Privacy
Last updated: August 2026
This is a working draft, not a finalized legal document — it accurately describes how the product actually works, but should be reviewed by a lawyer before being relied on as binding.
This Privacy Policy explains what Position-Me (operated by Ghayah) collects, why, and how it's protected. "Anonymous by design" isn't just marketing language here — it describes the actual architecture, detailed below.
What We Collect
When you create an account: your email address, name, a handle, and optionally your country and marketing preference. When you take the self-assessment: your chosen field, specialty, the problem you solve, and who you serve. When you respond to someone else's assessment link: only your answers and a general relationship category (peer, client, or leadership) — never your name, email, or any other identifying detail; we do not ask for or store anything that could link that submission back to you. When you make a purchase: the tier, amount, and date — payment card details are handled entirely by Stripe and never reach our servers. We also briefly log IP addresses purely to detect and block automated abuse (for example, scripted attempts to guess whether an email has an account); these logs are not linked to your browsing activity or profile.
How We Use It
To run the assessment and show you your results; to process payments and unlock the tier you purchased; to send you transactional emails (like your one-time sign-in link) — we don't send marketing email unless you've opted in; and to detect and prevent abuse of the service.
The Anonymity Guarantee
This is the core design principle of the product, not an afterthought: respondent submissions are structured, at the database level, so that no identifying information is ever collected alongside a response. The person whose link you responded to only ever sees aggregated patterns across all responses — never which specific answer came from which specific person.
Who We Share It With
We don't sell your data. We use a small number of service providers to operate Position-Me, each only for what they need to do their job: Supabase (database and authentication hosting), Vercel (application hosting), Stripe (payment processing), Brevo (sending transactional emails), and LinkedIn (only if you choose to sign in with it). Each of these providers has its own privacy practices governing the data we share with them for these purposes.
Data Retention
We keep your account and assessment data for as long as your account is active, plus a reasonable period afterward in case you return. You can request full deletion at any time — see "Your Rights" below. Anonymous respondent submissions, since they were never linked to an identity in the first place, aren't tied to any specific person's deletion request.
Your Rights
You can request a copy of the data we hold about you, ask us to correct it, or ask us to delete your account and associated data entirely. Contact us at privacy@bariz.io to exercise any of these rights, and we'll respond within a reasonable time.
Cookies
Position-Me uses only the essential cookies needed to keep you signed in — no advertising or third-party tracking cookies. Your locale preference (English/Arabic) is also stored locally in your browser.
Children's Privacy and International Use
Position-Me is intended for working professionals and isn't directed at children. Our database infrastructure is hosted in the EU; if you use the service from elsewhere, your data will be transferred to and processed there.
Changes to This Policy
We may update this Privacy Policy from time to time; meaningful changes will be reflected here with an updated date. Questions? Reach us at privacy@bariz.io.