Privacy Policy
Last updated: 20 July 2026
1. Who we are
Will AI Take My Job (“we”, “us”, “our”) operates the AI job risk assessment service available at willaitakemyjob.app (the “Service”). We are the data controller for the personal data described in this policy.
Contact: willaitakemyjob@proton.me
2. What data we collect
We collect the minimum data necessary to provide the Service. We do not collect your name or any government-issued identifier. The only contact detail we ever hold is an email address, and there are exactly two ways we get one: you enter it at checkout when you purchase the full report, or you choose to send yourself your report link from the free report. Neither is required to take the quiz or to see your score.
When you take the quiz (all users)
| Data | Description |
|---|---|
| Job title | The free-text role you enter |
| Quiz answers | Categorical answers about your work: years of experience, sector, company size, AI tool usage, career goal, routine level, type of work, relationship complexity, creativity, specialisation, and management responsibilities |
| Risk score | A numerical score (0 to 1) and category (High Risk / Transitioning / Lower Risk) computed from your answers |
| Percentile ranks | Your score's position relative to other users globally and within your occupation |
| Session identifier | A randomly generated UUID assigned to your browser session (see Section 7, Cookies) |
| Report identifier | A randomly generated UUID that forms the URL of your report |
| IP address | Your network IP address, used solely for rate limiting (see Section 3) |
If you ask us to save your report link (optional)
| Data | Description |
|---|---|
| Saved email address | An email address you choose to give us on your free report so we can send you the link back to it. This is entirely optional: the quiz, your score, and your report all work without it. |
| Score-update preference | Whether you separately ticked the box asking to be emailed if your score changes. It is unticked by default, and leaving it unticked still gets you your link. |
When you purchase the full report (paid users only)
| Data | Description |
|---|---|
| Payment intent ID | A Stripe-generated reference number confirming your payment. We do not store card numbers, billing addresses, or any other payment card data. Those are handled entirely by Stripe. |
| Purchase email address | The email you enter at Stripe checkout. We use it to send you your permanent report link and to let you recover your report links later (see "Find my report"). We do not use it for marketing. |
| AI-generated action plan | A personalised plan including tasks at risk, skills to build, career pivots, and resources, generated by an AI model using your quiz answers and risk score |
Report links are shareable by design.Your report lives at an unguessable URL. It is not listed anywhere and search engines are asked not to index it, but anyone you share the link with can view the report's contents (your job title, quiz answers, and scores), so share it only with people you're comfortable seeing them. Only the browser session that created a report can delete it.
3. How we use your data and our legal basis
| Purpose | Data used | Legal basis |
|---|---|---|
| Generating and displaying your free risk report | Job title, quiz answers, scores, percentiles | Legitimate interests (Article 6(1)(f)): you explicitly requested this service |
| Delivering your purchased action plan | All of the above + payment intent ID | Performance of a contract (Article 6(1)(b)) |
| Sending your report link by email and re-sending it on request ("Find my report") | Purchase email address, report ID, job title | Performance of a contract (Article 6(1)(b)): giving you durable access to what you purchased |
| Sending you the link to your free report when you ask us to | Saved email address, report ID, job title | Consent (Article 6(1)(a)): you give us the address and ask us to send the link. You can withdraw it by deleting your report or by replying to the email. |
| Emailing you if your risk score changes (optional) | Saved email address, report ID, job title, score | Consent (Article 6(1)(a)): a separate opt-in, unticked by default. Withdraw it at any time using the unsubscribe link in any such email, or your mail app’s own unsubscribe button. Withdrawing affects nothing else: your report, your link, and your ability to recover it all keep working. |
| Rate limiting (preventing abuse) | IP address + session ID | Legitimate interests (Article 6(1)(f)): protecting the Service from automated misuse |
| Aggregate statistics | Anonymised scores and categories only | Legitimate interests (Article 6(1)(f)): understanding overall usage patterns |
| Referral programme (if you share your report link) | Report ID used as referral token; whether someone you referred purchased a report | Legitimate interests (Article 6(1)(f)): enabling you to unlock the full report through the referral programme |
Automated processing: Your risk score is produced by an algorithm, not a human. We believe this does not constitute an automated decision with legal or similarly significant effects under GDPR Article 22. The score is informational guidance, and you are free to disregard it.
4. Who we share your data with
We do not sell your data. We do not share your data with advertisers. We share data only with the service providers listed below, each acting as a data processor under a written agreement.
4.1 Supabase (database hosting)
Your report data is stored in a Supabase-managed PostgreSQL database.
4.2 Stripe (payment processing)
When you purchase the full report, you are redirected to a Stripe-hosted checkout page. Stripe processes your payment card data directly. We receive only a payment confirmation reference and the email address you entered at checkout. See Stripe's Privacy Policy.
4.3 Third-party AI provider (AI content generation, full-report unlocks only)
When you unlock the full report (by purchase or through the referral programme), your job title, quiz answers, and risk score are sent to a third-party AI provider to generate your personalised action plan. We send only the data needed to produce your plan.
4.4 Resend (email delivery, only if you give us an address)
When you purchase the full report, or when you ask us to send you the link to your free report, we deliver that email through Resend, a transactional email provider. Resend processes your email address and the email content solely to deliver it. If you never give us an address, nothing about you reaches Resend. See Resend's Privacy Policy.
4.5 Vercel (web hosting)
The Service is hosted on Vercel's infrastructure. Vercel processes HTTP request data (including IP addresses) as part of standard web hosting. See Vercel's Privacy Policy.
5. International data transfers
Our service providers are based in the United States. Where we transfer personal data outside the European Economic Area, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission under Article 46(2)(c) GDPR, or on the provider's certification under an applicable adequacy framework.
6. How long we keep your data
| Data | Retention period | What happens after |
|---|---|---|
| Full report (job title, answers, action plan) | 12 months from creation | Job title, quiz answers, and the action plan are permanently deleted, and the report link stops working. Scores and category are retained in anonymised aggregate form only. |
| Purchase email address | 12 months from report creation | Permanently deleted together with the report |
| Saved email address and score-update preference | 12 months from report creation | Permanently deleted together with the report |
| Rate-limiting records (IP + session key) | About one day | Automatically deleted by a daily cleanup process |
| Payment intent ID | 7 years | Retained for legal and accounting obligations under commercial law |
| Session ID cookie | 30 days | Expires automatically in your browser |
You may also request deletion of your report at any time. See Section 8.
7. Cookies
We use a single cookie:
| Cookie | Name | Purpose | Duration | Type |
|---|---|---|---|---|
| Session | session_id | Links your browser to your report and enforces rate limits. Without this cookie, you cannot retrieve your report after leaving the page. | 30 days | Strictly necessary |
Because this cookie is strictly necessary for the Service to function, it does not require your prior consent under the ePrivacy Directive. We do not use advertising, analytics, or tracking cookies.
8. Your rights under GDPR
If you are located in the EEA, UK, or Switzerland, you have the following rights. To exercise any right, contact us at willaitakemyjob@proton.me with your report ID (found in your report URL). We will respond within 30 days.
- Right to access (Article 15): Request a copy of the data we hold about you.
- Right to erasure (Article 17): Delete your report at any time by clicking “Delete my report” on your report page, or by contacting us. Deletion is permanent and immediate for your quiz data, action plan, and purchase email address. Payment intent IDs are retained for 7 years.
- Right to rectification (Article 16): Contact us if any data we hold is inaccurate.
- Right to restrict processing (Article 18): Ask us to pause processing of your data while a dispute is resolved.
- Right to data portability (Article 20): Request your report data in machine-readable JSON format by contacting us with your report ID.
- Right to object (Article 21): Object to processing based on legitimate interests.
- Right to withdraw consent (Article 7(3)): Where we rely on your consent, you can take it back at any time, as easily as you gave it, and doing so does not affect anything we did before you withdrew it. For score-change emails, use the unsubscribe link in any such email or your mail app’s own unsubscribe button. For the email address you saved with your report, delete the report from your report page, which removes the address with it.
- Right to lodge a complaint: You may lodge a complaint with your national supervisory authority. For example, the Garante per la protezione dei dati personali in Italy (our lead authority), the CNIL in France, or the ICO in the UK.
9. How we protect your data
- All data is transmitted over HTTPS
- The session cookie is
httpOnly(inaccessible to JavaScript) andsameSite: lax - Database access requires server-side service keys not exposed to the browser
- We do not log quiz answers in application logs
10. Children
The Service is not directed at children under 16. We do not knowingly collect data from children. If you believe a child has submitted data through our Service, contact us and we will delete it promptly.
11. Changes to this policy
We will update this policy when our data practices change. The “Last updated” date at the top reflects the most recent revision. Material changes will be noted on this page.
12. California Privacy Rights
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
- Right to know: You have the right to request information about the categories and specific pieces of personal information we have collected about you, the categories of sources, our business or commercial purposes for collecting it, and the categories of third parties with whom we share it.
- Right to delete: You have the right to request deletion of personal information we have collected from you, subject to certain exceptions.
- Right to opt out of sale or sharing: We do not sell or share your personal information for cross-context behavioural advertising. There is nothing to opt out of.
- Right to non-discrimination: We will not discriminate against you for exercising any of your CCPA rights.
To submit a request, contact us at willaitakemyjob@proton.me with the subject line “California Privacy Request”. We will respond within 45 days.