This policy covers health information about you that some US state laws protect, such as Washington’s My Health My Data Act and Nevada’s consumer health data law. It sits alongside our terms and privacy policy.
What we collect
Only one thing: your disability status, if you choose to save it. Many job applications ask it as a voluntary self-identification question, with answers like “Yes, I have a disability”, “No” or “Decline to self-identify”. We never work it out from anything else.
We keep it with your other demographic answers (gender, race or ethnicity, veteran status), and treat all of them the same way.
Where it comes from
Only from you: when you pick an answer on your profile page, or tap one in our Chrome extension and then say yes to saving it, or confirm the answers you gave on an application form when the extension asks. Nothing is saved before you say yes.
Why we collect it, and how we use it
Only to fill in that question on the job applications you fill in, so you don’t answer it again each time. You see every value before anything is filled, and you can untick it.
We never:
- sell it, or swap it for anything of value;
- use it for analytics, advertising or matching you to jobs;
- put it in any data product we sell, or anything we share with buyers;
- show it to an AI model, including the assistant and the drafting tools.
Who it goes to
- The employers whose application forms you fill in, when you choose to fill that question. From there it is covered by the employer’s own privacy terms.
- Supabase, which stores our database, and Vercel, which runs our website. Both handle it only for us and may not use it for anything else.
No one else. We have no affiliates it goes to.
Your rights
You can, at any time:
- see the answers we hold, on your profile;
- delete them with “Delete my demographic answers” on your profile, which removes them straight away;
- withdraw your yes: deleting them does that, and the extension asks again before saving any new ones;
- ask for a copy, ask who it was shared with, or ask us to delete it, by writing to privacy@waitwhatdoyoudo.com.
We answer within 45 days. If we turn a request down, you can appeal by replying to our answer, and we will tell you the result within 45 days of your appeal. If you are not happy with that, you can contact your state attorney general (in Washington, the Washington State Attorney General’s Office).