What we hold, and what we don't.

We reduce what we hold rather than add locks to what we hold.
A control you have to defend is weaker than a data category you never collected.

01What this page collects today

Right now, Farr is a waitlist. If you join it, we collect exactly three things, and only because you typed them in and ticked the box:

First name — so our emails address you properly
Last name — optional; you can join without it
Email address — so we can tell you when Film Room opens

Our legal basis is your consent, given by the checkbox on the sign-up form. Consent is unticked by default, and joining is the only way onto this list — we do not buy, scrape, or import addresses.

We use your address for one purpose: telling you about Farr and letting you know when the product is live. Every message has an unsubscribe link, and unsubscribing takes effect immediately.

02Who else touches it

Your details are stored in our database and sent to Resend, the service that delivers our email. They process it on our instructions and for no other purpose. We do not sell your data, and we do not share it with advertisers. If we ever add another processor, we will list it here.

03The wall between your identity and your score

When the product launches, Farr will hold two kinds of data. They live in separate systems with no path between them — and that is structural, not a policy we promise to follow.

Marketing Waitlist

Who is interested in Farr

Name and email address
Collected only with explicit opt-in
Unsubscribe in every message; deletion on request
Stored separately from anything the score is computed from
Used for one purpose: telling people the product is live

Career Data

What the score is computed from

A random user id — no name, no email, no address
Score history and structured career features
Redacted resume text, deleted after 30 days
Reachable only by the person it belongs to

Your name can never be attached to your score — because there is no shared identifier between the two tables.

04How your resume will be handled

This section describes the product we are building. It does not apply yet, because there is nothing to upload on this site today — we are publishing it now so you know what you are joining.

resume files kept at rest

30d

maximum text retention

identifiers linking you to your score

A resume is the digital record of a career — early on, it is the entire record. So: direct identifiers are stripped before anything is written, the file itself is never stored, and the redacted text expires on a 30-day clock. You give us your resume voluntarily, the same way you would attach it to any application, and you can delete your account whenever you want.

05Your rights

Wherever you live, you can ask us to show you what we hold, correct it, delete it, or stop emailing you. Email info@gofarr.ai and we will action it. You can withdraw consent at any time — unsubscribing does exactly that.

If you are in the UK or EU, you also have the right to complain to your local data protection authority.

06Where your data lives

Farr, LLC is based in the United States, and your information is stored and processed there. If you are outside the US, joining the waitlist means your data is transferred to the US.

07Cookies and tracking

This site stores your sign-up confirmation in your own browser so the form remembers you on your next visit. That stays on your device. If we add analytics or advertising tags, we will update this page and ask for consent where the law requires it.

08What we have committed to

These are commitments with dates attached, not claims about today. Before any paid deployment we will complete SOC 2 Type II, a third-party penetration test, and a published VPAT against WCAG 2.1 AA. We keep our subprocessor list published and review it annually.

09Contact and changes

Questions, requests, or complaints: info@gofarr.ai, or write to Farr, LLC, [MAILING ADDRESS].

If this policy changes we will update the effective date above, and if the change is significant we will tell the people on our list by email.

Before you publish: fill in the effective date and mailing address (a mailing address is also required by CAN-SPAM in every marketing email), and have this reviewed by counsel. If you install the LinkedIn Insight Tag or a Meta pixel, section 07 must be rewritten and you will need a cookie consent banner for EU and UK visitors.