Privacy Policy — Equaly/xx.ai

Last updated: March 2026

The short version: Equaly/xx.ai never collects names, email addresses, or any personally identifiable information (PII). The salary data you contribute is anonymised and aggregated. You can request deletion of any submission at any time.

1. Who we are

Equaly/xx.ai is a compensation clarity platform providing EU salary benchmarking tools for HR professionals and individuals. For questions about this policy or your data, contact us at privacy@equalyxx.ai.

2. What data we collect

We collect only the minimum data required to provide our service:

Salary benchmark data — salary ranges, job title, ESCO occupation code, country, experience level, and company size band (e.g. 50–250 employees). No names, no email addresses, no individual identifiers.
Team upload data — when you upload a team salary file, we process the salary figures and job titles in it. We do not retain the raw uploaded file after processing. The results are stored transiently for your session only.
Community contributions — salary ranges submitted via the Contribute page are stored without any link to the submitter's identity.
Technical data — standard server logs (IP address, browser type, page visited, timestamp) retained for up to 30 days for security and debugging purposes.
Session data — an anonymous session identifier stored as a cookie so the application remembers your search context. No tracking or advertising cookies are used.

3. What we do not collect

Names, email addresses, or contact details (unless you email us directly)
Payment card details (handled entirely by Stripe — see Section 7)
Location data beyond country-level
Device fingerprints or cross-site tracking identifiers

4. How we use your data

To generate salary benchmarks and comparisons for you and other Equaly/xx.ai users
To improve the accuracy and coverage of our salary dataset
To operate and maintain the platform (security, debugging, uptime)
To comply with our legal obligations under EU law

We do not sell data to third parties. We do not use your data for advertising.

5. Legal basis for processing (GDPR Art. 6)

Legitimate interests (Art. 6(1)(f)) — operating the platform, improving salary benchmarks, and maintaining security.
Consent (Art. 6(1)(a)) — when you submit a community salary contribution, you explicitly consent to that data being used to improve Equaly/xx.ai's benchmarks.
Contract performance (Art. 6(1)(b)) — processing necessary to deliver a premium report you have purchased.

6. Data retention

Uploaded team salary files: deleted immediately after processing (not stored)
Aggregated upload results: retained for 90 days, then permanently deleted
Community salary contributions: retained indefinitely in anonymised, aggregated form
Server access logs: 30 days
Premium report records: 7 years (financial record-keeping obligation)

7. Third-party processors

Stripe — payment processing for premium reports. Stripe is the data controller for payment card information. See Stripe's Privacy Policy.
Replit — infrastructure and hosting provider. Data is stored in EU-region servers.
Plausible Analytics — privacy-friendly, cookieless analytics. No personal data is shared. See Plausible's Privacy Policy.

8. Your rights under GDPR

As a data subject in the EU/EEA, you have the following rights:

Right to access — request a copy of any personal data we hold about you
Right to erasure — request deletion of your data
Right to rectification — request correction of inaccurate data
Right to object — object to processing based on legitimate interests
Right to portability — receive your data in a structured, machine-readable format
Right to lodge a complaint — with your national data protection authority (e.g. AP in the Netherlands, BfDI in Germany)

To exercise any of these rights, email privacy@equalyxx.ai. We will respond within 30 days.

9. Cookies

Equaly/xx.ai uses only one cookie: a session cookie (session) that is strictly necessary for the application to function. It expires when you close your browser. No tracking, advertising, or analytics cookies are set. Plausible Analytics (our analytics provider) operates without cookies.

10. Data security

All data is transmitted over HTTPS (TLS 1.2+). Database access is restricted to application-level credentials. No salary data is stored alongside any identity information.

11. Changes to this policy

We may update this policy as the platform evolves. Material changes will be noted at the top of this page. Continued use of Equaly/xx.ai after a policy change constitutes acceptance of the updated policy.

12. Contact

For any privacy-related questions or to exercise your rights:
privacy@equalyxx.ai