Privacy Policy
Introduction
Sanctum ("we", "us", "our") provides career growth and LinkedIn management services to senior professionals. This policy explains what information we collect, how we use it, and the choices you have. By using our services, you agree to the practices described here.
What data we collect
We collect the information you provide directly, including your resume, career history, target roles, and briefing responses, and basic usage data from this website.
How we use your data
We use your information to deliver the services you've engaged us for: rewriting your resume, managing your LinkedIn presence, identifying opportunities, and reporting on results. We do not sell your data or share it with third parties for marketing purposes.
People we speak to on LinkedIn
If you reply to a message from our team on LinkedIn, or send us a service request there, we keep a record so we can answer you and follow up. It holds the details visible on your public LinkedIn profile (your name, job title, location, industry and profile link), your email address if you chose to share it with us, and our notes on the conversation. The record is used only to reply to you and is seen only by our own team. We keep it while the conversation is active, and it is deleted automatically if nothing in the record has changed for 90 days, unless you become a client. You can ask us to delete it, or to stop contacting you, at any time by emailing us.
We also keep a working list of senior professionals whose public professional details suggest our services could help them. We build it with business-data providers and tools that gather publicly available professional information, and from what they return we keep only a person's name, job title, company, location, industry and LinkedIn profile link. We use it to introduce ourselves on LinkedIn, and so that two people on our team do not contact the same person. We rely on our legitimate interest in telling professionals about a service that may benefit them. The list is seen only by our own team and is never sold or shared. Someone nobody on our team has contacted is removed after 180 days, and someone a team member has collected but who has not replied is removed after 90 days. If you reply, the record described above applies instead. If you would rather not hear from us, or want your details deleted, email us at any time and we will not contact you again.
Your LinkedIn account
We never log into your LinkedIn account, and we never ask for your LinkedIn password or session details, so we do not store them. Where a package includes LinkedIn posts or messages, we write them for you and you post and send them from your own account, so you stay in full control of it.
Data storage and security
Client data is stored on encrypted, access-controlled systems and retained only for as long as needed to deliver our services or as required by law. We apply industry-standard safeguards to protect against unauthorised access. Our team signs in with their Google account, and a single strictly necessary cookie keeps them signed in; it is not used for tracking.
Third-party services used
We use a limited number of trusted third-party services to run Sanctum: Vercel (website hosting), Supabase (our secure database), Google (sign-in for our team, and scheduling), PayPal (invoices and payments), and Resend (service emails), along with tools for analytics. Each is bound by its own data protection obligations, and we only share the minimum information required for them to function.
Your rights (GDPR / CCPA)
Depending on where you're based, you may have the right to access, correct, export, or delete your personal data, and to object to certain uses of it. To exercise any of these rights, contact us using the details below.
How to contact us
For any questions about this policy or how your data is handled, email us at hello@sanctumforprofessionals.com.