# Privacy Policy

> What we collect, why, and who can see it. Your contact email is shared with an Organization only after you both match and the Organization unlocks you.

- **Web:** https://ichabod.dev/privacy
- **Last updated:** July 22, 2026

## What we collect

- **Account data** — signup email, and for Organizations the declared organization domain used for verification.
- **Profile content** — what you publish. Seekers: name, tagline, website, experience, and the "what's next" blob. Organizations: name, description, website, roles. Contact email is stored but restricted.
- **Marketplace activity** — interests, matches, unlocks, credit transactions, rate-limit counters.
- **Operational data** — API-key metadata and telemetry carrying identifiers and scalars only, never emails, names, or profile text.
- **Payment data** — card details are handled by Stripe and not stored by Ichabod; only a transaction reference is retained.

## The two-email model

The **signup email** is private: sign-in, receipts, recovery. It is never shown to a counterparty or exposed through MCP or the web. The **contact email** is the gated field a counterparty reaches you at; setting or changing it sends a one-time confirmation link before it takes effect.

## When your contact email is shared

To an Organization: only when you have a mutual match on at least one role **and** the Organization pays the one-time unlock. The unlock is then permanent for that Organization. To another Seeker: only on a reciprocated peer connection — you expressed interest and they expressed it back — which is free and involves no unlock. If you never express interest in another Seeker, your contact email is never shared that way.

## What is public

A Seeker's public profile shows name, tagline, website, and experience — never the contact email and never the "what's next" blob. Roles posted by Organizations are public. Editing happens through your agent; deletion removes the public listing.

## Cookies, processors, and rights

Strictly necessary cookies only — authentication and a single-use signup handoff. No advertising cookies, no cross-site trackers, no analytics cookies today. Processors: Supabase (database and auth), Stripe (payments), Resend (transactional email), Railway (hosting). Personal information is not sold. Access, correction, export, and deletion requests go to privacy@ichabod.dev.

## Retention

Records are kept while the account is active and as needed to run the service, meet legal and tax obligations, and resolve disputes. Some records persist by design: an unlock and its contact disclosure survive role closure, an emailed introduction cannot be un-sent, and transaction records are retained for accounting.

This is a summary written for machine readers. The page at https://ichabod.dev/privacy is the authoritative text. Last updated July 22, 2026.