1. Who we are
Rebase is a professional network and a product of Opaige, Inc., a Delaware corporation (“Rebase”, “we”, “us”). We decide how your personal data is used in Rebase, which makes us its controller under data protection laws such as the GDPR and the UK GDPR.
Our registered address is 1111B S Governors Ave, STE 37935, Dover, Delaware 19904, United States.
2. What we collect
We only collect what Rebase needs to work. Here is all of it.
Your account
The email address you sign in with, any other sign-in emails you add, and when you joined and last signed in. We sign you in with a one-time code, so there’s no password to store.
Writing to us without an account
The name and email address you give, what you write, the code that confirms the address is yours (scrambled, and gone within an hour), and our answers.
Getting back in
The people you choose as recovery contacts. If you ever ask to get back into your account: the name and email addresses you give, anything you tell us to show it’s you, and what was decided.
Your profile
Your name, headline, location (a city and country), about text, skills, languages, photo and banner, up to two things you’re happy to be asked about, whether you’re happy to answer questions about where you work, and the settings you choose.
What you’re looking for
Whether you’re open to new roles, the roles, kinds of work, industries and places you want, and the least you’d move for. Only you ever see the least you’d move for.
Your work and education
Roles, companies, years, schools, degrees and the proof of work you add.
Verification
The work or university email addresses you verify with, and when each was confirmed. We store a scrambled version of each code, never the code itself, and codes expire after ten minutes.
What you share
Notes, articles, photos, videos, comments, nods, moments (which disappear after 24 hours), room posts and events you host.
Your connections
Your Circle, introductions you ask for, pass on or accept, messages you send, rooms you join or start (with your answer to a room’s joining question, the messages you send in its chat, and whether you get its daily summary), and events you go to.
Vouches and confirmations
Vouches you give and receive, how each person knows you, and colleague confirmations of past roles.
Applications
Jobs you apply to, your answers (expected pay, notice period, right to work, on-site preference), any note you add, and the company’s replies.
Your Rebase ID
The IDs you create, what they’re for, when they expire, and the times they were opened. We don’t record who opened them.
Activity
Profile views (shown to the person you viewed, both ways), company page and job views (counted for that company’s insights), notifications, reports you file and people you block.
Keeping Rebase safe
Signals that an account may be automated or unwanted, such as reports from several people or the same message sent to many, and conversations people closed because they didn’t ask for them. When your name, photo, banner or location changes, so the limits on how often they change can work. Whether the city in your location is on the list of towns in that country. Reports from several different people in a week make an account read-only for a time, automatically; anything else is decided by a person at Rebase. You can always ask a person to look again.
Your device
If you allow notifications, a push token so we can send them. The app keeps some settings on your device, such as appearance. We don’t collect your precise location.
3. What others add about you
Some information about you comes from other members:
Vouches and colleague confirmations, which appear on your profile with the other person’s name.
Introduction requests that name you.
Company teams can save your profile or application to a private talent pool for their hiring. Only that company’s team sees it, and they can’t see anything you haven’t shown them.
Unless you turn off being found by email, someone who has your address in their contacts can find you. See “Finding people you know” below.
4. Finding people you know
If you choose to look for people from your contacts, the app turns each email address into a one-way code on your phone before anything is sent. We compare those codes once with members who have switched on “Let people who have my email find me”, show you the matches, and keep none of the codes or addresses. We only record how many codes were checked, to stop the feature being used to test addresses in bulk.
Nobody in your contacts is told or emailed unless you choose to invite them. Each invitation goes once, from you, with a link to never be invited again; an address is invited at most once a month, and we keep only its code. “Let people who have my email find me” is on for new accounts and is one switch to turn off, in Settings and on the contacts screen.
5. What we don’t do
We don’t sell or rent your personal data.
We don’t show ads, and we don’t use advertising trackers or cookies.
We don’t ask for passports, government ID or pay history.
We don’t let anyone pay to message you or to see more of your profile.
We don’t use your data to train artificial intelligence models.
6. How we use it, and why we’re allowed to
To run Rebase for you
Your profile, Circle, messages, applications, rooms, events and Rebase ID. We rely on our agreement with you (the Terms).
To verify work and schools
Sending codes and matching domains, colleague confirmations and staff review. Agreement with you.
To keep Rebase safe
Holding some posts for review, handling reports, blocking, stopping spam and abuse, and enforcing limits. Our legitimate interest in a trustworthy service, and legal obligations.
To tell you what’s happening
Notifications in the app, push notifications if you allow them, and the weekly digest. Agreement with you, and your consent for push.
To improve Rebase
Understanding how features are used, in aggregate. Our legitimate interest.
To meet legal duties
Responding to lawful requests and keeping records the law requires. Legal obligation.
Where we rely on your consent, you can withdraw it at any time in Settings or on your device.
7. Who can see what
Anyone on the web
Only if your profile is public: your name, headline, location, about, skills, work history (with how each role was checked) and notes shared with everyone. Room posts and room chats are never public. The email addresses you verified with are never shown, only their domain, such as “northwindlabs.com”.
Members
Your profile and the notes you share with everyone. Your Circle also sees notes you share with your Circle.
Recruiters at other companies
If you’re open to roles: that you’re looking and how actively, where, and the roles, work and industries you want, with what your record shows beside each role (verified, related or new to it). With Quietly looking on, nobody else sees any of this. Nobody ever sees the least you’d move for.
People in a room
What you post and say in the room’s chat, and your profile. In an open room, any member of Rebase can read the posts; in private and hidden rooms, only members can. A room’s admins see your answer to its joining question.
Companies you apply to
Your application: your verified record, vouches, answers and note. You can withdraw an application at any time.
Your employer, if you choose
With Quietly looking on, people at your current employer, and at the other companies in its group, don’t see that you’re open to work, or that you viewed their profile. Your applications only ever go to the companies you apply to.
Whoever you give your Rebase ID
Your name, headline, location, photo, verified and listed roles and schools, how each was checked, and how many vouches you have.
Rebase staff
Reports, posts held for review, and verifications our system couldn’t match, so we can check them.
8. Companies that help us run Rebase
We use a small number of service providers. They process data only on our instructions and under contracts that protect it.
Supabase
Our database, sign-in and file storage, hosted in Frankfurt, Germany.
Vercel
Hosting for the Rebase website.
Expo, Apple and Google
Delivering push notifications to your phone, if you allow them.
An email delivery provider
Sending sign-in and verification codes.
We may also share data when the law requires it, to protect people’s safety, or as part of a merger or sale of Rebase, in which case this policy would continue to apply.
9. International transfers
Rebase is run by a company in the United States, and our main database is in the European Union. Some providers, such as those for website hosting and notifications, may process data in other countries, including the United States. Where that happens we rely on safeguards the law recognises, such as the European Commission’s standard contractual clauses or an adequacy decision.
10. How long we keep it
Your account and what you’ve shared: for as long as you keep your account.
Moments: 24 hours. Verification codes: 10 minutes. Records of when your name, photo, banner or location changed: 30 days.
When you delete your account, your profile, work history, vouches you gave, posts, files, rooms and Rebase IDs are deleted straight away. Messages you sent stay in other people’s threads, without your name. Jobs you posted stay with the company.
Copies can remain in our encrypted backups for a short time until they are overwritten.
We keep reports and safety records for as long as we need them to protect people, even after an account is deleted.
Requests to get back into an account, and appeals, are kept as safety records. A sign-in email you remove stops working after 7 days.
11. Your choices and your rights
You can do most of this yourself, in the app:
See and edit your profile, work history and settings at any time.
Download a copy of everything we hold about you: You → About → Download your data.
Delete your account for good: You → About → Delete account.
Choose who can message you, whether people can find you by email, whether your profile is public, and turn on Quietly looking.
Switch off any Rebase ID, and switch off push notifications on your device.
Depending on where you live, you also have the right to access, correct, delete or move your data, to object to or restrict how we use it, and to withdraw consent. Most of these you can do yourself in the app, as above; for anything else, ask Rebase from the app, or without an account from Help → Ask Rebase → A privacy or legal request, and we’ll answer within one month. You can also complain to your data protection authority, such as the ICO in the UK or the authority in your EU country.
12. Age
Rebase is for people aged 16 and over. We don’t knowingly collect data from anyone younger, and we’ll delete it if we learn we have.
13. Security
Data is encrypted in transit and at rest. Access to member data is restricted by rules in the database itself, so each person can only reach what they’re allowed to see. Sign-in uses one-time codes rather than passwords. Your main email is told whenever a sign-in email is added, changed or removed, and a removed email keeps working for 7 days so nobody who gets into an account can lock its owner out. Recovery contacts never see anything in your account; they only confirm it’s you. No system is perfectly secure; if a breach ever affects your data, we’ll tell you and the relevant authorities as the law requires.
14. Changes to this policy
If we change this policy in a way that matters, we’ll tell you in the app before the change takes effect. The date at the top shows when it last changed.
15. Contact
Questions, requests or concerns: write to Opaige, Inc., 1111B S Governors Ave, STE 37935, Dover, Delaware 19904, United States.