Privacy policy

Who we are

sograph is run by 0pon, LLC (“we”). Questions and requests about your data go to mike@0pon.com.

What we collect

Everyone with an account

Your email address, a password stored only as a hash we cannot read, your role (member or employer), the invite you signed up with and who issued it, and when you signed up and signed in.

Members

Your name, the skills you list with their level and last-used date, and the pools you join.

Resume text

Text you paste is read on our server to pick out skill terms and then discarded. Email addresses, phone numbers, links and sentences that read like job history are filtered out before anything is saved.

Employers

Your demands (title, skills and their weights), the pools you create, the intro requests you send, and your billing status from Stripe: plan, subscription status and Stripe customer id. Card details go to Stripe and never reach us.

Technical data

At sign-up and password reset, your IP address and browser signals are checked by Cloudflare Turnstile to tell people from bots. Our hosting and database providers keep request logs.

We use no analytics, advertising trackers or third-party cookies. The only cookies keep you signed in.

How names stay hidden

Names and emails are stored apart from skills. Employers see skills and levels, never names, until you accept their intro; then that one employer sees your name and email for that demand. In each pool a skill is shown only when at least five members hold it; otherwise it is rolled up to a broader skill or left out. How it works has the details.

These protections are what the software enforces between users. We can access the database to run the service and to deal with abuse.

Who receives data

We do not sell personal data or share it for advertising. These providers process it for us. The database, the servers that run sograph and email sending are in the United States; Cloudflare and Vercel also handle requests at the edge of their networks, close to you.

Email we send

Account confirmation, password reset, a note to a member when an employer asks for an intro, and a note to an employer when a member accepts. No marketing email.

How long we keep it

Account data stays until you delete your account or ask us to. Intro requests are kept as a record of who asked whom; unanswered ones expire after 14 days. Skill terms that did not match the vocabulary are kept without any link to you, to improve matching. A record of which invite created each account, holding the account id, the invite and its issuer but not your name or skills, is kept after the account is deleted so that invites used for fake accounts can be traced. Billing records are kept as Stripe and tax law require.

Your choices

On Your skills you can change levels and remove skills; you can leave pools on Pools and decline any intro. You can delete your account yourself on Account. To get a copy of your data or correct it, email mike@0pon.com. We answer within 30 days.

Security

Traffic is encrypted, the database enforces per-user access rules, passwords are hashed, and names are kept apart from skills. No system is perfect; if you find a problem, tell us at mike@0pon.com.

Age and changes

sograph is for adults; it is not meant for anyone under 18. When this policy changes we update the date above and email account holders about changes that matter.