Privacy Policy

Last updated: April 11, 2026

This policy explains what data readme.speedrun.com collects, how we use it, and what control you have over it. We wrote it in plain language because you should actually be able to read your privacy policy.

readme.speedrun.com is operated by speedrun, a program of Andreessen Horowitz ("a16z"). When we say "we" or "us" in this policy, we mean the speedrun team at a16z.

What we collect

Information you provide directly

Email address — required to use the service. We use it to identify your session, send you your portfolio link, and (if you opt in) send weekly job alerts.
Resume and career data — whatever you share during the conversation: work history, education, skills, project descriptions, and bio text. You choose what to share.
Template preferences — which portfolio style and layout you select.

Information from connected accounts (only if you connect them)

GitHub — public profile information (name, bio, repos, contribution data) via OAuth. We never access private repositories.
LinkedIn — basic profile data (name, headline, experience summary) via OAuth or URL you provide.

Information collected automatically

Session cookie — a single session identifier so we can save your progress. Not a tracking cookie.
Usage data — conversation turn count, template selections, and generation count. We use this to enforce rate limits and improve the product. We do not track clicks, page views, or browsing behavior.

How we use your data

Generate your portfolio — your career data is sent to our AI to create your portfolio pages. This is the core purpose of the service.
Match you with jobs — if you opt in to weekly job alerts, we compare your profile against open roles at a16z portfolio companies and send you matches.
Talent network — if you explicitly opt in, we share your profile with a16z portfolio company hiring teams. This only happens if you click the opt-in button after your portfolio is generated. We never do this automatically.
Send emails — portfolio delivery, weekly job alerts (opt-in), and service-related messages (like data deletion confirmations).

What we do NOT do:

Sell your data to third parties. Ever.
Share your resume or profile with any company without your explicit, affirmative consent.
Store your data permanently without your consent — you can delete everything at any time.
Use your data to train AI models. Your conversations are processed through the Anthropic API, which does not use API inputs for model training.
Run advertising, retargeting, or behavioral tracking.

Third-party services

We use the following services to operate readme.speedrun.com. Each has its own privacy policy governing how they handle data that passes through their systems:

Anthropic (Claude API) — processes your conversation to generate portfolio content. Per Anthropic's API data policy, API inputs and outputs are not used to train their models and are retained for a limited period for safety monitoring, then deleted.
Cloudflare — hosts the website (Pages), runs the backend (Workers), stores session data (D1 database), and stores generated portfolios (R2 storage).
Resend — delivers transactional and job alert emails on our behalf.
GitHub — OAuth authentication, if you choose to connect your GitHub account.

We do not use Google Analytics, Facebook Pixel, or any third-party tracking or advertising services.

Data retention

Active sessions — retained while you are actively using the service (24-hour session window).
Your portfolio — retained until you delete it or request deletion. Published portfolios remain accessible at their URL until removed.
Email and profile data — retained until you unsubscribe from emails or request deletion, whichever comes first.
Conversation history — retained for 90 days after your session, then automatically deleted. This lets us debug issues if something went wrong with your portfolio.
Waitlist emails — if you signed up during our private testing period, your email is retained until we either invite you or you request removal.

Your rights

You have the following rights over your data, and we make them easy to exercise:

Unsubscribe from emails — every email we send includes a one-click unsubscribe link. No hoops.
Export your data — request a full export of everything we have on you (profile, chat history, generated portfolios, matched roles) in JSON format. Use the "Export My Data" option or call our API directly.
Delete your data — request complete deletion of your account, profile, chat history, generated portfolios, and any talent network submissions. We will confirm deletion by email. Use the "Delete My Data" option or call our API directly.
Opt out of talent network — if you previously opted in to sharing your profile with hiring teams, you can opt out at any time and we will remove your profile from the network.

To exercise any of these rights, you can:

Use the links in the footer of readme.speedrun.com
Use the links in any email we send you
Email us at jmazer@a16z.com

We will respond to data requests within 30 days.

Cookies

We use exactly one cookie: a session identifier (session_id). It is:

HttpOnly (not accessible to JavaScript)
Secure (only sent over HTTPS)
SameSite=Lax (not sent on cross-site requests)
Expires after 24 hours

We do not use tracking cookies, analytics cookies, or advertising cookies. We do not participate in any ad exchanges or cookie-based targeting.

Children's privacy

readme.speedrun.com is not intended for anyone under 16. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

California residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

Right to know what personal information we collect and how we use it (described above).
Right to delete your personal information (use our deletion endpoint or contact us).
Right to opt out of the sale of personal information. We do not sell personal information.
Right to non-discrimination for exercising your privacy rights.

International users (GDPR)

If you are in the European Economic Area or United Kingdom, our legal basis for processing your data is:

Consent — for email alerts, talent network sharing, and connected account data.
Contract performance — for generating your portfolio (the core service you requested).
Legitimate interest — for rate limiting, abuse prevention, and service improvement.

You have the right to access, rectify, erase, restrict processing, data portability, and object to processing. Contact us at jmazer@a16z.com to exercise these rights.

Changes to this policy

If we make material changes to this policy, we will update the "last updated" date at the top and, if you have an active account, notify you by email. We will not retroactively weaken your privacy protections without your consent.

Contact

Questions about this policy or your data? Reach out:

Email: jmazer@a16z.com
Mail: speedrun by a16z, 2865 Sand Hill Road, Menlo Park, CA 94025