Privacy policy

This policy explains what information Retrofit Labs collects through this website, how we use it, who else handles it, how long we keep it, and how you can see or delete it. We keep it short and plain.

What we collect

When you book a call, we collect the details you enter: your name, work email, company name, company size, what you'd like help with, and optionally your role and phone number. We also record the time you chose, your time zone, the page or link that brought you to the booking form, and technical information needed to prevent spam (such as a one-way hashed version of your IP address and your browser type).

When you apply for a job, we collect the details you enter: your name, email, phone number, city, school, major, and optionally your graduation year and LinkedIn profile; your answers to the application questions; how you heard about us (including the link you used); and the resume file you upload. Resumes are stored privately and are only available to the people reviewing applications.

If you email or call us, we keep the messages and call notes so we can reply and follow up.

Cookies and tracking

We don't use advertising cookies, tracking pixels, session recording or cross-site trackers, and we don't set cookies for visitors. Because we only use strictly necessary cookies, we don't show a cookie banner.

• Our network provider, Cloudflare, may set a strictly necessary security cookie, for example during the spam check on the booking and application forms.
• Cloudflare may count visits with its cookieless web analytics, which records page views in aggregate without cookies or cross-site tracking.
• Our own staff get a sign-in cookie when they use the admin area. Visitors never get it.

Our fonts are hosted on our own server, so loading a page doesn't send your IP address to Google or any other font service.

How we use it

We use booking information only to schedule and prepare for your call, to contact you about it, and to follow up about working together. We use application information only to review your application and contact you about the role. We do not sell or rent your information.

We don't send marketing emails or text messages from this website. Emails we send are about the call you booked or the job you applied for.

AI and automated decisions

We build AI tools for a living, so we want to be clear about how we use AI here. This website does not send your booking or application details to an AI service, and it doesn't make automated decisions about you. A person at Retrofit Labs reads every booking and reviews every application. We don't sell your information, and we don't use it to train AI models.

Who else handles it

We share your information only with the service providers that run this website for us, and only what they need to do their job:

• Railway hosts the website, its database and uploaded resumes, in the United States.
• Cloudflare carries traffic to the site, protects it from attacks, and runs the spam check on our forms.
• Google (Google Calendar and Google Meet) receives your name, email and meeting time when we schedule your call there.
• Our email provider (Zoho Mail or Resend) delivers confirmation, reminder and reply emails.

These providers process data on our behalf and under their own security and privacy commitments. We may also disclose information if the law requires it, or to protect the site and the people who use it.

How long we keep it

We keep booking records for as long as they're useful for our relationship with you, and application records (including resumes) for as long as they're needed for hiring. You can ask us to delete your information at any time.

When you ask, we delete your record and any resume file from the live system right away. The site also keeps automatic database backups for up to 14 days, so a deleted record disappears from the backups within 14 days.

How we protect it

The site only works over an encrypted connection (HTTPS). IP addresses are stored only as one-way hashes. Resumes are stored as private files that can only be downloaded from our signed-in admin area. Access is limited to the people who need it, and repeated failed sign-ins are blocked.

Children

This website is for businesses and job seekers. It isn't directed to children, and we don't knowingly collect information from anyone under 16. If you think a child has given us information, contact us and we'll delete it.

Your choices

To see, correct, or delete the information we hold about you, email ethan@goretrofitlabs.com or call (949) 691-0086. You can cancel a booked call at any time using the link on your confirmation page.

If you live in California or another state with a privacy law, you have the right to know what personal information we hold about you, to get a copy of it, to correct it, and to have it deleted. We don't sell or share personal information for advertising, so there's nothing to opt out of. We won't treat you differently for using any of these rights. We'll confirm who you are before acting on a request, usually by replying to the email address on file.

Changes to this policy

If we change how we handle information, we'll update this page and the date at the top. See also our terms of use and accessibility statement.