Offerable Back to app

Privacy Policy

v1.1 · Last updated June 18, 2026 · Offerable is intended for use only by residents of the United States.

Offerable ("we," "us," "our") operates the offer-comparison tool at offerable.app (the "Service"). The Service is intended only for residents of the United States. We do not knowingly market to or collect information from users outside the United States.

1. Information we collect

Information you provide

  • Offer inputs: company, role, base, bonus, equity, vesting, importance weights. Stored in your browser; not transmitted unless you submit a contact form.
  • Contact form: name, email, topic, message.

Information collected automatically

  • Essential: session state and consent preferences stored in your browser's localStorage. No third-party trackers without consent.
  • Analytics (only with consent): aggregated page-view and event data.
  • Server logs: IP address, user-agent, and request timestamp, retained 30 days for security and abuse prevention.

2. How we use information

  • Provide and operate the Service.
  • Respond to your messages and account signups.
  • Improve the product and benchmark quality, in aggregated and de-identified form.
  • Detect, prevent, and address fraud, abuse, or security issues.
  • Comply with legal obligations.

3. Legal bases (when applicable)

We process personal information based on your consent, to perform a contract you request (e.g., a paid plan), to comply with legal obligations, and for our legitimate interests in operating and securing the Service.

4. Sharing

We do not sell personal information for money. We share limited information with service providers acting on our behalf under written contracts (hosting, email delivery, payment processing, error reporting). We may disclose information when legally required, to protect rights and safety, or in connection with a business transfer.

5. Your California privacy rights (CCPA/CPRA)

California residents have the right to:

  • Know what personal information we collect, use, disclose, and (if applicable) "share" for cross-context behavioral advertising.
  • Delete personal information we have collected.
  • Correct inaccurate personal information.
  • Opt out of "sale" or "sharing." We do not sell personal information; you can still submit an opt-out via our Do Not Sell or Share My Personal Information page.
  • Limit use of sensitive personal information.
  • Non-discrimination for exercising your rights.

Submit requests via our contact form. We will respond within 45 days. We may verify your identity using the email address associated with your data.

6. Other US state rights

Residents of states with comprehensive privacy laws (e.g., Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, New Hampshire, New Jersey, Iowa) have similar rights to access, correct, delete, and obtain a copy of their personal information. Submit requests to the same address. You may appeal a denial by replying to our response.

7. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13 (COPPA). If you believe a child under 13 has provided us information, contact us and we will delete it.

8. Retention

We retain personal information only as long as needed for the purposes described or as required by law. Browser-stored offer data persists until you clear it (use the "Clear my data" link in the footer). Contact-form messages are retained 24 months.

9. Security

We use industry-standard administrative, technical, and physical safeguards. No system is perfectly secure. If we become aware of a breach affecting your personal information, we will notify you and any regulators as required by applicable state law (typically within 30–60 days).

10. AI / automated processing

The AI Negotiation Coach uses a large language model to generate suggestions from inputs you provide. Output is informational only, not personalized advice, and is generated automatically. You can opt out of AI features by not using them.

11. Data retention and AI processing

AI Negotiation Coach architecture

The AI Negotiation Coach uses Lovable AI Gateway to interface with Google Gemini under Google's enterprise commercial tier. Data flow:

  1. User sends message in the Offerable browser app.
  2. Message is routed to Lovable AI Gateway (https://ai.gateway.lovable.dev/v1/chat/completions).
  3. Gateway routes to Google Gemini API (enterprise commercial tier).
  4. Gemini processes and responds.
  5. Response is returned to the user.
  6. Conversation is discarded — not stored by Google, Lovable, or Offerable.

Zero Data Retention (ZDR) guarantees

Google: Under the enterprise commercial tier, conversation data is not retained by Google after processing and is not used to train, fine-tune, or develop Google's AI/ML models.

Lovable: The Lovable Data Processing Agreement (Section 10) commits that personal data is not used for training, retraining, fine-tuning, or AI/ML model development. Section 7.5 flows the same obligation to sub-processors (including Google). See lovable.dev/security.

Implementation details

  • File API: not used. The AI Coach uses only the Chat Completions endpoint; user data does not sit at rest in Google File Storage.
  • Session Resumption: disabled. The Gemini Live API is not exposed by Lovable AI Gateway. If integrated in the future, SessionResumptionConfig will be disabled by default.

Where your data lives

  • Offer comparison data: stored only in your browser's localStorage; not transmitted to Offerable servers.
  • AI Coach conversations: routed to Lovable AI Gateway only; not stored by Offerable.
  • Backend database: encrypted at rest with AES-256.
  • Data in transit: TLS 1.3 preferred, TLS 1.2 minimum.

Entity-scoped logging attestation

Lovable's published DPA covers all customers platform-wide. If your organization requires a written attestation that Google Cloud Logging and BigQuery are specifically disabled for Offerable, this is available through Lovable's Enterprise program.

See the Security & Data Handling page for our full Security Attestation summary, including DDoS protection and security event logging.

12. Cookies

See the Cookie Policy for the categories of cookies and similar technologies we use, and how to manage your preferences.

13. Changes

We will post material changes here and update the "Last updated" date. Continued use after changes means you accept the updated policy.

14. Contact

Reach us via our contact form.

Accessibility Statement

Offerable is committed to ensuring digital accessibility for all users, including those with disabilities. Our web application is designed to comply with Web Content Accessibility Guidelines (WCAG) 2.1 Level AA standards. If you encounter any accessibility barriers or need assistance using Offerable, please contact us via our contact form and select "Accessibility Issue" in the subject line. See our full Accessibility Statement for details.