Privacy Policy

When you enter your offer in the simulator (base salary, bonus, equity, role, location), everything stays on your device. The calculation runs in your browser. No network request sends those numbers to our servers.

So you don't have to retype everything if you refresh the page, these values are kept in your tab's sessionStorage. They disappear automatically when the tab is closed — including after a crash. No cookie is set for this step.

If you decide to unlock the negotiation script ($39), you are redirected to Stripe Checkout. From that point on:

• Stripe (Stripe Inc., United States) collects the payment data (card number, billing address, email). OfferUnlock never sees the card number — Stripe only returns a session identifier and, optionally, your billing email.
• None of the data you entered in the simulator (salary, bonus, etc.) is sent to Stripe or to our servers at the time of payment.

Once payment is confirmed by Stripe, we store on Supabase (our database):

• The Stripe session identifier;
• The payment status (paid);
• A random access token that lets you come back and view your script;
• Your billing email (if Stripe provided it), so we can resend you a recovery link if you lose the tab;
• The transaction amount and currency;
• The chosen display language.

Your offer numbers are never stored in the database. The script you receive after payment is generic — not personalized on your salary. See our home page.

* The exact region of the Supabase project will be specified after the final infrastructure audit.

• Simulation data: browser tab lifetime only.
• Payment sessions in Supabase: 90 days from the purchase. After that, the access token stops working and the row is purged.
• Payment data at Stripe: per Stripe's policy, generally 7 years for accounting and legal reasons (US/Canada).

No analytics cookie, no advertising pixel, no session replay tool. The only browser-side storage is the sessionStorage mentioned in section 1, which never leaves your device.

Depending on applicable law (Canadian PIPEDA / Quebec's Law 25 if you are in Quebec, GDPR if you are in the EU/EEA, or other rules depending on your jurisdiction), you generally have the right to:

• Access the data concerning you;
• Request its correction or deletion;
• Request its portability;
• File a complaint with the competent authority.

To exercise these rights, write to the contact address below. We respond within 30 days.

The data controller is Tajalys Inc. (Moncton, New Brunswick, Canada).

Contact: privacy@offerunlock.app