Privacy Policy — Bearing

Bearing ("Bearing," "we," "us," or "our") is a voice-first career intelligence service operated by Chisel Labs, LLC, doing business as Bearing, from Colorado, United States. This Privacy Policy explains what information we collect when you use Bearing, how we use it, who we share it with, and the choices you have.

By creating a Bearing account (including by checking the box to accept these terms at signup) or by calling the Bearing phone number, you agree to the practices described in this policy.

1. Who this policy covers

This policy covers your use of:

The Bearing website at joinbearing.com
The Bearing web application (sign-up, dashboard, account settings, Career Memory download, role-fit analysis, and related features)
The Bearing voice service, accessed by calling our published phone number

It does not cover third-party websites, apps, or services that link to or from Bearing.

2. Information we collect

We only collect what we need to run the service and improve it.

2.1 Information you give us directly

Account information. Your name, email address, and phone number when you sign up. If you sign in with Google, we receive your name, email, and Google account ID through Google's OAuth flow.
Career background. Work history that you upload or enter yourself: LinkedIn PDF exports, resume files (PDF or DOCX), and any companies, titles, and dates you type in manually.
Voice conversations. When you call Bearing, the call is recorded and transcribed. The transcript and call metadata (call ID, start and end time, duration, and the phone number you called from) are stored on our systems. Our voice agent tells you at the start of the call that the call is recorded and transcribed.
Account settings. Preferences and adjustments you make in your dashboard, including baseline depth selection, visibility changes you make to extracted items, and account deletion requests.
Billing information. When you make a purchase, our payment processor (Stripe) collects your payment details. We do not store your full payment card number; we receive limited billing information and a record of your purchases and subscription status.
Communications. Messages you send us at hello@joinbearing.com or through any support channel.
Consent records. When you accept these terms at signup, we record that you did, along with the date and the version of the terms you accepted.

2.2 Information we generate from your conversations

After each call, we use AI to process your transcript into structured career intelligence. This includes extracted facts, wins and proof points, transferable skills, open questions, role hypotheses, session summaries, an agent brief, narrative summaries, a skills synthesis, and your downloadable Career Memory file. We store these alongside the transcript on our systems and use them to make your next call more useful.

2.3 Information we collect automatically

Usage and device data. Standard log data such as IP address, browser type and version, operating system, referring page, and pages viewed within Bearing. We use this to keep the service running, debug issues, and protect against abuse.
Authentication and security signals. PIN entry attempts and outcomes, sign-in attempts, and similar audit events.
Cookies and similar technologies. We use cookies and similar technologies that are strictly necessary to keep you signed in and to remember your session. We also use analytics and advertising-measurement tools to understand how Bearing is used and to measure our marketing: PostHog (product analytics), which includes session recordings of your interactions with our web app and automatic capture of clicks and page activity; Google Analytics, which sets a _ga cookie that can recognize your browser across websites; and the Meta pixel, to measure the performance of our advertising. You can opt out at any time using the "Do Not Sell or Share My Info" link in our footer and in Section 14 below.

3. How we use your information

We use the information described above to:

Create and maintain your Bearing account
Authenticate you when you sign in or call (including via your PIN)
Conduct your voice sessions and route calls
Transcribe, process, and structure your conversations into the Career Memory and related artifacts
Provide features such as Role-Fit Analysis, Career Memory downloads, and dashboard views
Process payments and manage your purchases and subscription
Continue building on prior sessions instead of starting from scratch
Send you transactional emails (sign-in links, purchase and subscription notices, account deletion confirmations, and notices about material changes to the service or this policy)
Improve the quality of Bearing — for example, by reviewing how the voice agent performs and where the experience can be better. Where we do this, we use the minimum data needed and prefer aggregated or de-identified data wherever possible.
Measure and improve how Bearing and our marketing perform, including by reviewing session recordings of product usage (see Sections 2.3, 4, and 14)
Detect, prevent, and respond to fraud, abuse, security incidents, and violations of our Terms of Service
Comply with legal obligations

We do not sell your personal information. We do not use your career data to train third-party foundation models, and the AI providers we use to process your data are accessed under their standard developer terms, which do not use your data to train their models.

4. How your data flows through Bearing

Bearing is built on a small number of third-party platforms. Knowing how data flows helps you understand who has access to what.

Vapi — Operates the inbound phone line and the live voice AI experience. Sees your phone number, the audio of the call, and the live transcript.
Supabase — Hosts our database and authentication. Sees your account profile, transcripts, structured career data, and authentication tokens.
OpenAI — Processes transcripts into structured career intelligence and generates Career Memory artifacts. Sees the contents of your transcripts and career background at processing time.
Anthropic — Powers parts of the voice agent's behavior. Sees conversation content during a call.
Google — Provides Google Sign-In (OAuth). Sees your name, email, and Google account ID at sign-up.
Stripe — Processes payments and manages subscriptions. Sees your name, email, billing details, and payment card data (entered directly with Stripe; we do not store full card numbers).
Resend — Sends transactional emails. Sees your email address and the contents of those emails.
Replit — Hosts our backend application. Sees anything that passes through our backend, including transcripts and processing jobs.
Lovable — Hosts our web application. Sees your interactions with the dashboard.
PostHog — Product analytics, US-hosted. Sees usage and interaction events, device and IP address, and a pseudonymous analytics id. We record session replays of your interactions with the web app and automatically capture clicks and page activity, in addition to a set of product events. You can opt out at any time using the "Do Not Sell or Share My Info" link.
Google Analytics — Measures website and product usage and marketing performance. Sees usage and device data, page views, and a cookie-based identifier (_ga).
Meta — Measures the performance of our advertising. Sees limited event data (for example, page view, sign-up, purchase) and identifiers, via the Meta pixel and server-side Conversions API.

Each of these providers has its own privacy policy and operates as a data processor or sub-processor on our behalf. We pick providers that offer reasonable security and privacy protections, but we do not control them. If you have concerns about any specific provider, please contact us.

We may update this list as we add or change vendors. The version in effect at any time is the version published here.

5. How we share your information

We share your information only in these situations:

With service providers listed in Section 4, strictly to operate Bearing on our behalf.
When you direct us to share. For example, when you download your Career Memory and share it yourself with a recruiter or coach. Once you share an exported file, we are no longer in control of how it is used.
For legal reasons. If we are required to disclose information to comply with a law, regulation, subpoena, court order, or governmental request; to enforce our Terms of Service; or to protect the rights, property, or safety of Bearing, our users, or the public.
In a business transaction. If Bearing is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will let you know before your information becomes subject to a different privacy policy.

We do not sell your personal information for money. We do use analytics and advertising-measurement tools (Google Analytics, PostHog, and Meta) that involve sharing limited usage and event data with those providers to measure and improve our marketing. Under some U.S. state privacy laws this may be considered "sharing" for cross-context behavioral advertising; you can opt out as described in Section 14. We do not otherwise sell or rent your personal information.

6. How long we keep your data

We keep your account data and the career intelligence we have built for you as long as your account is active. This is the entire point of Bearing — your Career Memory gets richer the more you use it.

If you delete your account, we hard-delete your profile, transcripts, extracted data, and Career Memory after a 24-hour grace period. During the grace period you can sign back in and cancel the deletion. After the grace period, deletion is permanent and not recoverable.

We may retain limited records (for example, basic billing records, deletion logs, or items required to comply with legal obligations) for a reasonable period after account deletion. Backups may continue to contain residual copies of your data until those backups roll over in the normal course.

7. Your choices and rights

You have meaningful control over your data in Bearing:

Access. You can view your Career Memory, structured career data, and most other content directly from your dashboard. You can download your Career Memory as a Markdown file at any time.
Correction. You can edit your career background (roles, companies, titles, dates) from the dashboard. You can also ask the voice agent to correct or update information mid-call.
Visibility controls. You can hide or remove individual extracted items (facts, wins, skills, open questions) from your Bearing experience.
Account deletion. You can request hard deletion of your account from your account settings. After a 24-hour grace period, your data is permanently deleted.
Communication preferences. Transactional emails (sign-in, purchase, deletion confirmations) cannot be turned off while you have an active account, since they are necessary to run the service. If we ever send marketing emails, you can unsubscribe from them using the link in each message.

Depending on where you live, you may have additional rights — for example, the right to access, correct, delete, or port your personal information, or to object to or restrict certain processing. California residents have rights under the CCPA/CPRA, and residents of certain other US states and the EEA, UK, and Switzerland have similar rights under their local laws.

To exercise any of these rights, email us at hello@joinbearing.com. We may need to verify your identity before responding. We will respond within the timeframe required by applicable law. You also have the right to lodge a complaint with your local data protection authority, but we hope you will give us a chance to address your concern first.

8. Security

We protect your information with reasonable administrative, technical, and physical safeguards:

Encrypted connections (HTTPS/TLS) for data in transit
Encryption at rest, as offered by our database and storage providers
Role-based access controls in our database (Row Level Security in Supabase) and admin systems
Authentication required for all dashboard access, and PIN-based authentication for voice sessions
Reasonable practices to limit access to your data to the people who need it to operate Bearing

No system is perfectly secure. We cannot guarantee that your information will never be accessed, disclosed, altered, or destroyed by a breach of our safeguards. If we discover a breach that affects you, we will notify you and the appropriate authorities as required by law.

9. International users

Bearing is operated from the United States. If you use Bearing from outside the United States, your information will be transferred to, stored, and processed in the United States and other countries where our service providers operate. These countries may have data protection laws different from those of your country.

By using Bearing from outside the United States, you consent to this transfer and processing.

10. Children

Bearing is intended for senior professionals and is not directed to children. We do not knowingly collect personal information from anyone under the age of 18. If you believe a child has provided personal information to Bearing, please contact us at hello@joinbearing.com and we will delete it.

11. Recording of calls

Calls to Bearing are recorded and transcribed for the purposes described in this policy. You agree to this recording in two ways: when you accept these terms at signup, and again when our voice agent tells you at the start of the call that the call is recorded and transcribed. If you do not want your call to be recorded, please do not call Bearing.

Some US states and other jurisdictions require all parties to a call to consent to recording. By accepting these terms and by calling Bearing, you consent to the recording and transcription of your call. If other people can be heard on your call, you are responsible for confirming they also consent to being recorded, where required by law.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or through a notice on the Bearing website before the changes take effect. Your continued use of Bearing after the effective date of an updated policy means you accept the updated policy.

13. Contact us

Questions, requests, or complaints about this Privacy Policy or your information can be sent to:

Bearing (Chisel Labs, LLC)
Email: hello@joinbearing.com

14. Do Not Sell or Share My Info / opt out of analytics

We use analytics and advertising-measurement tools — PostHog (product analytics, including session recordings and automatic click and page capture), Google Analytics, and the Meta pixel — to measure product usage and marketing performance. You can opt out at any time using the control below; your choice is remembered on this device, and we will stop loading and sending data to all of these tools (including session recording, Google Analytics, and Meta). You may need to set this choice again on other devices or browsers.

Do Not Sell or Share My Info