Privacy Policy

This Privacy Policy describes how OKO Labs, Inc., doing business as Rarelevel (“Rarelevel,” “Company,” “we,” “us,” or “our”), collects, uses, and safeguards information when you visit rarelevel.co, engage our advisory or executive search practices, or correspond with our team.

For individuals in the European Economic Area (EEA), United Kingdom, or Switzerland, OKO Labs, Inc. acts as the data controller regarding personal information processed through our direct client and candidate relationships.

1. Information We Collect

1.1 Information You Provide Directly

• Inquiry Details: Name, professional email address, organization name, role title, and project scope submitted via email or inquiry forms.
• Executive Candidate Artifacts: Career histories, work samples, case studies, portfolios, and evaluation notes submitted during executive search assessments with your prior consent.
• Engagement Records: Scoping questionnaires, organizational topology documents, strategic briefs, and communications generated during active advisory.

1.2 Automatically Collected Information

• Technical Analytics: Anonymized usage data, aggregated page interactions, and device characteristics collected via Google Analytics 4 (GA4) with IP anonymization enabled. We do not use intrusive third-party cross-site trackers or ad-retargeting pixels.
• Server Logs: Edge network request metadata (IP address, browser user-agent, timestamp) processed securely by Cloudflare for network routing and security defense.

2. How We Use Information

We process collected data exclusively for legitimate professional purposes:

• To scope and deliver custom strategic product advisory and organizational design engagements.
• To calibrate and conduct senior executive searches for retained client mandates.
• To coordinate communications directly between hiring founders and executive candidates.
• To safeguard the security, reliability, and integrity of our digital infrastructure and prevent malicious activity.
• To comply with applicable legal, accounting, and regulatory obligations.

3. Discretion & Candidate Confidentiality

Executive talent search requires complete discretion. Rarelevel does not publish candidate rosters, sell resumes, or distribute candidate work artifacts without explicit individual written authorization. Candidate data shared with hiring clients is bound by non-disclosure terms and evaluation-specific agreements.

4. Information Sharing & Third Parties

We do not sell, rent, or monetize your personal information. We disclose information only under strict operational boundaries:

• Infrastructure Providers: Cloudflare (hosting, DNS, security firewall) and Google Workspace / ImprovMX (corporate email routing).
• Client Organizations: Candidate dossiers and work evaluations shared exclusively with hiring clients for specific retained searches with candidate consent.
• Legal Compliance: When required by lawful court order, subpoena, or applicable statutory mandate.

5. Data Retention & Security

We implement technical and organizational controls to protect data against unauthorized access, loss, or alteration. We retain advisory records for the duration of client contracts plus applicable statutory limitation periods. Candidate evaluation artifacts are retained only as long as necessary for active talent calibrations or until a candidate requests removal.

6. Your Privacy Rights (GDPR & CCPA)

Depending on your jurisdiction, you possess statutory rights regarding your personal information, including the right to access, rectify, delete, restrict processing, or receive a portable copy of your data. You also hold the right to lodge a complaint with your local data protection authority.

To exercise any privacy right, contact our Data Privacy officer at privacy@rarelevel.co. We verify requests promptly without discrimination.

7. Contact & Corporate Entity