Privacy Policy

1. Who we are

Polisha is a service business based in Ontario, Canada. We sell two paid, asynchronous digital services for jobseekers: Polisha LinkedIn ($89), Polisha Growth ($69). Everything is delivered through https://getpolisha.com and by email.

One person, the owner of Polisha, is personally responsible for handling your information. There are no employees, no subcontractors and no data-broker relationships. Privacy questions and requests go to hellopolisha@outlook.com

2. What this policy covers

This policy covers both packages we sell. Polisha LinkedIn is a one-time profile rewrite. Polisha Growth is a monthly subscription for posts, engagement prompts and a posting calendar. Neither one involves access to any account of yours, at any point.

Important: We never ask you for a password, a credential or access to any account, on either package. There is no password field on the intake form, and there never will be.

3. What we collect, and how it varies by package

We collect only what we need to deliver the package you paid for. Some information is collected for every order:

• Your name.
• Your email address.
• Your phone number, if you choose to give it, this is optional.
• Your city and country, so we can position you for the right job market.
• Which package you bought.
• Order and payment metadata from Stripe: the amount, the currency, the date, the last four digits of your card and whether the payment succeeded, and, for Polisha Growth, your subscription status.
• Basic technical data from our host, such as IP address and browser type, used for security and to keep the site running.

For every order, whichever package, we also collect:

• Your LinkedIn profile URL, and your profile content as it appears to you.
• The job titles you want to be found for.
• Your positioning preference, how you want to be described, and what you want emphasised or left out.

For Polisha Growth specifically, we also collect, on an ongoing basis:

• The topics, voice and posting goals you want reflected in your monthly content.
• Any updates you send us ahead of a given month's batch, new roles, projects or angles you want covered.

3a. The free visibility check

The free check at https://getpolisha.com/check is optional and you do not need an account to take it or to see your result. It asks a few context questions (how often recruiters contact you, the role you want, your job market, how often you post) and then invites you to paste in your actual LinkedIn headline and About section, so the result can be based on what your profile actually says rather than a self-rating.

When our AI reader is available, the context you give and the profile text you paste are sent to our AI provider, Anthropic, to generate your result. This is server-side processing, not something that happens only in your browser. Anthropic processes that content to return an analysis and does not use it to train their models, under the terms we operate under with them. If our AI reader is unavailable, the check falls back to a rules-based result built entirely from the context questions, and no pasted profile text is sent anywhere.

We do not store the profile text you paste or the context answers you give beyond what is needed to generate and, if you ask for it, email your result. We do not build a database of LinkedIn profiles from this feature.

If you ask us to email you a copy of your preview, we receive your email address together with the result shown on the page, so that we can send it to you. We use them for that, and for our own record that the email was sent.

Important: There is a separate, unticked box on that form for occasional tips and offers. If you leave it unticked you will receive the preview and nothing else. Ticking it is express consent under Canada's anti-spam law and the equivalent UK and EU rules, and you can withdraw it at any time by replying to any message or writing to hellopolisha@outlook.com

The free check never asks for more than what is shown on the result page. The full analysis, with every finding written up, is part of the paid service, not something we generate and hold on the strength of the free check alone.

We do not use the free check to build an advertising profile of you, we do not sell or share what you told us beyond the AI processing described above, and we do not use tracking pixels or advertising cookies anywhere on this site. See section 7.

3b. If you request optional LinkedIn implementation (Polisha LinkedIn only)

This section applies only if, after reviewing your Polisha LinkedIn rewrite, you choose to separately request optional implementation assistance. It never applies to Polisha Growth, and it never applies automatically.

If you request it, we collect, through a dedicated authorization page you reach only by your own deliberate click:

• Your full name, purchase email, and a non-sensitive order reference.
• Your WhatsApp number, so we can coordinate implementation and send order-specific updates.
• A preferred implementation date or time, if you give one.
• Your typed name as an electronic signature, the checkbox responses you give, and the date, time and version of the authorization wording you agreed to.
• Whether you also opted in to occasional WhatsApp offers and updates, recorded separately from the service-communication consent above it.

Important: We do not collect a LinkedIn password, a recovery code, a two-factor backup code, or any other credential through that page, by email, or by WhatsApp. If you go on to authorize implementation, any credential you voluntarily create for that purpose passes only through a separate one-time secure transfer method described to you at the time, is not stored in this authorization record or anywhere else in this system, and is deleted immediately once the approved edits are applied.

The authorization record itself, everything in the list above except any credential, is retained separately from your other order records for as long as needed to show what you authorized and when, and is never sent to WhatsApp or included in any notification in a way that exposes a credential.

4. What we never collect

Some things we deliberately do not ask for, do not want and will not accept, on either package. If you send them anyway, we will delete them and ask you to change the credential.

• Permanent passwords of any kind.
• Passwords typed into an ordinary form field, sent by email, WhatsApp or SMS. The intake form has no password field.
• Your LinkedIn password. We never log into your LinkedIn account, your content is delivered to you as a document or a monthly batch you paste and post in yourself.
• Recovery email credentials, recovery codes or two-factor backup codes.
• Banking, payment-app or investment passwords.
• Government or immigration account passwords.
• Social media passwords.
• Your SIN, passport number or any government identification number.
• Full payment card numbers. Stripe processes payments and stores card data on its own systems. We never see or hold your full card number, expiry or security code.

Important: We never receive a credential of any kind, on either package. There is no account access anywhere in what we do, one-time or subscription, and there is no route to purchase either package that involves one.

5. How we use your information

We use your information for these purposes and nothing else:

• To audit and rewrite your LinkedIn profile content (Polisha LinkedIn).
• To write your monthly LinkedIn posts, engagement prompts and posting calendar, and to carry out your monthly profile visibility check (Polisha Growth).
• To take payment and issue receipts, including recurring monthly payment for Polisha Growth until you cancel.
• To send you transactional email about your order: confirmation, questions, monthly delivery, and cancellation confirmation.
• To carry out the revision included with your package.
• To keep basic business records, including tax records we are required by law to retain.

We do not sell your information. We do not rent, trade or share it for advertising. We do not add you to a marketing list without your clear consent, and if you do opt in you can leave at any time.

6. Third-party services we use

We use a small number of established providers to run the business. Each receives only the information it needs, and each has its own privacy policy.

• Stripe, payment processing. Receives your name, email and card details directly, and, for Polisha Growth, manages your recurring monthly billing until you cancel. We receive only the order and billing metadata described above.
• Anthropic, the AI provider behind the free visibility check, when you choose to paste in your profile content there. Receives the context answers and profile text you submit to that feature, and nothing else. Not used for any paid package, where your materials are reviewed by a person.
• Tally, an optional intake form. Receives your form answers if you choose to use it instead of the built-in form.
• WhatsApp (Meta), only if you separately request optional LinkedIn implementation and choose to message us there. Receives your phone number and the content of that conversation. Governed by WhatsApp's and Meta's own privacy terms, which we do not control.
• Resend, or an equivalent transactional email provider, sends order and delivery emails. Receives your name, email address and the message content.
• Vercel, website hosting. Receives standard request data such as IP address and browser type.
• Google Analytics, optional, anonymous usage measurement. Enabled only if we have switched it on.
• Meta Pixel, optional advertising measurement. Enabled only if we have switched it on.

We do not give any of these providers access to your LinkedIn account or any account credential, because we never hold one to give.

7. Analytics and cookies

If analytics are enabled, they measure anonymous, aggregate behaviour only: which pages were viewed, which package cards were clicked, roughly where traffic came from. Events carry no personal detail.

Analytics and advertising tools never receive your form answers, your LinkedIn content, your monthly posts, or anything else we write for you. That data path does not exist on this site.

Cookies: the site sets essential cookies only, the ones needed for the checkout to work and the pages to load correctly. Optional analytics or advertising cookies are set only where those tools are enabled. You can block or delete cookies in your browser at any time; the essential parts of the site will still work.

8. How long we keep your information

• LinkedIn drafts, monthly posts, intake answers and working notes: kept for up to 90 days after delivery (Polisha LinkedIn) or after your Polisha Growth subscription ends, so we can handle a revision or a follow-up question, then deleted. You can ask us to delete them sooner and we will.
• Free visibility check submissions: the context answers and pasted profile text are used to generate your result and are not separately stored afterward, beyond the ordinary, short-lived logs any web request leaves with our hosting provider. If you ask us to email you a copy, that email and the address it was sent to are kept the same way as other order and delivery emails, below.
• Order and delivery emails: kept for the period required for business and tax records.
• Payment records held by Stripe, including your subscription and billing history for Polisha Growth: retained under Stripe's own retention rules, as required for financial compliance.
• Anonymous analytics data: retained under the settings of the analytics provider, and not linked to you.

9. Where your information is stored

Several of our providers, including Stripe, Vercel, Tally and our email provider, are based in the United States or store data on servers outside Canada. This means your information may be transferred to, processed in and stored in another country, where it can be subject to that country's laws and lawful access requests.

We choose established providers with published security practices and standard contractual protections. If you are not comfortable with cross-border processing, contact us at hellopolisha@outlook.com before you order.

10. Your privacy rights

Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), and any equivalent provincial law that applies to you, you have the right to:

• Ask what personal information we hold about you and get a copy of it.
• Ask us to correct information that is wrong or out of date.
• Ask us to delete information we no longer need to keep.
• Withdraw your consent to our handling of your information, subject to legal and contractual limits.
• Ask how we handled your information and who we shared it with.
• Complain to us, and then to the Office of the Privacy Commissioner of Canada if you are not satisfied.

To exercise any of these rights, email hellopolisha@outlook.com We will confirm your request within a few business days and respond within 30 days. There is no charge. If we cannot do what you asked, for example, where a tax record must be kept, we will tell you why.

11. Security and breach notification

We keep the amount of sensitive data we hold as small as possible, because data that does not exist cannot be exposed. That is the reason neither package needs a credential at all: we hold no account access to protect, because we never take any. Files are stored on password-protected, up-to-date devices and accounts secured with two-factor authentication.

No system is perfectly secure. If a breach occurs that creates a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner of Canada as soon as feasible. Our notice will describe what happened, what information was involved, what we have done, and what you should do.

12. Children's privacy

These services are for adults. They are not directed at anyone under 18 and we do not knowingly collect information from minors. If you believe a minor has submitted information to us, email hellopolisha@outlook.com and we will delete it.

13. Changes to this policy and how to contact us

If we change this policy, we will update the date at the top of the page. If a change materially affects how we handle your information, we will also email customers with an active or recent order before it takes effect.

Privacy questions, access requests and deletion requests: hellopolisha@outlook.com Anything else about your order, including cancelling Polisha Growth: hellopolisha@outlook.com

14. If you are in the UK or the European Economic Area

We are based in Ontario, Canada and customers outside Canada are welcome. If you are in the United Kingdom or the European Economic Area, the UK GDPR or EU GDPR applies to your information in addition to the Canadian rules described above, and this section explains how we approach it.

Our lawful basis for handling your information is the performance of a contract: you ask us to rewrite your LinkedIn profile or write your monthly content, and, for Polisha Growth, to bill you each month for as long as you stay subscribed, and we cannot do any of that without the information you send. Where we email you about your own order, that is also contract performance rather than marketing. We do not run advertising profiling and we do not sell personal information to anyone.

You have the right to ask what we hold about you, to have it corrected, to have it deleted, to restrict or object to how we use it, and to receive it in a portable form. Email hellopolisha@outlook.com and we will respond within one month. There is no charge. You also have the right to complain to your data protection regulator: the Information Commissioner's Office in the UK, or your national supervisory authority in the EEA.

Your information is transferred to and stored in Canada, and with the service providers named earlier in this policy. Canada holds a partial adequacy decision from the European Commission covering commercial organisations, which is the basis on which that transfer takes place. Where a provider stores data elsewhere, they do so under standard contractual clauses in their own terms.

We keep your information only as long as the retention periods set out above require. If you would rather we deleted everything as soon as your order is delivered, or your Polisha Growth subscription ends, say so and we will.