Privacy policy

1. What we collect

• Persona data you give us via /build. Name, headline, bio, projects, work history, education, talks, publications, preferences (role, stage, comp, location, remote), and anything else you type into the chat or the structured stages.
• GitHub public profile data. When you link your handle, we fetch your public profile, public repositories, languages, and contribution signal from the GitHub public API. We do not access private repositories.
• npm public profile data. When you link your npm username, we fetch public packages you maintain and their public download counts.
• Scraped company data. Companies you list as employers are enriched against public company pages and public registries so reviewers can evaluate trajectory.
• a16z-internal company records. For candidates who also appear in a16z’s internal systems, we combine your Speedrun record with internal a16z data for internal evaluation. This internal data is not published and is never shared with portfolio companies.
• LinkedIn data (when you paste it or, in future, link your account). Work history, education, and skills from LinkedIn, used to enrich your canonical record.
• Activity logs. Publishes, portfolio edits, jobs viewed, jobs saved, matches viewed, portfolio shares.
• Email address. Used for sign-in (email + OTP or passkey via our auth provider), weekly match alerts (opt-out available), and account recovery.
• IP address. Hashed and retained for up to 24 hours for rate-limiting and abuse prevention only. Raw IPs are not stored beyond that window.

2. Why we collect it

• To evaluate candidates for roles at a16z portfolio companies and for a16z programs (Speedrun, Alpha).
• To match candidates to specific roles using LLM-assisted fit scoring.
• To power internal a16z evaluation surfaces — admin dashboards, candidate rankings, reviewer tools.
• To send weekly match alerts and account-related email (magic links, security notices).
• To improve the product — understand which stages are completed, which templates get used, and where candidates drop off.

3. Who can see it

• Publicly visible: only your published portfolio page at the slug you choose. You decide what appears there, and you can unpublish at any time from /profile or by emailing [email protected].
• Internal a16z (admin-only): your full candidate record, LLM fit scores, evaluation notes, and activity logs. This is restricted to a16z employees with admin credentials.
• Portfolio companies: structured match summaries (role fit, top signals) when we surface you for a specific role. Portfolio companies do not receive your raw candidate record or private fields unless you explicitly opt in by applying or confirming interest.
• Nobody else. We do not sell candidate data and we do not share it with third-party recruiters outside the a16z portfolio.

4. LLM processing

Resumes, chat transcripts from /build, GitHub data, and structured candidate fields are sent to Anthropic’s Claude API for scoring, matching, and conversation. Anthropic processes the data to return a response and, per our data-processing terms with Anthropic, does not retain user data or train models on it. Whisper (OpenAI) is used as a fallback for voice transcription only when a user enables voice input; when used, audio is transcribed and then discarded.

5. Third-party services

• Cloudflare — hosting, edge network, D1 (database), R2 (storage). Data stored in the United States.
• Anthropic — LLM inference for /build chat, evaluation, and matching.
• Resend — transactional and weekly email delivery (magic links, match alerts).
• OpenAI — Whisper for voice transcription fallback, only when enabled.
• Clearbit — company favicons displayed on role listings.
• GitHub, npm — public APIs queried on your behalf to enrich your record when you link those handles.

6. Your rights

• Access: request a copy of your record by emailing [email protected].
• Correction: edit your portfolio and preferences any time via /build or /profile, or email us for corrections we can’t surface in-product.
• Deletion: email [email protected] to request deletion. We’ll delete your published portfolio and your internal record within 30 days. Aggregate, non-identifying analytics may be retained.
• Portability: export your data from /profile. An emailed export is also available on request.

7. Retention

• Active candidates (any activity in the last 24 months): retained indefinitely while you remain engaged with the a16z talent network.
• Dormant candidates (no activity for over 24 months): anonymized — identifying fields (name, email, GitHub handle) removed, aggregate signal retained.
• LLM scores: refreshed when your record changes and deleted on request.
• Hashed IPs: 24 hours, then purged.

8. Cookies

We set a session cookie after you sign in so the product knows who you are across page loads. We do not use third-party advertising cookies. If we add product analytics in the future, we’ll update this section and note the change in §10.

9. GDPR & CCPA

If you are a resident of the EU, UK, or California (or another jurisdiction with equivalent rights), you have the right to access, correct, delete, and port your data, and to object to certain processing. Email [email protected] and we’ll respond within 30 days.

10. Changes to this policy

When we update this policy we’ll bump the “last updated” date above and note the update in the site footer. Material changes (new third-party processors, new categories of data, changes in how long we retain data) will also trigger an email to active candidates before they take effect.

11. Contact

Questions, corrections, or requests: [email protected]. Last updated: April 18, 2026.