Privacy Policy

Plinker private beta  ·  Last updated: 12 July 2026

Privacy is not an afterthought at Plinker — it is part of the product. This policy explains, in plain language, what we collect, why, and the control you keep over it.

1. Who we are (data controller)

During this private beta the data controller is Sukhmani Khanna, Dublin, Ireland, acting as an individual ahead of incorporation. Once Plinker Limited is incorporated in Ireland, controllership and all data will transfer (novate) to Plinker Limited and this policy will be updated to name the company; we will tell beta members when that happens.

Our privacy lead and contact point for any privacy question is Sukhmani Khanna — privacy@plinker.app.

2. What Plinker is

Plinker is an invitation-only introductions service for senior leaders. You share your career background; we draft a "trajectory" and introduce you to one other member at a time. Before you both opt in, you each see the other's professional profile — role, career path, education and general location — but your name and photograph stay hidden until you both choose to connect. There is no public profile, no search, no feed, and we never show ads.

3. What we collect, why, and our lawful basis

Under the GDPR we rely on the following bases for each type of information:

• Your CV file, and the career history, education and roles we read from it — to draft your trajectory and find your matches. Lawful basis: your consent to the processing, then our contract with you to run the service (Art. 6(1)(a), then 6(1)(b)).
• Your goals (free text) — to understand what you are looking for. What you write is never shown to other members. We use it to choose your matches, and your concierge may describe why two people fit in their own words — but your goal is never displayed to anyone else in the words you wrote. Please do not include sensitive details (for example health, religion, or anything revealing sexual orientation). If you choose to, you give explicit consent for us to process that content. Lawful basis: consent; Art. 9(2)(a) explicit consent for any sensitive content you volunteer.
• Your gender, if you provide it — used only to honour your match preferences; it is private and never shown to other members. Optional; you can leave it blank. Lawful basis: your explicit consent (Art. 6(1)(a)). Gender is ordinary personal data, not special-category — we still treat it carefully.
• Your email and basic contact details — to run the beta and talk to you. Lawful basis: contract and our legitimate interest in operating the pilot (Art. 6(1)(b)/(f)).
• Basic device and diagnostic data from TestFlight — to run the test build and fix crashes. Lawful basis: legitimate interests.

4. The original CV file — your choice

By default we read your CV and then delete the original file within 24 hours, keeping only the structured details you confirm. If you switch on "keep my original CV on record," we keep the file until you delete it or leave the beta. The default is delete. Reading is done in memory for a single request — your CV file is not stored by our CV-reading provider (see section 6).

5. Automated processing and AI matching — with a human in the loop

We use software, including AI, to draft your trajectory and suggest matches. A human concierge reviews every introduction — you are never matched by machine alone. You can ask us how this works, and contest or ask us to review any result. Because a human is always in the loop, the automated processing has no legal or similarly significant effect on you without human involvement (GDPR Art. 22).

6. Who we share it with

We share your data only with the service providers that make Plinker work, each under a written data-processing agreement, and we never sell your data or run ads. In particular, we ask for your explicit permission in the app before your CV is shared with our AI provider to be read — nothing is sent until you consent. Our providers are:

Provider	What they do	Where
Anthropic (Claude API)	Reads your CV and helps draft your trajectory and match suggestions	United States — see transfers below
Supabase	Secure cloud hosting, database, authentication and storage	Stored in the EU (Ireland, EU-West) — see transfers below
Resend	Sends our emails to you	Delivers from the EU (Ireland, EU-West) — see transfers below

Push notifications, if you enable them, are delivered through your device platform's push service (Apple or Google) and our notifications tool.

International transfers. Your Plinker data is stored in the EU (Ireland). Some of it is nonetheless handled outside the European Economic Area, and we would rather tell you plainly than imply otherwise:

• Anthropic, our CV-reading and AI provider, processes data in the United States. It does not use your data to train its models and applies short, contractually limited retention.
• Supabase, which hosts our database, stores your data in Ireland but contracts through a Singapore entity and relies on a global chain of infrastructure and support providers, some of them in the United States. This means Supabase staff or systems may access your data from outside the EEA for support, monitoring and maintenance of the service.
• Resend, which sends our emails, delivers from the EU but contracts through a United States entity, so your email address may be handled outside the EEA.

Every one of these transfers is governed by the European Commission's Standard Contractual Clauses, supported by a transfer-impact assessment we carry out and keep under review. We keep provider handling to the minimum needed to run the service, and we will update this page if our providers change.

7. How long we keep it

We keep your data only as long as needed for the beta, and delete it when you leave or ask. Original CV files: deleted within 24 hours, unless you opted to keep yours. Structured data: for the duration of your participation.

8. Your rights

You can access, correct, delete, port, and object to our use of your data, and withdraw consent at any time — withdrawal is as easy as giving it and does not affect anything we did beforehand. In the app you will find Profile → "Delete my CV file" and "Delete everything" (which erases your Plinker data and closes your account). You can also email privacy@plinker.app. You have the right to complain to the Irish Data Protection Commission at dataprotection.ie.

9. Deleting your account and data

You can delete your account and associated personal data at any time from Profile → Delete everything inside the app. You can also request deletion by emailing privacy@plinker.app; we will action it and confirm.

10. Age

Plinker is for adults; you must be 18 or older to take part.

11. Changes

We will update this policy as Plinker develops — including when controllership moves to Plinker Limited — and post the new version here.