Privacy policy
Last updated: October 2, 2026. Takes effect: October 2, 2026.
Your privacy at Qwestly
The simple promise: your name stays out of your pitch until you choose to reveal it. We don't sell your data or spam you, and we share information only as this policy describes.
How Qwestly works
Your career agent
- You talk with your agent in chat about your work and your goals, and you can upload documents such as a resume. We store your chats and documents so your agent can use them.
- Your agent writes for you: your LinkedIn rewrite, your pitch and your plans. You can read and edit each one.
- Your pitch leaves out your name and employer. We never share your name with a company or another member without your consent.
- Our team may send sections of your anonymized pitch to a hiring manager whose role fits what you told us.
We do everything we can to keep your pitch anonymized, but review it and remove anything you would rather keep private.
Introductions to other members
- If you turn on introductions, your agent can introduce you to other members.
- Before you say yes to an introduction, the other member sees your pitch without your name. After you say yes, they see your full pitch, with your name.
AI
- Your agent is AI software. It uses your chats and documents to do the work you ask for, and we keep them as the data retention table below describes.
- Your chats and documents are sent to the AI model providers that run your agent. They are listed among our subprocessors, and our agreements with them do not allow them to train on your data.
- We don't use your personal information to train AI models.
Your control
- Ask to delete your account and your data in settings
What we collect, and why
To do the work you ask for
- Your work history, skills and goals, from your chats, your documents and your public LinkedIn profile → Write your review, your pitch and your plans
- Your title, level and location → Show pay ranges for roles like yours
- Education and certifications → Show your qualifications
For your LinkedIn review
- Your public LinkedIn profile, when you share its link → Write your review and your rewrite
- If you use the LinkedIn review without an account, we keep your chat and the LinkedIn profile you shared so you can come back to it. You can ask us to delete them at privacy@qwestly.com.
- We get your public profile from a data provider and refresh it after 30 days. It includes an email address or phone number only if they are public on LinkedIn, and a link to your profile photo, not the photo itself.
When you talk instead of typing
- We send the recording to a speech-to-text provider and keep only the text. We delete the recording once it's transcribed.
- Some earlier briefings were voice calls through a voice provider. We keep their transcripts. Their recordings may still be held by that provider.
To verify you're real
- Your LinkedIn account, if you verify it → Confirms your background
- Basic info → Prevents spam and bots
- A photo of you, if you add one in your account settings → Shows on your account
To improve Qwestly
- How you use Qwestly, including screen replays → Fix problems and improve Qwestly
- Anonymous feedback → Learn what works
What we don't collect
- Social media, other than the public LinkedIn profile you share with us for your LinkedIn review
- Browsing history outside Qwestly
Cookies and analytics
- We use PostHog to see how people use Qwestly: which pages and features they use, and where things go wrong.
- PostHog records your visits as a replay of the screen, so we can see where people get stuck and fix problems. A replay shows the pages you visit and what you click. It hides what you type, your messages to your agent and its replies, and the content of what each page sends and receives.
- When you're signed in, these records are tied to your account. Only our team can see them.
- To check that your agent's answers are accurate and to keep its costs in check, PostHog also keeps a record of your messages and your agent's replies. The messages and replies are deleted from it after 30 days.
- Our site loads Reddit's pixel, which tells Reddit when someone visits, so we can see which of our Reddit ads bring people to Qwestly.
How we protect your data
Security practices
- Encryption in storage and in transit
- Multi-factor authentication for employee access
- SOC 2 certified through Vanta
Privacy by design
- Personal info stored separately from profiles
- Employees only access data needed for their role
What companies see
- Sections of your anonymized pitch that our team sends to a hiring manager, never your name or employer
- Identity revealed only with your explicit consent
- You can decline any request to connect
What we do and don't do
What we do
- Use your chats and documents to do the work you ask your agent for
- Use how you use Qwestly, including screen replays, to fix problems and improve it
- Email you about your account and your chats
- Follow all privacy laws
What we don't do
- Sell your data
- Reveal your identity without permission
- Send you job alerts or job listings
- Train AI models on your data
- Keep data longer than needed
Your rights
Manage your info
- Edit your pitch and your other documents anytime
- Ask to delete your account in settings, and we delete your personal data within 30 days, except records the law requires us to keep
- Ask us at privacy@qwestly.com to delete your screen replays and other analytics records, and the copy of your public LinkedIn profile from your LinkedIn review. Deleting your account doesn't remove these on its own.
Communication
- Instantly unsubscribe from emails
Portability
- Ask for a copy of your data at privacy@qwestly.com
- Keep your insights even if you leave
Data retention
We don't delete data on a schedule, except where this table gives a period. Ask privacy@qwestly.com to delete anything sooner.
Working with companies
- They only see anonymized pitches
- No contact or identity info unless you approve
- You get a clear notice before any identity reveal
Companies that subscribe agree to keep what they see confidential.
Legal compliance
SOC 2
- SOC 2 certified through Vanta
Privacy laws
- GDPR: full rights of access, correction, deletion, portability and objection
- CCPA: transparency and deletion rights
- Other laws: we follow all applicable regulations
Data transfers
- US-based encrypted servers
- Standard contractual clauses for international transfers
Subprocessors
- We only use trusted vendors with data processing agreements (DPAs)
- Full list available on request from privacy@qwestly.com
Your contacts
Quick help
- Delete account: in your settings
Get in touch
- Privacy: privacy@qwestly.com
- Security: security@qwestly.com
- General help: support@qwestly.com
Response time
- Privacy requests: within 5 business days
- Data deletion: within 30 days
Policy changes
- Email notification of any big changes
- 30-day notice before updates take effect
- Simple summary of what's changing
- You can opt out if you disagree
- Earlier versions available on request from privacy@qwestly.com