Privacy Policy

1. Who we are

Six Figure OS is operated by MITREC Consulting - FZCO, based in Dubai, United Arab Emirates ("we", "us", or "our"). MITREC Consulting - FZCO is the data controller responsible for your personal data.

If you have any questions about this policy or your data, email privacy@sixfigure-os.com.

2. Scope of this policy

This policy covers sixfigure-os.com and all of the services we offer through it, including our newsletter and free resources (lead magnets), the Six Figure CV analysis tool, our career diagnostic and OS modules (positioning, evidence, LinkedIn, and interview practice), and enquiries you send us through the "Work With Me" form. Where we offer paid programs, workshops, or products, this policy applies alongside any terms provided at the point of purchase.

3. Information we collect

Information you give us:

• Contact details: your first name and email address when you subscribe, download a resource, or create an account.
• CV data: when you use the Six Figure CV tool, the CV document you upload and the text extracted from it.
• Answers you enter: the responses you provide in our diagnostic, gap analysis, positioning, evidence, and interview modules. If you use the voice interview feature, this includes the audio and/or transcript of your practice answers.
• Work With Me enquiries:your current seniority level, salary range, biggest challenge, and what you'd like help with.
• Account credentials: where an account is created (for example, to save your Six Figure CV reports), we hold your email and a securely managed password via our authentication provider.

Information we generate:

• The scores, feedback, and recommendations produced from your CV or module inputs, including a broad score band (for example, high / medium / low).
• Email engagement data, such as whether you opened an email or clicked a link.
• Activity and event logs we keep to operate, secure, and improve the service.

Information collected automatically:

• Standard analytics data through Google Analytics, including IP address, browser type, device type, approximate (country/city-level) location, and the pages you visit.
• When you submit a lead-capture form, we store a one-way hashed (pseudonymised) version of your IP address for security and abuse-prevention purposes — not your raw IP.

We aim to collect the minimum data necessary to operate and improve Six Figure OS — nothing more.

4. How and why we use your information

Under UK/EU GDPR and the UAE Personal Data Protection Law, we rely on the following legal bases:

• To deliver what you asked for — sending the newsletter, resource, or report you requested (consent, which you can withdraw at any time).
• To provide our tools — running the CV analysis, diagnostic, and OS modules you choose to use (performance of a contract / taking steps at your request).
• To tell you about our services — occasional marketing about our workshops, programs, or products (consent; unsubscribe any time via the link in every email).
• To understand and improve — analytics, measuring what content resonates, and improving the site and user experience (our legitimate interests).
• To keep the service secure — preventing fraud, abuse, and unauthorised access, and enforcing rate limits (our legitimate interests / legal obligations).
• To process purchases — where you buy a paid program or product (performance of a contract).

5. AI processing

Some features — most notably the Six Figure CV tool and parts of the OS modules — use AI models to analyse your inputs and generate feedback and recommendations. Your CV text and answers are sent to trusted AI processing providers solely to produce your results.

We do not use your personal data to train public or general-purpose AI models, and our AI providers do not train their models on data submitted through their business APIs. AI outputs are guidance only and may not always be accurate or complete — see our Terms of Service. We minimise the personal data shared with AI systems wherever possible.

6. Who we share your data with

We do not sell, rent, or trade your personal information. To run Six Figure OS we rely on a small number of trusted third-party providers who process data on our behalf, only as needed to deliver their service, and under their own data-protection obligations:

• Hosting & infrastructure: Vercel (website hosting) and Supabase (database, authentication, and file storage).
• Email: Resend (transactional and marketing email, and contact management).
• Analytics: Google (Google Analytics and Tag Manager).
• Courses & payments: Kajabi and our payment processor for paid programs, workshops, and products.
• AI processing: the AI provider(s) that power our analysis features.

We may also disclose information if required by law or legal process, or to protect the rights, property, or safety of Six Figure OS, our users, or others.

7. International data transfers

We operate from the UAE and several of our providers are based in the United States or the European Economic Area. This means your data may be transferred to, and stored in, countries outside your own. Where we make such transfers, we rely on appropriate safeguards — such as Standard Contractual Clauses, the UK International Data Transfer Agreement, or equivalent legal protections — to keep your data secure.

8. Cookies and analytics

We use a small number of essential cookies to maintain your session and preferences. We also use analytics cookies through Google Analytics to understand how visitors use the site and to improve performance.

We apply Google Consent Mode. For visitors in the UK and EEA, analytics storage is denied by default and no analytics cookies are set without a valid legal basis. We do not use advertising cookies or sell data to advertisers. You can also control or disable cookies through your browser settings, though some parts of the site may not work as expected if you do.

9. How long we keep your data

• We keep your email and engagement data for as long as you remain subscribed. If you unsubscribe, we retain a minimal suppression record (your email only) so we don't contact you again.
• We keep your CV data, analysis results, and account data for as long as your account is active or as needed to provide the service to you.
• We keep operational and security logs for a limited period appropriate to their purpose.
• You can request full deletion of your data at any time (see Your rights).

10. Your rights

Regardless of where you live, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Withdraw consent at any time (for example, via the unsubscribe link).
• Object to, or request restriction of, how we process your data.
• Request a copy of your data in a portable format.

To exercise any of these rights, email privacy@sixfigure-os.com. We'll respond within 30 days. If you're not satisfied with our response, you have the right to complain to your local data protection authority — the UAE Data Office if you're in the UAE, or your national supervisory authority (such as the ICO in the UK) if you're in the UK or EU.

11. Data security

We take data protection seriously and use appropriate technical and organisational measures to protect your data, including encryption in transit and at rest, access controls, encrypted storage of sensitive tokens, and pseudonymisation (such as hashing IP addresses). No system is ever completely secure, but we work to protect your data in line with industry standards.

12. Children's data

Six Figure OS is intended for professionals and is not directed at anyone under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

13. Changes to this policy

We may update this policy from time to time. If we make material changes, we'll update the "Last updated" date above, and for significant changes we may notify subscribers by email.

14. Contact us

Questions about this policy or your data? Email privacy@sixfigure-os.com.