Waitlist Privacy Notice

Who we are

Offerroom is a pre-launch career service operated by Ritwik Agrawal (the "operator", "we", "us"). We are the controller of the information described here. For any privacy question, or to exercise your rights, contact us at hello@offerroom.io.

What we collect

When you join the waitlist, we collect:

• Information you give us: your first name, email address, country, which option best describes you (for example job seeker, student, or recruiter), and an optional message if you choose to write one.
• Technical and context information: your IP address, browser user-agent, and which page or button you joined from. We use this to run the waitlist securely and to prevent abuse, spam, and duplicate or automated signups.
• Consent records: whether you accepted these terms, whether you opted in to product updates, the date and time of your submission, and the versions of this notice and our terms in force at the time. We keep these as evidence of your consent.

We do not collect your résumé, application materials, payment details, or any sensitive personal data at this stage.

Why we use it, and our legal basis

We use your information to:

• Notify you when Offerroom opens and tell you about your place in line. Basis: your consent, and our legitimate interest in running the waitlist you asked to join.
• Prioritize and group onboarding in waves (for example by role or country) so each person gets real attention. Basis: our legitimate interest in a fair, manageable launch.
• Send you occasional product updates, only if you opt in. Basis: your consent, which you can withdraw at any time.
• Keep the waitlist secure and prevent fraud, spam, and abuse. Basis: our legitimate interest in protecting the service.
• Measure aggregate interest in the site, such as page views and visits, using privacy-friendly analytics that do not identify you or set cookies. Basis: our legitimate interest in understanding demand and improving the site.
• Keep records of consent and meet our legal obligations. Basis: compliance with legal obligations, and our legitimate interest in being able to demonstrate consent.

"Consent" and "legitimate interest" are lawful bases under the EU and UK GDPR. Where we rely on consent, you can withdraw it at any time, without affecting anything we did before you withdrew it.

Marketing emails

The product-updates checkbox on the form is optional, unchecked by default, and separate from joining the launch list. You can withdraw it at any time using the unsubscribe link in any email we send, or by emailing hello@offerroom.io. We are not sending any emails yet. When we begin, every message will identify us, state why you are receiving it, and include a one-click unsubscribe, as required by the US CAN-SPAM Act and Canada's CASL.

Cookies and tracking

We use Vercel Web Analytics and Vercel Speed Insights to count page views and to measure how quickly pages load for real visitors. Both are privacy-friendly by design: they set no cookies, do not build a profile of you, do not store your IP address or any persistent identifier, and do not track you across other websites. Because they identify no one, we run them on the legitimate-interest basis without asking you first.

We also use Google Analytics to understand how people find Offerroom and which parts of it they use. It does set cookies and does create an identifier for your browser, so we ask first, and we do not load it until you say yes. Until you choose "Accept", the Google Analytics script is never fetched, no analytics cookie is set, and no identifier for you exists. Choose "Decline", or simply ignore the banner, and that stays true. Either way the cookieless Vercel measurement above continues, because it does not identify you.

We are describing more than the industry norm here on purpose. The common setup loads Google's script for everyone and uses Google Consent Mode to suppress only the cookie, which still sends Google a record of your visit. We do not do that. When you do accept, Google Analytics runs with Consent Mode v2 and its advertising signals permanently denied.

Separately, and regardless of your analytics choice, our pages load their typefaces from Google Fonts. Your browser therefore requests those font files from Google, which means Google sees your IP address and the page you are on. Google states it does not use Fonts requests to build advertising profiles, and no cookie is set by it. We mention it because it is a request to Google that your analytics choice does not control, and we would rather say so than let the section above imply otherwise.

To change your mind later, clear this site's data in your browser and the banner will ask again. We have turned off Google's advertising features: we do not use advertising or cross-site tracking cookies, we do not run remarketing, and the waitlist form sets no marketing cookies. If we later add strictly necessary cookies (for example to keep the site secure), we will update this notice.

The events we send to analytics describe actions, not people: which call-to-action opened the waitlist form, which country and role bracket a signup chose, which onboarding step was reached, and whether a document generation succeeded or failed. We never send your name, email address, résumé content, or anything you write to Offerroom to any analytics provider.

Who we share it with

We do not sell or rent your personal information, and we do not share it for cross-context behavioral advertising. We use a small number of service providers ("processors") who handle data on our behalf, under contract and only on our instructions:

• Supabase, our database host (your data is stored in Japan).
• Vercel, our website host, infrastructure provider, and privacy-friendly web-analytics provider (the site is served from Japan).
• Google, as our website-analytics provider only if you accept analytics cookies, and as the host of the typefaces our pages use in all cases. Google processes this data in the United States under the EU and UK Standard Contractual Clauses and the EU-US Data Privacy Framework.
• An email delivery provider, which we will add before we send any waitlist emails. We will update this notice and its version when we do.

We may also disclose information if the law requires it, or to protect our rights, safety, or property.

Where your data is stored, and international transfers

Your information is stored and processed in Japan. If you are in the European Economic Area or the United Kingdom, note that Japan is recognized by the European Commission as providing an adequate level of data protection, so transfers to Japan are permitted on that basis. For transfers from other regions, we rely on appropriate safeguards or on your consent.

How long we keep it

We keep your waitlist details until Offerroom launches and for a reasonable period afterward, or until you ask us to delete them, whichever comes first. If we discontinue the waitlist, we delete the list. We may keep limited consent records for as long as needed to show that you agreed, and to meet our legal obligations.

Your rights

Depending on where you live, you have some or all of these rights over your personal information:

• access a copy of what we hold;
• correct information that is wrong or out of date;
• delete your information;
• restrict or object to certain uses;
• receive your information in a portable format;
• withdraw consent at any time, including by unsubscribing;
• and not be treated differently for exercising your rights.

If you are in California, the CCPA and CPRA give you the rights to know, delete, and correct your information, and to opt out of its "sale" or "sharing". We do not sell or share your personal information, so there is nothing to opt out of. To exercise any right, email hello@offerroom.io. We will respond within the time the law allows (for example 45 days under the CCPA, or one month under the GDPR), and we will not charge you or treat you differently for asking.

If you are in India, the Digital Personal Data Protection Act, 2023 gives you rights to access, correct, and erase your personal data, to nominate someone to exercise your rights on your behalf, and to grievance redressal. Email hello@offerroom.io to exercise them.

Children

The waitlist is for adults and is not directed to children. We do not knowingly collect information from anyone under 16. If you believe a child has given us their information, contact us and we will delete it.

How we protect your information

We use reasonable technical and organizational measures, including encryption of data in transit and access controls on our database, to protect your information. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

Changes to this notice

We may update this notice before and at launch. When we make a material change, we will revise the effective date and version at the top and, where appropriate, let waitlist members know. The version in force when you signed up is recorded with your signup.

Contact and complaints

Questions, requests, or complaints: hello@offerroom.io. If you are in the EEA or the UK and believe we have not handled your information properly, you also have the right to complain to your local data-protection authority. If you are in California, you may contact the California Privacy Protection Agency or the California Attorney General. If you are in India, you may raise a complaint with the Data Protection Board of India.