Privacy

Draft for the invite-only test group, written in plain English. Tilly is a test project run by Josh White; it is not a company yet and this is not legal advice.

What we keep

• Your name and email (from the Google account you sign in with) and the settings you choose.
• Your month and year of birth, asked once to check that you are 18 or over. We keep only the month and year, only for that check.
• The roles Tilly scored for you, how you rated them, and a record of the digests we sent.
• The coach: the text of your conversations, the four documents it writes about you, and the search settings built from them.
• Your CV, if you upload one: we keep the text of it so the coach can use it, not the file itself.
• A summary from ChatGPT or Claude, if you choose to bring one in: you paste it, you see what Tilly understood, and we keep only the lines you choose to keep. The coach reads them. They are deleted with your account, and what you paste but do not keep is not stored.
• If you ask for access on the public page: the email address and note you type, kept so we can reply. Nothing is added to that page to follow you around it: it has no tracker or advertising.
• A log of how much each AI or voice request cost, so we can keep costs under control.
• A dated activity log of what you do in Tilly: thumbs up and down on roles, roles you open, roles you save, roles you say you applied for, what you tell Tilly to correct, and when you save settings, upload a CV or approve your search. It lets us see what is useful and improve your matches. It is deleted with your account.

We do not keep your voice recordings. They are turned into text and the audio is thrown away on our side.

Who else handles it

Josh can see everything in the database, because he runs it. To do the work, your data passes through these services:

• Anthropic (the AI behind the coach, your search settings, the job scoring and, on accounts that have AI application help, the application-question and CV-change drafts (your CV text, coach notes and the role are sent; drafts are shown to you and not stored); it also reads scanned CVs). Anthropic says it deletes this kind of input and output within 30 days, and keeps it longer only if it is flagged for breaking their usage policy. Their explanation.
• ElevenLabs (turns your voice into text when you use the microphone). We ask it not to keep your recording or the transcript, using its “zero retention” setting. ElevenLabs offers that setting formally to its enterprise customers, so we can't promise it is honoured for us; otherwise its privacy policy applies. If that worries you, type your answers instead.
• Supabase (stores the data), Vercel (runs this site), Google (sign-in) and Gmail (sends your digest).

We don't sell your data or use it for advertising. Each service receives only what it needs for its job.

Company logos are fetched once by Tilly from each company's own website and kept on Tilly's own storage, so your device is not asked to contact anyone else to show them.

Where the job lists come from

Tilly finds roles by reading the public job boards that companies publish themselves. Some of the company lists contain data from the LastRound AI ATS Company Directory, licensed under CC BY 4.0. It has been modified: each board was re-checked and filtered to roles in the UK. LastRound AI does not endorse Tilly. None of this data is about you.

Your control

You can delete your account and everything we hold about you at any time in Settings. It is immediate and can't be undone. You can also change how often we email you there, or ask Josh to stop emailing you.

Questions

Ask Josh.