Privacy Policy

1. Introduction

Baltu Technologies Inc. ("Baltu," "we," "our," or "us") operates the Baltu platform at baltu.app: the learner experience, the employer portal, the portal used by community partners and other group leaders, the tools used by content creators, and the public website and its forms (together, the "Service"). This Privacy Policy explains what information we collect through the Service, how we use and share it, and the choices you have.

By using the Service, you agree to the practices described here. If you use the Service through an employer, school, or program partner, that organization may also have its own policies that apply to you.

2. Information We Collect

2.1 Account information

When you create a learner account we collect your name, email address, and a password, which we store only in hashed form. If you sign in with Google or Microsoft, we receive your name, email address, and profile picture as permitted by that account. Employer portal users sign in through Auth0, which handles their credentials; we receive their name, email address, and organization membership.

2.2 Profile information you provide

Your profile is optional beyond your name and email. Depending on what you choose to add, it can include:

• Preferred name, headline, bio, personal story, profile photo, and introduction video
• Phone number, city, state, country, ZIP code, and time zone
• Languages spoken, work authorization status, and whether you would need sponsorship
• LinkedIn, GitHub, and portfolio links
• Education, including GPA and honors if you enter them
• Work history, including responsibilities, accomplishments, and supervisor details if you enter them
• Skills, certifications, micro-credentials, self-assessed skill ratings and the evidence you link to them
• Projects, and whether you choose to share each one with employers
• References, including the contact details you enter for them and whether they may be contacted
• Job preferences such as target roles, industries of interest, employment type, work mode, availability, relocation preferences, and salary expectations
• Employers you favorite and interests you select
• A resume, if you upload one so we can pre-fill your profile

2.3 Learning activity

• Course and pathway enrollments, progress through lessons, slides, and activities, and completion records
• Quiz and assessment attempts, including the answers you give, scores, and time taken
• Reflection responses, comments, and questions you post on courses or pathways
• Notes and study-list entries you write, including any lesson text you highlight
• Points, levels, streaks, badges, certificates, and rewards you earn, and referral activity
• Learning analytics we derive from the above, such as first-attempt pass rates, completion rates, engagement, and how those compare with other learners

2.4 Recordings and files you submit

Some activities ask you to record yourself or upload files. These can include audio or video responses to assessment and interview questions, screen and webcam recordings of practice presentations, microphone input in 3D and virtual-reality tours, and documents you upload. We may transcribe recordings so they can be reviewed and scored.

2.5 Conversations with Ask Baltu

Ask Baltu is the in-lesson tutor. Your messages are used to answer you and are checked for misuse. We do not store your conversations; they exist only in your browser during the lesson. See Section 4 for how the tutor uses your profile.

2.6 Feedback you send from within the platform

The in-app feedback tool sends us your message and, if you attach one, a screenshot, along with the page you were on, your browser, operating system, and screen size, and technical diagnostics such as recent console errors and failed network requests. These go to our internal tracking system so we can reproduce the problem.

2.7 Website forms

The contact, employer, community partner, and content creator forms on our website collect the details you enter, such as your name, email, organization, role, phone, and message, together with your marketing preference, the page you submitted from, and the referring site or campaign.

2.8 Information collected automatically

• Your IP address, browser, and device type
• Sign-in times, session length, and the pages and courses you are viewing
• Security and rate-limiting events such as repeated failed sign-ins
• Delivery status of emails we send you, including bounces and spam complaints

2.9 What we do not collect

We do not ask learners for their date of birth, government identification numbers, payment card details, or demographic information such as race, ethnicity, disability, or veteran status. If a partner organization records that kind of information about its participants, it does so under its own policies.

3. How We Use Your Information

We use your information to:

• Provide the Service, including courses, pathways, assessments, and certificates
• Personalize your experience, including Ask Baltu and course recommendations
• Track your progress and award points, badges, and certificates
• Score assessments and give feedback, sometimes with the help of AI (see Section 4)
• Match you with employer pathways and job opportunities, and share your profile when you choose to connect
• Let group leaders at partner organizations support your learning
• Send account emails, learning reminders, digests, and job alerts you have not opted out of
• Detect and prevent abuse, fraud, and misuse of AI features
• Understand how the Service is used and improve it
• Respond to your requests and comply with legal obligations

4. AI Features

Parts of the Service are powered by artificial intelligence. We use AI to generate and review course content, answer your questions through Ask Baltu, transcribe recordings, score open-ended and recorded responses, parse uploaded resumes, and check messages for misuse. To do this we send the relevant content to AI providers, currently OpenAI and Google, over their business APIs. Content creators can also run research queries through Perplexity; those queries describe course topics, not learners.

4.1 Ask Baltu

When you use Ask Baltu, the lesson text and your messages are sent to the AI provider to generate a reply. We ask the provider not to retain the conversation, and we do not store it ourselves. If you are enrolled in the course, the tutor also receives a short, filtered summary of your profile so it can tailor its answers: your first name, current role and industry, a handful of your skills, target roles, and industries of interest, and the titles of courses you are taking with a coarse status. It never receives your contact details, location, salary expectations, work authorization, scores, or free-text fields. You can turn this personalization off in Settings.

4.2 Moderation

Messages you type into AI features are screened, including with an automated moderation service, before they are answered. Attempts to misuse these features are logged against your account and may lead to restricted access.

4.3 Training

We do not use your personal information to train AI models. We access our AI providers through their business APIs, which under their published terms do not use the data we send to train their models, and we do not opt in to any provider program that would.

5. How We Share Information

We do not sell, rent, or trade your personal information. We share it only as follows:

• With employers: when you take an action described in Section 6
• With group leaders: when you join a learning group, as described in Section 7
• With your consent: whenever you explicitly ask us to
• With service providers that process data on our behalf and only for that purpose. Today these are Amazon Web Services (hosting, storage, media processing, and analytics infrastructure), Auth0 (employer portal sign-in), Resend (email delivery), Upstash (caching and rate limiting), OpenAI and Google (AI features and speech services), Perplexity (content research for creators), Notion (website form submissions and in-app feedback), and Slack (internal alerts to our team)
• For legal reasons: when required by law, legal process, or to protect the rights and safety of Baltu, our users, or the public
• In a business transfer: if Baltu is involved in a merger, acquisition, or sale of assets, in which case this policy will continue to apply

We do not use third-party advertising networks or third-party analytics services on the Service. Search features in the content creator tools query Unsplash, GIPHY, YouTube, and Google Image Search with the creator's search terms only.

6. Sharing Data with Employers

6.1 When sharing occurs

Employers see your profile only after you take one of these actions:

• You commit to an employer-sponsored pathway and choose to connect with that employer
• You apply for a job opportunity through the Service
• You accept an invitation from an employer to join the Service

Some employers with an expanded-visibility arrangement can view the profiles of candidates in their hiring pipeline before a connection is made. Even then, your email address and phone number are withheld until you connect. You can turn off employer connections entirely in Settings, and you can withdraw from a pathway at any time.

6.2 What employers can see

• Your name, headline, location, work authorization status, languages, and introduction video
• Work history, education, certifications, and formal skills
• Self-assessed skills you have marked public, and projects you have marked as shared with employers
• References you have added
• Career preferences, excluding salary expectations
• Learning performance for the relevant pathway: progress, completion, quiz mastery, and derived metrics such as first-attempt pass rate, completion rate, and engagement, including how those compare with other learners
• Your email address and phone number, once you have connected

6.3 What employers never see

• Salary expectations and compensation preferences
• Self-assessed skills you keep private and projects you have not shared
• Your notes, study list, or Ask Baltu conversations
• Activity in courses unrelated to that employer

6.4 Employer assessments

If an employer invites you to complete a talent assessment, your answers, any video or audio you record, and their transcriptions are stored with that employer's assessment, along with the IP address and browser used to complete it. Responses may be scored by AI and by the employer's reviewers. The employer's own notes, ratings, interview evaluations, and hiring decisions about you are the employer's records.

6.5 Your control

You can preview what employers see from the employer view of your profile, edit or remove profile information at any time, choose which projects and self-assessed skills are shared, opt out of employer connections in Settings, and withdraw from a pathway. Withdrawing does not remove records the employer already holds.

7. Sharing Data with Group Leaders

Schools, nonprofits, workforce programs, and other community partners run learning groups on the Service. The people who lead those groups, along with administrators and authorized instructors of the same partner organization, are "Group Leaders."

7.1 What group leaders can see

When you join a learning group, whether by invitation, join code, or enrollment by the partner, Group Leaders for that group can see:

• Your name and email address
• When you joined and your membership status
• Progress, time spent, quiz attempts, and scores for courses assigned in the group
• Your professional profile as an employer would see it: headline, work history, education, certifications, public self-assessed skills, projects you have shared with employers, references, and career preferences excluding salary

Group Leaders do not see your phone number through your profile, your salary expectations, private skills or unshared projects, your notes or study list, or your activity in courses outside the group.

7.2 Leaving a group

You may leave a group at any time. After you leave, Group Leaders no longer receive updates about you, but the partner keeps the historical record of your participation and progress during your membership, which they may need for their own reporting.

8. Data Security

We protect your information with encryption in transit and at rest, access controls and authentication, tenant isolation for employer data, rate limiting, and monitoring for suspicious activity. We host the Service on Amazon Web Services in the United States. No system is perfectly secure, so we cannot guarantee absolute security, but we will notify you as required by law if a breach affects your information.

9. Data Retention

We keep your information for as long as your account is active and as needed to provide the Service. Some records have shorter lifetimes:

• Accounts that are never verified are removed after 30 days
• Email delivery events are removed after 90 days; bounce and complaint records after about 13 months
• Security events are removed after 90 days

9.1 When you delete your account

You can delete your account from Settings. Deletion immediately disables sign-in, unlinks connected Google or Microsoft accounts, and removes your name, contact details, photo, video, location, and the detailed sections of your profile, including education, work history, projects, skills, references, and job preferences.

Learning records such as enrollments, progress, quiz attempts, notes, and earned certificates are kept in a form that is no longer connected to your name or contact details. Records held by employers you connected with, including assessment responses, and files you uploaded may also be retained. If you want those removed as well, email us at legal@baltu.app and we will process the request, subject to legal and contractual obligations.

10. Your Choices and Rights

• Access and correct: view and edit your profile at any time in the Service
• Delete: delete your account from Settings, or ask us to remove additional records
• Copy of your data: email us and we will provide a copy of the personal information we hold about you
• Employer connections: opt out of being connected with employers in Settings
• Ask Baltu personalization: turn off profile-based personalization in Settings
• Job alerts and digests: turn off job alert emails in Settings; account and security emails cannot be turned off while your account is open
• Marketing: if you asked to hear from us through a website form, email us to withdraw that consent
• Preview: see what employers see from the employer view of your profile

To exercise any of these rights, or if you have a question about them, contact us at legal@baltu.app. Depending on where you live you may have additional rights under local law, and we will honor them.

11. Cookies and Similar Technologies

We use cookies that are necessary to run the Service: a session cookie that keeps you signed in across baltu.app and employer subdomains, Auth0 session cookies for the employer portal, and short-lived cookies that return you to the right page after signing in. We also store preferences such as your theme and dismissed tips in your browser's local storage. We do not use advertising cookies, tracking pixels, or third-party analytics. You can clear or block cookies in your browser, but the Service will not work without the session cookie.

12. Children and Students

You must be at least 13 years old to create an account on your own. Learners between 13 and 18 may use the Service with the consent of a parent or legal guardian, or through a school or program partner that has obtained the consents required by law.

Learners under 13 may use the Service only when a school or program partner enrolls them and has obtained verifiable parental consent, or is authorized to consent on a parent's behalf for educational purposes. We will delete a child's information at the request of a parent, guardian, or the enrolling partner. If you believe a child under 13 has created an account outside of a partner program, contact us at legal@baltu.app and we will remove it.

13. International Users

We operate from the United States and process information there. If you use the Service from another country, you understand that your information will be transferred to and stored in the United States, where privacy laws may differ from those where you live.

14. Changes to This Policy

We may update this policy as the Service changes. We will post the new version here and update the "Last updated" date. For material changes we will also notify you by email or within the Service before they take effect.

15. Contact Us

Questions about this document, or requests to exercise your rights, go to: