1. Who we are
HR Rebooted LLP ("HR Rebooted," "we," "us") is a New Hampshire limited liability partnership. We operate hrrebooted.com and the products described on it, including Governance 1st, the Browser Extension, Policy FastTrack, and MyCareer Navigator (including the College Edition).
This policy explains what personal information we collect about you when you use our website, our applications, or our extension, and what we do with that information.
2. What we collect
Information you give us directly
- Contact information. When you fill in a form, email us, or sign up for a product, we collect your name, email address, organization, and anything else you choose to send us.
- Assessment data. When you use MyCareer Navigator or the College Edition, we store your assessment inputs (role, education, employer, age, school, major, etc.) and the results we generate from them.
- Profile information. If you create an account or save data in one of our applications, the information you enter into your profile.
- Admin authentication data. If you have admin access to manage events or blog posts on the site, we collect the email you use to request a magic link, your IP at the time of the request, and the actions you take while signed in.
Information collected automatically
- IP address and request metadata. Standard web-server logs for security, rate limiting, and abuse prevention.
- Cookies. Functional cookies only (your admin session, for example). We do not use third-party advertising or tracking cookies.
- Chatbot conversations. Messages you send to the chatbot on this site are processed by Google's Gemini API to generate replies. We do not separately store the full conversations on our own servers.
Information collected by the Browser Extension
- On the individual tier: the extension stores all activity (prompt counts, flagged items, behavior evaluations) locally in your browser's storage. None of this data leaves your device.
- On the enterprise tier: the extension may send activity records to your organization's Governance 1st workspace. The specific data sent is controlled by your organization, not by HR Rebooted directly. Prompts and responses are not transmitted unless your organization explicitly enables that.
3. How we use it
We use the information we collect to:
- Provide, operate, and improve the products you're using;
- Respond to your inquiries and provide customer support;
- Send service-related communications (account, security, product updates);
- Detect, prevent, and investigate fraud, abuse, and security incidents;
- Comply with legal obligations and enforce our Terms of Service;
- Improve our research, methodologies, and product offerings, including using aggregated, de-identified data.
We do not sell your personal information. We do not share your personal information with third parties for their own marketing purposes.
4. Who we share it with
- Service providers. We share information with vendors that help us operate the service, including Google (Gemini API for the chatbot and the Browser Extension's behavior judging), our hosting provider, our email-delivery provider, and similar infrastructure services. These vendors are contractually limited to using the data only to provide services to us.
- Your organization. If your access to our products is provided by your employer or school, certain information (account activity, assessment results, browser-extension telemetry on the enterprise tier) may be visible to that organization.
- Legal compliance. We may disclose information when required by law, in response to lawful requests by public authorities, or to protect the rights, property, or safety of HR Rebooted, our users, or others.
- Business transfers. If HR Rebooted is involved in a merger, acquisition, or asset sale, personal information may be transferred. We will notify you before personal information is transferred and becomes subject to a different privacy policy.
5. How long we keep it
We keep personal information for as long as we need it for the purposes described in this policy, unless a longer retention period is required or permitted by law.
- Contact form submissions and email inquiries: until you ask us to delete them.
- Admin authentication audit logs: 24 months from the action, then deleted.
- Magic-link tokens: 1 hour, then automatically expired and deleted on first use.
- Assessment data (MyCareer Navigator): until you delete your account or the assessment.
- Server access logs: 90 days.
6. Your rights
You can ask us to:
- Access the personal information we hold about you;
- Correct personal information that is inaccurate or incomplete;
- Delete your personal information (subject to our legal obligations to retain certain records);
- Restrict or object to certain uses of your personal information;
- Export a copy of your personal information in a portable format.
To make any of these requests, email privacy@hrrebooted.com from the email address associated with your data. We will respond within 30 days.
California residents have additional rights under the CCPA/CPRA, including the right to opt out of the "sale" or "sharing" of personal information (we do not sell or share personal information for cross-context behavioral advertising) and the right not to be discriminated against for exercising your rights.
EU/UK/EEA residents have additional rights under the GDPR/UK GDPR, including the right to lodge a complaint with your local supervisory authority.
7. Children
Our main website and most of our products are not intended for users under 13. The College Edition of MyCareer Navigator is designed for users 14 and older. We do not knowingly collect personal information from children under 13. If you believe we may have collected information from a child under 13, contact privacy@hrrebooted.com and we will delete it.
8. International users
HR Rebooted is based in the United States. If you access our services from outside the U.S., your information will be transferred to, stored in, and processed in the United States. By using our services, you consent to that transfer and processing under U.S. law and this policy. For users in the EU/UK/EEA, we rely on Standard Contractual Clauses or other lawful transfer mechanisms where required.
9. Cookies
We use a minimal set of cookies. The main one is a session cookie used for admin authentication when an admin signs in via a magic link. We do not use advertising cookies, behavioral-targeting cookies, or third-party analytics that profile you across sites. Browser settings let you reject cookies, but doing so may prevent admin sign-in from working.
10. Changes to this policy
We may update this policy from time to time. The effective date at the top of this page will reflect any changes. For material changes, we will post a notice on the site or, where appropriate, contact you directly.
Questions, requests, or complaints about this policy or our handling of your personal information can be sent to:
HR Rebooted LLP
Attn: Privacy
State of New Hampshire, USA
privacy@hrrebooted.com
