Last updated October 4, 2026
This Privacy Policy explains what information Ponchos collects, where it comes from, why it is used, and the choices available to you. Ponchos is the controller of the personal information described here. Ponchos currently operates as a private beta from the United States.
Account and authentication information. We store your email address and, when provided, your first name, last name, and display name. If you sign in with Google or LinkedIn, the provider you choose and our authentication provider, Supabase, provide authentication identifiers and basic account information needed to sign you in.
Onboarding and Search Profile information. We store the job-search status, role and seniority targets, company-stage and category preferences, location and work preferences, compensation target, risk appetite, career and GTM preferences, companies to avoid, and free-text background summary you choose to provide.
Optional Career Profile information. If you create a Career Profile, we store the LinkedIn URL you submit, the public profile match you confirm, career history, current role and company, location, role family, seniority, domains, sales segments, buyer experience, company stages, leadership experience, and your separate opportunity-matching choice. Your claimed Career Profile is private by default.
Saved companies, feedback, and submissions. We store the companies you favorite or watch, notes you add, More or Less like this feedback, hidden companies, and company-addition requests, together with timestamps and the account that performed the action.
Attention and personalization history. Ponchos records a bounded history of deliberate product actions, currently including Watch and Unwatch transitions. The Attention system does not record passive dwell, scroll, or hover behavior. We use that history to operate and improve the product and, only when you enable Enhanced personalization, to provide private insights and recommendations to you. Turning Enhanced personalization off stops that optional use but does not immediately delete the underlying operational history.
Evaluation, recommendation, and research activity. When Ponchos evaluates, scores, recommends, or researches a company for you, we may store the result, narrative, evidence, status, timestamps, and related product activity so it can be shown to you and the service can operate reliably.
Alerts and communications. We store alert and email preferences, in-product acknowledgement state, unsubscribe state, and records needed to prevent duplicate or failed delivery. If you opt in to an email digest, the message may include companies and roles matched to your Watchlist and Search Profile.
Plan and billing records. We store your Standard or Pro access, complimentary or trial grants, credits, and related entitlement history. Restricted Stripe sandbox testing may create test customer or subscription records. Ponchos does not currently offer live paid checkout to customers and does not store full payment-card details.
When you use Ponchos, our hosting, database, authentication, security, and mapping providers may process technical information such as IP address, browser and device type, request and response timestamps, referring page, session identifiers, and diagnostic or security logs. We use this information to deliver the service, keep accounts secure, investigate failures, and prevent abuse.
Separately from account data, Ponchos collects and stores company information from public sources, including company facts and descriptions, public funding announcements, public GitHub activity, and job postings from company career pages and applicant-tracking systems such as Ashby, Greenhouse, and Lever.
Ponchos also collects structured information from publicly discoverable professional profiles and announcements associated with a company. This may include a person’s name, current or listed job title, employer, general location, public profile or source URL, and publicly listed role start or end dates. We use it to build factual workforce observations such as observed functions, geography, tenure, leadership, and changes between collection dates.
We record the public source, collection date, provider identifiers where available, methodology, coverage, and confidence. These observations are estimates from incomplete public sources, not a verified employee directory or authoritative company headcount.
YouTube channel and video data.For a company with a verified public YouTube channel, Ponchos may use the YouTube Data API Services to retrieve the channel’s public subscriber count, total public view count, and public video count. Ponchos may also retrieve public upload identifiers, titles, thumbnails, publication dates, and view counts to display the channel’s three most-watched public videos. Ponchos does not use Google OAuth for this feature, access private channel or viewer data, or store creator names, comments, descriptions, or raw YouTube API responses. We use the numeric channel statistics to show dated history and simple Ponchos-calculated changes or growth percentages, and rank the saved public videos by view count; those calculated metrics and rankings are part of Ponchos, not metrics supplied by YouTube.
Where UK or European data-protection law applies, we process information as needed to provide the service you request and perform our agreement with you; for our legitimate interests in operating, securing, and improving Ponchos and researching factual company and professional information; with your consent for optional analytics, optional personalization, and optional opportunity matching; and as necessary to comply with law. You may withdraw consent at any time without affecting processing that occurred before the withdrawal. We balance legitimate interests against the rights of the people whose information we process.
We use service providers for the purposes described above:
We may also disclose information when required by law, to protect users or the service, or as part of a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate safeguards. Ponchos does not sell personal information or share it for cross-context behavioral advertising.
Job links take you to the employer’s site or applicant-tracking system. Ponchos does not process job applications, is not involved in hiring decisions, and is not responsible for third-party sites or listings after you leave Ponchos.
Ponchos uses cookies or similar storage to keep you signed in, remember necessary product state, and record your choices. Before sign-in, an explicit analytics choice is stored locally. If you allow analytics, Mixpanel loads its limited core client and stores an anonymous device identifier, but Ponchos does not send product events until your stable account identifier is established and your consent is synchronized. After sign-in, Ponchos stores each consent decision in an append-only account audit log and treats its latest entry as authoritative. Declining or withdrawing consent disables tracking and clears Mixpanel’s stored analytics identity.
Ponchos does not use advertising or cross-site tracking cookies. Because browser Do Not Track signals do not communicate the specific consent choices Ponchos offers, they do not change essential account storage or your saved analytics choice. Use the controls below to allow or decline optional analytics.
Bounded Attention events such as Watch and Unwatch transitions are retained for no more than 180 days under the current automated retention policy. Raw Career Profile lookup evidence expires after 24 hours and is removed by daily maintenance. Other account and activity information, including a Career Profile you choose to save, is generally retained while your account exists and as needed for the purposes described here, unless you request deletion or a longer period is required for security, dispute, accounting, or legal reasons. Provider delivery and diagnostic records are retained according to operational need and provider settings.
Public company and professional observations may be retained as historical records even when no user currently watches the company because longitudinal comparison is part of the product. We may correct, restrict, or remove a named-person observation when we learn it is inaccurate or receive a valid privacy request.
Public YouTube channel statistics are refreshed weekly. Unless YouTube approves Ponchos for extended statistical-data retention, each observation expires after 28 days and is removed by daily maintenance. If YouTube grants that approval, Ponchos may retain the numeric statistics and Ponchos-calculated historical changes for up to 36 calendar months. Saved video titles, thumbnails, publication dates, view counts, and rankings always expire after 28 days; Ponchos does not use a statistics-retention approval to retain that video metadata longer. You may request removal of stored YouTube channel or video data by contacting the address below.
Depending on where you live, you may have rights to request access, correction, deletion, restriction, objection, or portability of your personal information; to withdraw consent; and to appeal or complain to a data-protection authority. These rights may be subject to legal exceptions. Ponchos does not discriminate against people for exercising applicable privacy rights.
You can edit or delete your optional Career Profile from the Career Profile page. Ponchos does not yet provide one-click account deletion or a complete self-service export. To make a request, contact us at support@ponchos.io. We may need to verify your identity before completing it. A person whose public professional information appears in Ponchos may use the same address to request access, correction, objection, restriction, or deletion and should include enough detail for us to locate the record and source.
Ponchos operates from the United States and uses providers that may process information in the United States and other countries. Where required, we rely on recognized transfer mechanisms and contractual safeguards for transfers from the UK or European Economic Area. Contact us if you would like more information about the safeguards applicable to your information.
Ponchos uses authentication, access controls, provider security features, and operational safeguards appropriate to the current service. No storage or transmission method is completely secure, and we cannot guarantee absolute security.
We may update this policy as Ponchos changes. We will revise the date above and, when a change is material, provide additional notice appropriate to the change.
Contact Ponchos at support@ponchos.io. If UK data-protection law applies, you may also complain to the UK Information Commissioner’s Office; people elsewhere may contact their local privacy regulator.