← Back to home

⚠DRAFT — not legal advice. This page is a product-level placeholder generated from the platform's Product Vision (§9–§10). It must be reviewed and finalised by a qualified lawyer for every jurisdiction you operate in before real users rely on it (Vision §10.2).

Privacy Policy

Draft placeholder — Vision §9.

What we collect

Public and pre-registration searches are stateless — we do not store anything you enter there (Vision §9.3). Once you register, we collect the profile and Digital Twin data described in Settings, only with your consent (Vision §4.2), plus usage data needed to deliver searches, CV preparation, and billing.

Why we process it (lawful basis)

  • Contract performance — delivering the searches and CVs you request.
  • Consent — building/updating your Digital Twin, and feeding mailbox content to AI models.
  • Legitimate interest — fraud prevention and platform security.

Who processes it

Sub-processors include our hosting provider, our AI model vendors (configured per deployment — see docs/DEPLOYMENT.md), and our payment processor (Stripe). We do not permit vendor training on your data where we can contractually avoid it (Vision §9.4).

Your rights

You can export your data or delete your account at any time from Settings → Your data, with no support ticket required (Vision §9.2). You may withdraw consent to Digital Twin processing or mailbox integration as easily as you gave it.

Retention

We keep data only as long as needed for the purpose collected, with financial ledger entries retained under lawful accounting-retention rules even after account deletion (Vision §9.3).

International transfers

To be finalised per deployment region with counsel — prefer EU-region hosting/AI endpoints for EU users (Vision §9.4).