Privacy Notice — Metanoia Labs

01

Who we are

Metanoia Labs (“Metanoia”, “we”) operates metanoialabs.net, a career-preparation platform. We are the controller of the personal data described in this notice. Contact: hello@metanoialabs.net. Our registered legal entity and address will be published here upon incorporation counsel review.

02

What we collect, and why

DataPurposeLawful basis

Account: name, email, password hash Creating and securing your account Contract performance

Assessment: responses, scores, five dimension values Producing your Career Map and readiness score Contract performance

Career profile: target role, industry, education, graduation year Personalising your route and content Contract performance

Usage: modules accessed, progress, session timestamps Tracking your progress in The Compass Contract performance

Marketing email address Career insights and product updates Consent — optional, withdrawable any time

Technical: IP address, user agent, device class Security, abuse prevention, performance Legitimate operation of the service

Today, in this pre-alpha, most product data (Compass tracker, progress, assessment results) is stored in your own browser’s local storage on your device — we do not receive it on our servers unless you create an account or ask us to email you a report.

03

How long we keep it

Account and profile data: for the life of your account, deleted within 7 days of account deletion.
Assessment history: for the life of your account, so you can see your own trajectory.
Marketing consent records: for as long as required to evidence consent.
Local-storage data: on your device, under your control, until you clear it.

04

Who we share it with

We never sell your data. We never provide individual scores to employers — aggregate, anonymised insight only. Our current processors: GitHub Pages (site hosting, USA). As we add processors — authentication, email delivery, payments — each will be named here with its jurisdiction before it touches user data. If any processor stores data outside Indonesia, we will state it here together with the safeguard applied.

05

Your rights

Access, correct, export, or delete your data — from Settings → Privacy & Data, or by emailing hello@metanoialabs.net.
Withdraw marketing consent at any time — every email carries an unsubscribe link.
Object to processing, and complain — first to us, then to the Indonesian data-protection supervisory authority.

06

Breach notification

If a breach affects your personal data, we will notify you and the supervisory authority within the statutory window required by Indonesian law (UU 27/2022), and we will say plainly what happened, what was affected, and what we are doing about it.

07

Children

Metanoia is intended for users aged 17 and above. We do not knowingly collect data from anyone younger; if you believe we have, contact us and we will delete it.

08

Changes

When this notice materially changes, we will version it, date it, and ask for your consent again where the law requires it. We will not quietly swap the terms underneath you.

Compliance status, stated honestly: we are building Metanoia to comply with Indonesia’s Personal Data Protection Law (UU 27/2022). This notice explains what we collect, why, and how to exercise your rights.