Privacy Policy

Last updated: October 10, 2026

BeamMe is a record of how you actually work, built from your own evidence in your own words. The whole point of the product is that what you put in is yours. This page describes — in plain language — what we collect, what we do with it, and what rights you have to take it back or delete it at any time.

Who we are

BeamMe is operated by BeamMe LLC, a limited liability company established in the State of Maryland, United States. You can reach us at hello@beamme.co for any privacy question, request, or complaint. We aim to respond within five business days.

What we collect

We collect only what we need to give you the service you signed up for:

  • Account information: your email address, your name, and (if you sign in with Google) your Google profile picture.
  • If you request an invite: your email address and your answers to the questions on the request form. We use them to decide who to invite and to follow up with you.
  • Content you give us: the experiences you log (text or voice), your CV if you upload one, and any edits or revisions you make. This is the heart of what BeamMe holds about you.
  • Voice transcripts: when you log an experience by voice, your audio is transcribed to text. We keep the transcript; we do not retain the audio file after transcription.
  • AI-derived content: the synthesis, patterns, Work Signature, posts, briefs, and resumes that BeamMe generates from what you've given us. These are derived from your evidence — never invented out of thin air.
  • Basic usage telemetry: when an edge function fails, when a save doesn't land, when a session expires, and how much AI processing each request used — counts only, never what you wrote. We use this to fix bugs, improve the product, and understand what it costs to run.
  • Rate-limiting counters: to stop automated abuse of the endpoints that are open to the public, we record an IP address or an account identifier with a timestamp when those endpoints are called. These carry none of your content and are discarded on a rolling basis.
  • Invitation opens: when someone opens an invitation link we sent them, we record which invitation it was and when — nothing else. It tells us whether our invitations are reaching people at all, which we otherwise have no way to know. There is no tracking pixel and no third party involved, and we delete these records a month after the invitation itself expires.
  • We do not track you across the web, and we do not use third-party analytics or advertising trackers.

How we use it

We use what you give us to:

  • Provide the service — synthesize patterns, generate your Work Signature, build the deployable artifacts (posts, briefs, resumes) you ask for.
  • Fix problems — investigate failures, recover lost data when we can, respond to your support requests.
  • Communicate with you — send the welcome email, transactional emails, occasional product updates from Flavia. You can opt out of product updates anytime.

We do not sell your data. We do not share your content with third parties for marketing. We do not train external AI models on your content. Your deposits are not used as training data by anyone, including by us.

Who we share data with

To run BeamMe we use a small number of trusted infrastructure providers, who process your data on our behalf under their own contracts and security standards:

  • Lovable Cloud (Supabase) — hosts the database, authentication, and edge functions where your content lives.
  • Anthropic — provides the Claude AI models that read your content to produce synthesis, patterns, and deployable artifacts. Anthropic's commercial API terms prohibit training on customer inputs; BeamMe does not opt into any training-on-content option.
  • OpenAI — provides Whisper, which transcribes voice recordings to text. Audio is sent in-memory at the moment of transcription and is not persisted by BeamMe or stored by OpenAI under their API terms.
  • Lovable — delivers transactional and product emails on our behalf through its managed email service. Receives only the email addresses and message contents needed to deliver each message.
  • Google — if you sign in with Google, Google handles the sign-in step itself. We don't share content with Google.

We do not share your data with anyone else without telling you first.

If BeamMe is ever acquired

Your record is not an asset that changes hands to be used differently. Any company that acquired BeamMe would be bound by this policy as written. If they ever wanted to change it, we would email you before anything took effect — with enough notice to export everything and delete your account first.

That is what we mean when we say the record is yours. It is a constraint we accept on what BeamMe can become, not a description of what we happen to do today.

Where your data lives

Your data is stored on Supabase infrastructure via Lovable Cloud. Today this means a single primary region with daily backups; we are working on documenting the exact posture and improving it over time. We will update this page when material details change. If you need a current snapshot of our backup posture for your own compliance review, email hello@beamme.co.

How long we keep it

We keep your data for as long as you have an account with us. When you delete content from within the product, the deletion is immediate. Two operational records outlive it, and neither holds any content of yours: a failure log — which function failed, when, and why — kept so problems stay diagnosable after an account is gone, and the short-lived rate-limiting counters described above. (Standard infrastructure backup cycles outside our direct control may retain a copy for a short period; see "Where your data lives" below.) If you want your account login removed in addition to your content, email hello@beamme.co and we'll handle it within 48 hours.

Your rights

You can, at any time:

  • Export everything you've given us as a JSON file.
  • Delete specific logged moments, specific patterns, or all your content. Removing your account login itself is handled by emailing us — see "How long we keep it" above.
  • Correct or edit anything we hold about you.
  • Withdraw consent for product communications.
  • Ask us what we hold about you and why.

If you live somewhere with stronger statutory rights (GDPR, CCPA, LGPD), those rights apply on top of the ones described here. Email hello@beamme.co to exercise any of them — we will not make you fill out a form.

How AI processing works

When you log an experience or upload a CV, the text you provide is sent to Anthropic's Claude models (and OpenAI's Whisper for voice transcription) so they can produce a reading of it. These providers process the content under their standard API terms, which prohibit training on customer inputs by default. We do not opt in to any training-on-content option offered by any provider.

The output of those AI calls — synthesis, patterns, Work Signature, posts — is stored alongside your original content in your account. You can edit, revise, or delete any of it.

Children

BeamMe is built for working professionals. We do not knowingly collect data from anyone under 18. If you believe a child has signed up, please email hello@beamme.co and we will delete the account.

Changes to this policy

We will update this page when material things change about what we collect, how we use it, or who processes it. For meaningful changes we will also email you. The "Last updated" date at the top will always reflect the most recent revision.

October 7, 2026: Disclosed that we record how much AI processing each request uses — counts only, never what you wrote — and that these records are deleted with your account.

October 7, 2026: Disclosed what we keep when you request an invite — your email address and your answers to the request form's questions — and what we use them for.

August 27, 2026: Disclosed that we record when an invitation link is opened — which invitation, and when — so we can tell whether our invitations are reaching people. No pixel, no third party; deleted a month after the invitation expires.

August 26, 2026: Disclosed the rate-limiting counters (an IP address or account identifier with a timestamp) used to protect our public endpoints. Replaced the blanket "no shadow copies" wording with the two operational records that do outlive a deletion, neither of which holds your content — this matches what the About page already said. Added a binding commitment covering what happens to your record ifBeamMe is ever acquired. Removed the external-agent (MCP) integration surface entirely on August 21; it was never used by anyone and no third-party application was ever connected.

June 29, 2026: Strengthened per-processor data-handling commitments to match the FAQ on /join. Tightened content-deletion language to reflect that deletion is now immediate. Clarified that account-login removal is handled via email (separate from content deletion, which is self-serve in the product).

Contact

For any question, request, or complaint about how BeamMe handles your data, email hello@beamme.co. You can also read our Terms of Service.

BeamMe and Work Signature are trademarks of BeamMe LLC.