Privacy policy

This page explains what N-Access collects, why, and how you can control it.

Who we are

N-Access is the community arm of Neutrally. If you have questions about how we handle your data, email us at ali@n-access.co.uk.

What we collect and why

  • Accounts:your email, your name (optional), and a bcrypt hash of your password — never the password itself. We use this to log you in.
  • Role finder searches: the details you enter (name, email, phone, location, age range, preferences, and an optional diversity group) to run the search and, if you have an account, to show your search history.
  • Accelerator applications and interest forms: whatever you submit through those forms.
  • Password reset: a single-use token, valid for one hour, stored hashed.
  • Your CV: if you upload one, we store the file and the text we extract from it so we can build your career profile and improve your role matches. We do not share it. You can download or delete it from your dashboard at any time.
  • Saved opportunities: the listings you save or click Apply on, the status you set, and any notes you write, so your dashboard can show them. We also record when you click Apply so we can prompt you to update the status.
  • Career summary and matches: we compute a short career summary and a list of matching live opportunities from your career profile and your saved opportunities, using rules that run on our servers — no external AI service is involved. We keep only the latest version of each.
  • Enquiries: your name, email, organisation (optional), the service you asked about and your message, so we can reply and, if you go ahead, deliver the work. If you were logged in we link the enquiry to your account. If you delete your account we keep the enquiry as a business record but unlink it from you.
  • Recruiter visibility (optional): if you tick “Let approved recruiters find me”, recruiters we have approved can see your first name and last initial, headline, skills, tech areas, location and experience level. It is off by default and you can untick it at any time. When a recruiter asks to meet you we store the request (role and message) for up to 24 months and contact you ourselves; recruiters never see your email or CV.
  • Recruiter applications: if you apply for recruiter access we store your name, work email, company, role and what you are hiring for, so we can assess and approve your access. We keep them while your account exists.

Cookies and analytics

A session cookie keeps you logged in for up to 30 days. Analytics (PostHog, EU region) only run once you accept the consent banner; session recordings and heatmaps stay off until then.

Where your data is stored and who processes it

We host on Vercel, our database runs on Supabase (Frankfurt, EU), transactional email goes through Resend, and analytics run through PostHog EU. We never sell your data.

How long we keep it

We keep accounts until you delete them, search, enquiry and form submissions for up to 24 months, your CV and career profile until you delete them or delete your account, saved opportunities and Apply-click records until you remove them or delete your account, your latest career summary and matches until your profile changes or you delete your account, introduction requests for up to 24 months, recruiter applications while the account exists, and password reset tokens for one hour.

Your rights

Under UK GDPR you have the right to access, correct, delete, and object to how we use your data. Email us and we will respond within 30 days. You can delete your account, CV, career profile, search history, saved opportunities and Apply-click records yourself from your dashboard under Account. Deletion is immediate and permanent.

Changes

Last updated 24 September 2026.