Privacy Policy

From candidates, through Debby's intake:

• Name and email address.
• If you sign in with Google or LinkedIn: the name, email address and profile photo that account shares once you agree on its screen. We use them to sign you in, and show your Google photo to you on your own pages (your account and your Proof Profile); it is never shown to a company. We never see your password, and signing in this way doesn't give us your job history.
• What you do (headline) and your experience level.
• Links you choose to share: LinkedIn, portfolio, GitHub or personal site, and the work you're proudest of, along with your description of your contribution to it.
• If you give us a GitHub link: what GitHub publicly shows about the public repositories on that account (names, descriptions, the languages used, and well-known frameworks listed in a project's package.json), read through GitHub's official API. We read only the account you gave us, never private repositories, and we show you what we took on your profile.
• If you give us your résumé, or the PDF of your LinkedIn profile: the facts in it (name, headline, location, summary, roles, projects, education and any grade average, coursework, skills, certifications, awards, activities and volunteering), read by an AI model and kept only where they appear word for word in your document. You see them before anything is saved. We don't keep the file itself.
• If you give us the link to your LinkedIn profile and Debby offers to look it up: the professional details that profile shows publicly (job titles, employers and dates, education, skills, headline and location), read at that moment by Fetchin, a profile-data provider. Debut never logs in to LinkedIn, and keeps none of the rest the provider returns, such as photos, websites or your birthday. You see everything first, and we save only the lines you keep, labelled as coming from the provider. Debut isn't affiliated with LinkedIn.
• The tools you're strongest with, what you want next, and anything else you write in free-text answers.
• If you choose to talk to Debby by voice: a transcript of the call, when it happened and how long it lasted. Debut doesn't keep a recording of your voice.

From companies, through Debby's intake:

• Contact name, company name, and work email.
• The role you're hiring for, seniority, hiring pain points, timeline, and any notes you add.

From hiring teams, through the hiring onboarding:

• Your first and last name, work email, and job title.
• Your company's name and website.
• Your description of the hire, whether a pasted job description or your own words.
• The role's location and work style (remote, hybrid, or onsite), compensation, and seniority, where you give them.
• A link to the job posting, where you give one.
• That you accepted our terms, when you accepted them, and which version you accepted.

Automatically: standard technical information needed to run and protect the site, such as server request logs kept by our hosting provider (which can include IP addresses).

• Candidate information is reviewed for matching, and may be shared with relevant prospective employers or hiring partners as part of Debut's hiring service — that is the point of the product, and it happens in the context of a potential match, not as a public listing.
• Company information is used to evaluate and match candidates against the role.
• We do not sell personal information, and we do not use your submissions for advertising.
• New submissions trigger an internal notification email to the Debut team so a person can review them promptly.
• If you have a candidate account, Debby emails you on Mondays when there are new roles on your list: their titles, companies, places and posted pay. Every one has a link to stop them, and you can turn them off on your Proof Profile at any time.

Debut runs on a small set of infrastructure providers that process data on our behalf:

• Supabase — database where submissions are stored.
• Vercel — hosting for the site, including standard request logs.
• Resend — delivers the emails Debut sends, such as introduction emails, Debby's weekly email of new roles, and our internal notifications.
• Anthropic — the AI model behind Debby. It reads your messages to Debby, the résumé or LinkedIn PDF you give her, and job postings, to write her answers and readings.
• Fetchin — when you ask Debby to look up your LinkedIn profile, we send it that link and it returns what the public profile shows, read at that moment. We keep only the professional details listed above. It is an independent company (Groupe PAMART, France) with its own privacy policy.
• People Data Labs — if we use it instead of Fetchin for the same lookup, we send it that link and it returns the professional details it holds. It is an independent company with its own privacy policy, including a way to opt out of its data.
• TypeSafe — when Debby looks for something to remember in a chat message, she uses TypeSafe's classifier, when it's available, to sort it into a kind of preference (for example a place or a level); otherwise the same AI model that powers Debby does it. TypeSafe receives that message, what Debby read from it, and your saved preferences.
• ElevenLabs — if you choose to talk to Debby by voice, ElevenLabs receives the call's audio, turns what you say into text, runs Debby's side of the conversation with an AI model, and turns her replies into speech. It sends us the transcript when the call ends, and we then ask it to delete its copy. It is an independent company with its own privacy policy.
• Logo.dev — shows company logos on the roles Debby finds for you. Your browser loads each logo from Logo.dev, which sees that request like any website would; we send it no information about you.
• Calendly — if you choose to book a call, scheduling happens on Calendly under its own privacy policy.

These providers may process and store data in the United States and other countries.

• We use no analytics or advertising cookies, and no third-party trackers.
• Inside your Debut account, we keep a simple record of what you do with the roles Debby shows you: which ones you saw, opened, saved, marked as interested or not, or clicked through to apply. It is stored in our own database with your account, so we can tell which roles are useful to you, and it isn't shared with anyone.
• Your chats with Debby are saved to your account so you can come back to them, until you delete them (each chat can be deleted from its row on the Chat page) or delete your account.
• Answers from Debby that you save to Your documents are kept with your account, seen only by you, until you delete them there or delete your account. Deleting the chat they came from doesn't delete them.
• When you tell Debby something in chat she can remember, such as the level, places or kind of role you want, she saves it as a preference and shows you what she saved, with a link to change or remove it. Anything she would only be guessing from what you said, she asks you about first. To find these, each message you send and her reply are kept with your account and read by an AI model. They aren't shared with anyone, and they're deleted when you delete your account or ask us to.
• If you talk to Debby by voice, the call's transcript is saved to your account, where you can read it or delete it on the Talk to Debby page. Deleting a call deletes its transcript from Debut and asks ElevenLabs to delete its copy; we keep only when the call happened and how long it lasted, so call limits still apply. Nothing from a call is added to your profile until you choose what Debby should remember from it, and what you choose is then read the same way as a chat message.
• Some roles Debby shows you are public roles found across the market, at companies Debut doesn't represent. We may later tell that company how many Debut candidates are interested in its roles (when you mark one as interested) and how many Debby has matched to its roles. That is a count only, never your name or your profile, and Debut doesn't contact a company on your behalf because of it.
• Your light/dark theme preference is stored locally in your browser, not sent to us.
• Because we don't track you across other sites, there is nothing for a browser "Do Not Track" signal to change, and we don't respond to those signals.
• If we ever add analytics, we'll update this policy first.