Privacy Policy

Last updated April 21, 2026

1. Introduction

WesWorks, LLC, doing business as Onward, Inc. ("Onward," "we," "us," or "our") is a company registered in New York, United States at 418 Broadway, STE N, Albany, NY 12207. We operate the website leaponward.com and the Onward career transition platform (the "Service").

This Privacy Policy explains what personal information we collect, how we use and share it, and the choices you have regarding your information when you use our Service. By using Onward, you agree to the practices described in this policy.

If you have questions or concerns, please contact us at privacy@leaponward.com.

2. Information We Collect

Account Information

When you create an account, we collect your email address, full name, and profile photo. If you sign in with Google, we receive this information directly from Google with your permission.

Career Data

The core of our Service is helping you navigate your career. To do this, we collect and process:

  • Resume and LinkedIn PDF files you upload — stored securely and used to extract your professional history
  • Parsed career information extracted from those files: work history, job titles, employers, dates of employment, accomplishments, education, certifications, skills, and LinkedIn profile URL
  • Job search preferences you provide: target roles, locations, salary expectations, and remote work preference

Usage and Activity Data

As you use the Service, we store records of your activity, including:

  • Jobs you have viewed, saved, applied to, or dismissed
  • AI-generated outreach messages drafted on your behalf
  • Your job application history and private notes about applications
  • Generated resume versions, scores, and improvement recommendations
  • Interview practice sessions, questions asked, and your answers (typed or transcribed from voice)
  • AI-generated feedback on your interview performance

Payment Information

Payments are processed by Stripe. We never store your credit card number, CVV, or full payment details. We do store your Stripe customer ID and subscription status so we can manage your account.

Automatically Collected Information

When you use the Service, we automatically collect certain technical information, including your IP address, browser type, operating system, and pages visited. We use Sentry for error tracking, PostHog for product analytics/session behavior, and Langfuse for AI observability metadata to diagnose reliability and cost issues.

3. How We Use Your Information

We use the information we collect to:

  • Provide and personalize the Service — match you to relevant jobs, generate tailored resumes, coach you through interview practice, and draft outreach messages using your career background
  • Process payments — manage your subscription, handle billing events, and send receipts
  • Send transactional emails — deliver seat invitations, account notifications, and other service-related communications
  • Monitor reliability and fix errors — use Sentry error data to identify and resolve bugs and performance issues
  • Respond to your requests — answer support questions, process data access or deletion requests, and communicate about your account

We do not use your information to train AI models. We do not use your data for advertising or sell it to data brokers.

4. How We Share Your Information

We do not sell your personal information. We share data only with the service providers necessary to operate Onward, under contractual obligations to protect it.

ServicePurposeData Shared
AnthropicAI feature processingResume text, career history, job descriptions, interview questions and answers, outreach context. Used only to generate responses; Anthropic's API terms prohibit using API inputs for model training.

Data Processing Relationship. For the purpose of delivering AI-powered features, Onward acts as the data controller and Anthropic acts as a data processor. Anthropic processes your career data (including resume content, job preferences, and interview responses) solely to provide the Services to you under the terms of Anthropic's API agreement. Anthropic's API terms prohibit using API inputs to train future AI models. Anthropic may retain API inputs for up to 30 days for safety monitoring purposes. Requests to delete data held by Anthropic should be directed to privacy@leaponward.com and we will coordinate with Anthropic on your behalf.
StripePayment processingEmail address, name, subscription details. Card data is handled directly by Stripe and never passes through our servers.
ResendTransactional emailEmail address, name (for invitation and notification emails).
SentryError trackingError context (which may include user ID), session replays for debugging. Session replays are captured only when errors occur.
LangfuseAI observabilityMetadata about AI calls (trace IDs, model name, token counts, latency, and cost estimates). Prompt and response bodies are excluded by default.
PostHogProduct analyticsProduct usage events, page interactions, and session telemetry with privacy masking enabled.
RapidAPI / JSearchJob searchJob title search queries and location preferences. No account identifier or personal information is transmitted.

We may also disclose information if required to do so by law, legal process, or governmental authority, or to protect the rights, property, or safety of Onward, our users, or others.

5. Data Retention

We retain your personal information for as long as your account is active. We do not automatically delete inactive accounts or career data on a fixed schedule.

When you delete your account, we permanently delete your profile, career data, job activity, resumes, interview records, and uploaded files. Some information may remain in backup systems for a short period before being purged. Information held by third-party processors (such as Stripe's payment records) is subject to their own retention policies.

You can request deletion of your account and data at any time by emailing privacy@leaponward.com.

Third-Party Data Retention. When you delete your account, Onward permanently deletes all data on its own servers, with backup copies purged within 30 days. However, third-party processors may retain data independently for limited periods: (a) Anthropic may retain API inputs for up to 30 days for safety monitoring; (b) Stripe retains payment records pursuant to its own data retention policy and applicable financial regulations; (c) Resend retains email delivery logs for a limited period. To request coordinated deletion from all processors, contact privacy@leaponward.com with your account email and we will coordinate on your behalf.

6. Your Privacy Rights

You have the following rights with respect to your personal information:

  • Access — Request a copy of the personal data we hold about you. You can download your data from your account settings or by emailing us.
  • Correction — Ask us to correct inaccurate information. Most career data can be updated directly within the Service.
  • Deletion — Request that we delete your account and associated data. See Section 5 for details.
  • Portability — Request your data in a structured, machine-readable format.

California Residents (CCPA)

We do not sell your personal information to third parties, as defined under the California Consumer Privacy Act (CCPA). You have the right to request disclosure of the categories of personal information we have collected about you and the purposes for which it is used. To exercise any of these rights, contact us at privacy@leaponward.com.

CCPA — “Sale” of Personal Information.For purposes of the California Consumer Privacy Act, the sharing of your career data with Anthropic for AI feature processing does not constitute a “sale” of personal information, as Anthropic processes this data solely to deliver the Services to you on our behalf, not for Anthropic's independent commercial purposes. We do not sell your personal information to third parties.

Your CCPA rights include: the right to know what personal information we collect; the right to delete your personal information; the right to opt out of any sale of personal information (we do not sell); and the right to non-discrimination for exercising these rights. To exercise your CCPA rights, contact privacy@leaponward.com. We will respond within 45 days.

GDPR — International Data Transfers

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, your personal information is transferred to and processed in the United States. We rely on the following legal bases for processing: contractual necessity (to provide the Services you have contracted for), legitimate interests (to improve and secure the Services), and consent (for marketing communications). Standard Contractual Clauses (SCCs) are available upon request at privacy@leaponward.com. Your GDPR rights include: the right to access your personal data; the right to rectification; the right to erasure (“right to be forgotten”); the right to restrict processing; the right to data portability; and the right to object to processing. To exercise these rights, contact privacy@leaponward.com.

To exercise any privacy right, email privacy@leaponward.com. We will respond within 30 days.

7. Cookies and Tracking

We use a minimal set of cookies:

  • Authentication cookies — Set by Supabase to keep you signed in. These are strictly necessary and cannot be disabled without breaking the Service.
  • Error tracking cookies — Set by Sentry to associate error reports and session replays with a browser session. These are used solely for debugging and reliability monitoring.
  • Product analytics cookies — Set by PostHog to measure feature usage and conversion flow. We use this data for product analytics, not for advertising.

We do not use advertising cookies, cross-site tracking pixels, or analytics data for ad targeting.

8. Children's Privacy

The Service is intended for adults and is not directed to children under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected information from a minor, please contact us at privacy@leaponward.com and we will promptly delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a prominent notice within the Service before the change takes effect. The "Last updated" date at the top of this page reflects the most recent revision.

Your continued use of the Service after a change becomes effective constitutes your acceptance of the revised policy.

10. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

WesWorks, LLC d/b/a Onward, Inc.
418 Broadway, STE N
Albany, NY 12207
privacy@leaponward.com