Privacy Policy
Last Updated: 2026-02-17
Cofferral ("we", "our", "us") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share your information when you use the Cofferral platform and its features, including Meetings (Coffee Chats), Role Simulations, and referral exploration features available on the platform.
1. Information We Collect
1.1 Information You Provide
We collect the following information directly from you:
Account Information
Name, email address, personal background (e.g., education and professional experience), LinkedIn profile (required for Sharers, optional for Seekers), and account settings (e.g., preferred language, time zone, notification preferences).
Referral Exploration Materials
When you choose to explore a potential referral through the platform, you may submit materials such as your CV.
These materials become accessible to the selected Sharer at the time of request submission, provided the Sharer has opted to consider referrals. Access is revoked if the request is declined, withdrawn, expired, or if the associated Meeting (Coffee Chat) is canceled or unfulfilled.
Cofferral facilitates referral exploration but does not guarantee referral outcomes and does not act as an employment agency.
Simulation Inputs
When you participate in a Role Simulation, we collect:
- Your written responses
- Uploaded materials (if applicable)
- Interaction data related to simulation progression
- Reflection responses
- AI-generated summaries and feedback
These inputs are used to generate structured feedback, performance insights, and simulation summaries.
Payment & Identity Verification
- For Seekers: Payments are processed by trusted third-party providers. Cofferral does not store payment card details on its servers.
- For Sharers:
- Canadian Sharers: Full name, residential address, and Social Insurance Number (SIN) are collected only if annual income exceeds $500 CAD, for T4A reporting purposes. This information is securely stored by Cofferral.
- International Sharers: No tax-related documents are collected by Cofferral.
1.2 Automatically Collected Data
We automatically collect certain usage and technical data, including:
- Meeting (Coffee Chat) history
- Role Simulation history
- Attendance and completion status
- Engagement metrics (e.g., response time, punctuality, simulation progress)
- Device and browser information
- IP address
- Cookies and related technologies
Meeting (Coffee Chat) Recordings
Meetings (Coffee Chats) are automatically recorded (video and audio) to ensure service quality, resolve disputes, and assess platform compliance.
Recordings are stored securely and are never shared externally unless you explicitly approve their use for career insight content (e.g., the Evergreen Rewards Program). You will always review and approve any final version before publication.
Simulation Data Processing
Role Simulations are powered by AI systems. Simulation conversations and interaction logs are securely stored for the following purposes:
- Generating structured feedback and summaries
- Quality assurance
- Platform improvement
- Compliance monitoring and abuse prevention
Simulation data is not publicly shared and is not used for marketing purposes without your explicit consent.
2. How We Use Your Information
We use your personal data to:
- Operate and manage Meetings (Coffee Chats)
- Operate and manage Role Simulations
- Enable referral exploration features available on the platform
- Generate AI-based simulation feedback and summaries
- Calculate earnings and issue payments
- Comply with legal tax obligations (Canada only)
- Improve platform functionality, reliability, and security
- Provide customer support and service updates
3. Data Sharing and Storage
Cofferral does not sell or rent your personal data.
Your information is shared only in the following circumstances:
- Payments: Payment processing and identity verification are handled by trusted third-party providers. Cofferral does not store payment card details.
- Tax Reporting: Required tax data (including SIN where applicable) may be shared with the Canada Revenue Agency (CRA) for T4A compliance.
- AI Infrastructure: Simulation data may be processed by trusted AI service providers under strict confidentiality and data protection agreements.
- Service Infrastructure: Trusted cloud storage, hosting, analytics, and operational providers support platform functionality under confidentiality agreements.
4. Your Rights and Choices
Subject to applicable laws, you have the right to:
- Access and correct your personal data through your account
- Request account deletion and associated data removal by contacting support
- Withdraw consent for optional submissions (e.g., referral exploration materials)
Certain data may be retained where required by law or for legitimate operational purposes.
5. Cookies and Tracking Technologies
We use cookies and similar technologies to:
- Maintain session integrity
- Ensure platform security
- Improve user experience
- Conduct traffic analytics
You may disable cookies in your browser settings; however, some platform features may not function properly.
6. Data Retention
We retain personal data only for as long as necessary to fulfill legal, contractual, and operational purposes:
- Financial and tax records are retained in accordance with applicable laws (e.g., up to 6 years for CRA compliance).
- Account and profile information is retained while your account remains active and may be deleted upon request.
- Meeting (Coffee Chat) recordings are retained for a limited period for quality assurance and dispute resolution.
- Simulation data (including interaction logs and AI-generated feedback) are retained for user history continuity, quality assurance, and system improvement.
- Career insight content approved for publication (e.g., Evergreen Rewards Program) may be retained as long as it remains actively in use.
- Technical and analytics data may be retained in anonymized or aggregated form for security and performance monitoring.
7. International Data Transfers
Cofferral is based in Canada. Data processing primarily occurs in Canada and the United States.
If you are located in the European Economic Area (EEA) or another jurisdiction with cross-border data transfer requirements, appropriate safeguards—such as Standard Contractual Clauses (SCCs)—will be implemented to ensure compliance with applicable data protection regulations, including GDPR.
8. Security Measures
We implement appropriate technical and organizational safeguards to protect personal data, including:
- Encryption in transit and at rest
- Role-based access controls
- AES-256 encryption for sensitive data (e.g., SINs)
- Secure AI processing infrastructure
- PCI-compliant third-party payment processing
9. Changes to This Policy
We may update this Privacy Policy to reflect changes in legal requirements, technology, or platform operations. Updates will be published with a revised "Last Updated" date.
10. Contact Us
If you have questions or concerns regarding this Privacy Policy: