Privacy Policy

Candidates create an account with Google sign-in and use Endorsa to collect and share recommendations.

Reviewers never create an account. They receive a one-time link by email at a candidate's request and submit a short recommendation through a simple form.

From candidates:

• Name, email address and (by default) a profile picture, from Google sign-in. You can replace this with your own uploaded photo, or remove it entirely, at any time from Settings.
• A public profile link (slug) you choose or that's generated for you.
• Any recommendation text, reviewer details (including an optional reviewer email, used only to show a “company email” badge, never shown publicly), reference links, and the company and role that recommendation relates to, all added by you.

From reviewers:

• Name and email address a candidate provides when requesting a recommendation from you.
• The recommendation text and (optional) role/title you submit through the magic-link form.

Candidate data is processed to provide the account and dashboard you sign up for (contractual necessity) and, where relevant, with your consent (for example, Google Analytics, see below).

Reviewer data is processed on the basis of the candidate's legitimate interest in collecting a specific recommendation they requested from you. Every request email discloses who it was sent on behalf of and invites you to ignore it if unexpected.

Only recommendations a candidate explicitly ticks as “selected” appear on their public profile page or in their exported PDF: reviewer name, title, relationship, the recommendation text, tags, and any sourcing badges (a recognized reference link, a “company email” label, or “submitted by reviewer”). The reviewer's actual email address is never shown publicly, only to the candidate, in their private dashboard.

A public profile page is reachable by anyone with the link, but by default it's excluded from search engines (a noindex tag, not just omission from our sitemap). A candidate can opt in to make their profile searchable from Settings, they're asked once when they first sign up and can change their answer at any time.

If “Show profile picture” is on in Settings (on by default), your photo, or your initials if you haven't set one, also appears on your public page. The “Share on LinkedIn/X” buttons on your dashboard just open those sites with a link to your public profile pre-filled, nothing is sent to them unless you click.

• Supabase hosts our database, authentication, and file storage (e.g. uploaded profile pictures) (EU region).
• Resend delivers transactional emails: magic-link requests and notifications.
• Google provides sign-in (OAuth) and, if you consent, Analytics.
• Vercel hosts the application and provides cookieless usage analytics.

Each of these providers may process data outside your country of residence. We rely on their own safeguards and certifications (such as standard contractual clauses) for these transfers.

Signing in uses an essential, secure session cookie from Supabase, this can't be switched off without breaking sign-in.

Vercel Analytics is cookieless by design and runs by default to help us understand overall traffic, it doesn't identify you.

Google Analytics sets tracking cookies and only runs if you accept it in the cookie banner. You can decline it, or clear your choice by clearing your browser's local storage for this site.

We keep a small, first-party log of a few actions, sending a request, adding a recommendation, exporting a PDF, and how many times a public profile is viewed, so we can tell whether the product is actually being used. It's stored in our own database, isn't shared with any third party, and doesn't use cookies. For public profile views, we don't record anything about the visitor, no IP address, cookie, or fingerprint, only a count against the profile that was viewed.

Recommendations and requests are kept until you delete them from your dashboard, deleting a recommendation removes it (and any reviewer data tied to it) immediately.

You can permanently delete your account at any time from Settings. This immediately removes your account, every recommendation, every pending request, any uploaded profile picture, and any usage log entries tied to it, there's no recovery period once confirmed.

If you're a reviewer and want a recommendation you submitted removed, you can ask the candidate who requested it to delete it, or contact us directly.

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. Contact theorangeshade.apps@gmail.com to exercise any of these.

Endorsa isn't directed at children and isn't intended for use by anyone under 16.

If this policy changes materially, we'll update the date at the top of this page.

Questions about this policy or your data: theorangeshade.apps@gmail.com.