PRIVACY POLICY

Last updated: 28 October, 2026.

Please read our Privacy Policy that explains how we collect, use, share and protect your personal information. All undefined and capitalized terms contained in this Privacy Policy shall have the meaning set forth in the Sunny Future Terms of Use.

1. HOW WE COLLECT YOUR PERSONAL INFORMATION

We collect your personal information when you interact with Sunny Future’s website and platform, such as when you book a Sprint (paid), join our open access network (free) or sign in to the Claude connector (see section 10).

2. PERSONAL INFORMATION WE COLLECT FROM YOU

We collect personal information via Sunny Future’s Digital Platform. We collect and use different kinds of personal data: identity data, contact data, transaction data, technical data, profile data, usage data, user generated content. Data is provided in different ways:

  • Signing up with the Sunny Future newsletter

  • Enrolling for our Sprints

  • Signing in to Sunny, our Claude connector, including through an invitation from Sunny Future, an alumni arrangement or an organization that prepays for your Seat (see section 10)

  • Booking and paying for a Clarity Session

  • Conversing with our Career Brain

  • Attending one of our events

  • Third Party Data (booking via affiliate partners)

3. USE OF YOUR PERSONAL INFORMATION

Sunny Future uses personal information for the following purposes:

  • Processing payments

  • Invitation to our Sprint

  • Access to the Claude connector (Sunny)

  • Marketing and communications

  • Job search guidance

  • Personal introductions

  • Customer support

  • New product development

  • Financial analysis and investor relations

  • Safety and security

4. LEGAL BASIS FOR THE COLLECTION OF YOUR INFORMATION

We will always collect personal information from you only where we either:

i) have your consent to do so;

ii) need the personal information to perform a contract with you (such as payment processing);

iii) need to collect your data for our legitimate interests (for instance to improve our services, or to ensure the safety and security of our customers, partners and employees);

iv) need to use your information to comply with any legal obligation or regulatory requirement to which we are subject.

Section 11 sets out which of these applies to each of our activities.

5. SHARING YOUR PERSONAL INFORMATION 

We may disclose your personal data to any partner or provider that makes available an event, Clarity Session or Sprint you book or use through our Site, or to third parties who provide data processing services to us (such as Stripe, Cloudflare, Google or Resend).

When you book your 1-1 call, the Sunny coach who takes it receives your name and email address through our scheduling tool, and sees whatever you choose to share on the call.

If your employer gives you a Seat, they send us your name and email address. Your employer can see your name, your enrolment status and the date your Seat was assigned, nothing else. Your conversations, your CV, your search and how you use Sunny are never shared with your employer. We clear the name and email your employer gave us 12 months after your Seat ends.

6. PROCESSING YOUR PAYMENTS

Sunny payments are processed by Stripe, which collects your payment details and billing address. We receive a payment reference, your billing country and the email address you give us to open your Seat. We never see your card number. We keep payment records for the period tax law requires. If we refund a purchase, we record that your Seat ended by refund, so that we can apply our once-per-person refund rule. That record is deleted if you ask us to erase your account.

We occasionally use Luma to process Sprints booked with us; and Calendly for setup sessions and Clarity Sessions. You can access Luma’s privacy policy here, and Calendly here. We do not store card details. Credit and debit card payments are processed by Stripe on their secure payments server, and all card details are fully encrypted and stored by them.

Stripe collects, uses and processes your information, including payment information, in accordance with their privacy policies. You can access their privacy policy here.

Sunny and Sprints can also be prepaid by organizations for outplacement. We will always ensure that they conform with our privacy guidelines.

7. INTERNATIONAL DATA TRANSFER

Information you submit to us through our website and platform is stored within the European Economic Area on our third-party hosting provider’s servers. This means that your personal data will be fully protected under the GDPR or to equivalent standards by law.

Additional data may also be stored on custom databases built for CRM purposes.

Stripe’s services in Europe are provided by a Stripe affiliate - Stripe Payments Europe Limited (“Stripe Payments Europe”) - an entity located in Ireland. In providing Stripe Services, Stripe Payments Europe transfers personal data to Stripe, Inc. in the US.

The Claude connector runs on Cloudflare’s network, and sign-in uses Google. Where Cloudflare, Google or Resend process personal information outside the European Economic Area or the United Kingdom, we rely on the safeguards each provider offers, such as the EU-US Data Privacy Framework (and its UK extension) and Standard Contractual Clauses.

8. RETENTION OF YOUR PERSONAL INFORMATION

We will retain your personal information as long as needed to fulfill the purposes explained in Section 3 above, where we have a legitimate interest or for a period specifically required by applicable regulations or laws. 

When determining the relevant retention periods, we will take into account:

  • our contractual obligations and rights in relation to the information involved;

  • legal obligation(s) under applicable law to retain data for a certain period of time;

  • statute of limitations under applicable law(s);

  • our legitimate interests 

  • (potential) disputes; and

  • guidelines issued by relevant data protection authorities.

We will securely delete your personal information where we no longer require it for the purposes collected.

For the Claude connector, retention is as follows:

  • Account and access records: the length of your access and 12 months afterwards (erased earlier on request)

  • System fetch history: the length of your access; erased with your Seat

  • Daily system counters: 90 days

  • Company data counters: 90 days

  • Sign-in and Seat-change records: 90 days

  • One-time sign-in codes and pending sign-ins: one hour after they expire

  • Per-minute rate-limit counters: 1 hour

  • Sign-in tokens held for Claude: 30 days unused

  • Technical logs at Cloudflare: 7 days

  • Sign-in and invitation emails: 30 days at our email provider, stored in the United States

  • Name and email supplied by an organization: cleared 12 months after your Seat ends

  • Payment records: the period tax law requires

9. YOUR RIGHTS 

You have the following data protection rights:

  • access or request a copy or your information

  • update or delete your personal information

  • restrict or stop the processing of information

  • opt-out of marketing communications

  • where we have asked for your consent, withdraw this consent at any time

  • complain to your data protection authority

  • receive your information in a portable format

  • object to our use of your information where it is based on our legitimate interests

  • any other rights, as provided by applicable legislation.

To use any of these rights, email nicolas@sunnyfuture.io. We will reply within one month, and we may need to confirm who you are first. There is no charge unless a request is clearly unfounded or excessive.

10. CLAUDE CONNECTOR

This section applies when you use Sunny through the Claude connector. It adds to the rest of this Privacy Policy, and where they differ, this section governs the connector.

10.1 How the Claude connector works. The Claude connector lets Claude fetch the Sunny system. Your conversations with Claude stay in your Claude account, and we do not receive them. Anthropic is responsible for that information under its own terms and privacy policy.

10.2 What we collect. For each Seat we store:

  • your name, email address, your account status, and a link to an organization if one has paid for your Seat;

  • the product you have access to (Sunny or Sprint), how access was granted, and the start and end dates of your access;

  • which parts of the system you open and when, so that we can tell whether you are starting or returning, apply daily limits and see how the system is used;

  • counts of the calls you make, and a record of sign-ins and of changes our team makes to your Seat;

  • for each search of our company data, a record that it took place, how long the search text was and how many results came back.

10.3 What we do not collect or store. We do not store your CV, your notes on target companies, your conversations with Claude or the figures you enter into the Negotiation Calculator. Your search text does reach our servers so that we can run the search, but we do not keep it, the filter values or the results.

10.4 How we use it. To give you access to Sunny, keep that access accurate, apply limits that keep the service available to everyone, protect the service against misuse and improve the system. We do not sell it and do not use it for advertising.

10.5 Who can see it. Our team can see it through administrative tools. If an organization has paid for your Seat, it can see your name, your enrolment status and the date it assigned your Seat, and nothing else. We do not show an employer how you use the system, what you search for or anything you tell Claude.

10.6 Technical logs. Our hosting provider, Cloudflare, keeps technical logs of requests to the connector for 7 days. They include the address of the page requested, the IP address and approximate location of the request, and the browser or client software used. We use these logs only to keep the service secure and working.

10.7 Seeing, correcting or deleting what we hold. Erasing your Seat deletes your account, your access and your use records, and removes your identifiers from our sign-in and security log. It ends your access to Sunny. Sign-in emails sit at the email provider for 30 days, in the United States. Tokens held for Claude stop working at erasure but expire on their own, within 180 days at most. Copies in our database provider’s backups are overwritten within 30 days.

11. EU AND UK RESIDENTS (GDPR)

This section applies if you are in the European Economic Area or the United Kingdom. It describes how we handle your personal information under the EU General Data Protection Regulation and the UK GDPR, and applies to all of our services, including the Claude connector.

11.1 Who is responsible. The controller of your personal information is Polymaths BV, a company registered in the Netherlands under registration number 68982496. You can reach us at nicolas@sunnyfuture.io. We have not appointed a data protection officer.

11.2 Why we use your information and on what basis.

  • Give you access to Sunny and our Sprints and keep that access accurate: performing our contract with you

  • Count and limit calls so the service stays available: our legitimate interest in running a reliable service

  • Protect the service and investigate misuse: our legitimate interest in security

  • See how the system is used and improve it: our legitimate interest in improving our services

  • Tell an organization that has paid for your Seat that you are enrolled: our contract with the organization

  • Reply when you write to us, including for peer matching or help with an offer: your consent, which you give by writing to us, and our legitimate interest in replying

  • Apply our once-per-person refund rule: our legitimate interest in preventing misuse of refunds

  • Marketing and communications: your consent, which you can withdraw at any time

  • Keep the records we must keep by law: our legal obligations

Where we rely on legitimate interests, we have weighed them against your rights and expect the effect on you to be small. You can object at any time (section 9).

11.3 Your rights. Section 9 sets out your rights. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

11.4 Complaints. Please tell us first so that we can put things right. You also have the right to complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), which is our lead authority, to the data protection authority in the EU country where you live or work, or, if you are in the United Kingdom, to the Information Commissioner’s Office (ico.org.uk).

11.5 Children. You must be 18 or older to use our services, as set out in the Terms of Use, and we do not knowingly collect information from anyone younger.

12. CHANGES TO OUR PRIVACY POLICY

We may update our Privacy Policy from time to time. If we make significant changes, we will notify you in advance of the changes, such as email. We encourage you to periodically review our Privacy Policy for the latest information.

Use of our services after an update amounts to consent to the updated Privacy Policy to the extent permitted by law.

13. CONTACT DETAILS

If you have any questions or concerns about our Privacy Policy or how we use your personal information more generally, you can contact us at nicolas@sunnyfuture.io.