Trust & Privacy Center

We aim to collect the minimum useful data needed to make the product work, improve the experience, and respect user choices. Where our products build a profile, you should be able to correct, suppress, delete, or limit what the product uses.

• Run the product (sign in, save your work, generate readouts).
• Improve the product through coarse, consented analytics.
• Personalize results inside this product when you allow it.
• Respond to support and privacy requests you send us.

We avoid sending raw private content or sensitive profile details to analytics. Analytics events use coarse categories, reason codes, counts, and consent-safe properties. Third-party analytics tools (Amplitude, GA4) do not receive events until you grant analytics consent in Privacy choices.

Sensitive context is optional unless required for the product to function. We aim to use the minimum information needed and avoid exposing sensitive details unnecessarily. We treat the following as sensitive by default: health, legal, financial, child/family, precise location, identity/community, sexuality, gender identity, race, ethnicity, religion, biometric or identity verification data, raw uploaded documents, free-text private notes, mental health context, employment/income vulnerability, and immigration or citizenship context.

You can ask us to:

• Access your data
• Correct your data
• Delete your data
• Export your data
• Suppress or do not use a signal
• Restrict cross-product use
• Opt out of sale/share/targeted advertising where applicable
• Limit sensitive data use where applicable
• Ask a privacy question

Privacy laws vary by location. This page helps you understand and manage privacy choices. It is not a substitute for legal review.

Some product experiences use AI or automated systems to summarize, rank, classify, parse, recommend, or generate drafts. AI-assisted outputs may be incomplete or wrong. Important outputs should be reviewed before relying on them.

• Not medical advice, diagnosis, or treatment.
• Not legal advice.
• Not financial advice.
• Not identity verification.
• Not a guarantee of outcomes.

Product-specific profiles (such as a Career profile inside Positioned) help a single product work better. They are not the same as the full CanonIQ.

Full CanonIQ is a deeper personal context profile. No user receives the full CanonIQ output unless they purchase or are granted access to the full CanonIQ product. CanonIQ is not biometric authentication, legal identity verification, or a mental health diagnosis. It is a personal context and surface-personalization layer.

We design our data systems around privacy-by-default principles, data minimization, consent controls, user correction, deletion/export request paths, sensitivity labeling, and regional privacy-readiness — including expectations from California, the European Union / EEA, South Korea, and Brazil.

Formal legal review is required before making jurisdiction-specific compliance claims. Data processing and storage locations may vary by vendor and product. We are reviewing our systems as products move from prototype to public beta.

• Legacy compliance policy (PDF) — policy archive

We are updating our public policy center as products move from prototype to public beta.

For privacy requests, questions, or feedback, use our inquiry form. Please describe the request type so we can route it appropriately.