Your data and your rights

What we hold, what you can do about it, and how to leave.

What we hold

• Account details: the email address or phone number you signed up with. Your password is handled by our identity provider and is never stored by us in a recoverable form.
• Identity details: your name, contact details, LinkedIn profile, employment history and original resume file. Encrypted, sealed, and excluded from recruiter search.
• Profile details: location, work authorisation, experience, job status, expectations, target roles, your profile summary, and the professional detail you add for recruiters.
• Activity: connection requests and their outcomes, and the messages sent through a connection.
• Community content: your posts and comments, the photos on them, your reactions and who you follow — under your posting alias, or under your real name where you chose that.
• Invitations: the email addresses you entered to invite someone, and whether they joined.
• Challenge play: your daily scores and leaderboard position, recorded against your posting alias.

What you can do

• See and edit everything on your profile at any time.
• Rewrite or delete the AI-generated summary, or write your own instead.
• Replace your resume whenever it changes. One resume is the limit, so a new upload takes the place of the old one.
• Choose, per connection, which identity fields to release — and withdraw them afterwards.
• Delete a post or a comment you wrote.
• Reset your password from Settings.
• Withdraw your candidature entirely — this removes your profile, your resume and the sealed record of your identity. Your sign-in survives, so you can start again later.

Deleting your candidature

The Delete candidature control is on your Settings page, under Account and security. It asks you to type your handle to confirm, because it cannot be undone. Deletion removes your profile record, your resume file and the sealed record of your name and contact details, and takes you out of recruiter search immediately.

Two things it cannot reach. Details you already released to a recruiter may have been read, and deletion does not un-read them. Posts and comments you published under your alias stay in the feed, because they were never joined to the profile being deleted; delete the ones you want removed before you withdraw.

Some records are kept briefly after deletion where we are required to keep them — for example, security logs used to investigate abuse. These do not contain your resume.

Closing your account

Deleting your candidature leaves your sign-in in place. To remove the sign-in as well, write to privacy@incognitoh.com from the address on the account and we will close it. There is no self-serve control for this yet, and we would rather say so than point you at a button that is not there.

Depending on where you live

You may have additional rights over your personal data, including access, correction, portability, restriction, and objection. Contact us and we will action them. We will not treat you differently for exercising a right you have.