.

• You are responsible for the accuracy of the User Content you submit.
• Shinastra does not verify User Content before it is displayed to other users.
• You may ask us to remove your User Content by deleting your account or emailing privacy@shinastra.com.