Privacy Policy

1. Who We Are

careerIntel AI is the name of our online career-coaching and CV optimisation platform, operated by Zyvra Studio. In this policy, “we”, “us”, and “our” refer to Zyvra Studio. We act as the data controller for personal data we collect about you when you use our website and services.

For any privacy-related questions, requests, or complaints, contact us at privacy@careerintel-ai.com.

UK controller details: Zyvra Studio, [INSERT REGISTERED OFFICE ADDRESS, UK]. ICO registration: [INSERT ICO REGISTRATION NUMBER OR "pending"].

2. What Data We Collect

Depending on how you use careerIntel AI, we may collect:

• Account data: email address, password (stored using strong one-way hashing — we never store your password in plain text), subscription status, account preferences, and related profile fields you provide.
• CV content: text and files you upload or paste (including employment history, education, skills, contact details within the CV, and any other information contained in your documents).
• Job descriptions: text you provide or paste for matching, optimisation, role readiness reports, or related features.
• Usage data: how you interact with the service (e.g. feature usage, timestamps, approximate technical data such as browser type, device category, and IP address where needed for security and operations).
• Payment data: we do not store full payment card numbers on our servers. Payments are processed by our payment provider (Stripe), which receives the data needed to complete transactions (e.g. card details, billing address as you provide them to Stripe). We may receive limited billing metadata (e.g. customer id, subscription status, transaction references).
• Cookies: strictly necessary cookies required for the site to function (e.g. authentication, security, and storing your cookie choice), as described in the Cookies section below. We do not use third-party analytics cookies on this site at present.
• Communications: messages you send to us (e.g. support emails) and records of transactional emails we send (e.g. account, billing, security).

3. How We Use Your Data

We use personal data on the following legal bases, as applicable:

• Performance of a contract: to register and maintain your account, provide the services you request (including AI-assisted analysis of your CV and job descriptions), process payments and subscriptions, send service-related communications (e.g. security alerts, billing notices), and respond to your requests.
• Legitimate interests: to secure the platform, prevent fraud and abuse, enforce our terms, monitor and improve reliability and performance, carry out cost and usage monitoring (including technical and operational metrics), debug issues, and analyse aggregated usage to improve the product — where such interests are not overridden by your rights.
• Consent: where required by law, we rely on your consent for marketing emails. You may withdraw consent at any time (see Your Rights). Marketing communications are only sent where we have a lawful basis to do so (e.g. consent or soft opt-in where applicable).
• Legal obligation: to comply with applicable law, regulation, or lawful requests from public authorities.

4. Who We Share Data With

We share personal data with a limited set of service providers (“processors”) who help us run careerIntel AI. They process data only on our instructions and under appropriate contractual safeguards.

• Anthropic — AI processing of prompts and content you submit (including CV and job-related text) to generate outputs within the service. Location: processing may occur in the United States. We use appropriate safeguards for international transfers, including Standard Contractual Clauses (SCCs) and supplementary measures as appropriate.
• Stripe — payment processing, billing, fraud prevention, and related financial compliance.
• Resend — sending transactional and operational emails (e.g. account, security, billing-related messages).
• Railway — hosting of our application and databases. Infrastructure location depends on the region configured for our deployment (for example EU West where applicable).
• Cloudflare — content delivery network (CDN), security, and performance services in front of our application.
• Sentry — client-side error and crash reports from the web app so we can diagnose technical issues. We configure this to limit personal data (for example we do not attach your account email to these reports by default). Processing may occur outside the UK/EEA; we use Sentry’s data processing terms and transfer safeguards where applicable.

We may also disclose information if required by law, to protect rights and safety, or in connection with a business transfer (e.g. merger) subject to appropriate safeguards.

5. International Transfers

careerIntel AI is operated from the United Kingdom and may use service providers in the UK, EEA, United States, and other countries. Where personal data is transferred from the UK or EEA to countries not subject to an adequacy decision, we implement appropriate safeguards such as Standard Contractual Clauses approved by the UK ICO / European Commission (as applicable), supplemented by technical and organisational measures where appropriate.

In particular, CV content and related text may be processed by Anthropic in the United States for the purpose of providing AI features. That transfer is protected using Standard Contractual Clauses and other measures as required by applicable data protection law.

You may contact us at privacy@careerintel-ai.com for more information about transfers and safeguards.

6. Data Retention

• CV snapshots and related application content: retained for the duration of your account while you remain a user, unless you delete specific content or delete your account (subject to limited retention where we must keep data for legal, security, or dispute resolution purposes).
• Usage data: retained for the duration of your account where it is tied to your profile (including operational / usage counters stored on your account), and is removed when your account is deleted.
• AI feedback (e.g. ratings or comments you optionally provide on AI outputs): retained while the related application remains in your account. If you delete your account (or delete an application), related AI feedback is deleted as part of the application/account deletion flow.
• Password reset tokens: stored only to complete a reset request and are valid for 1 hour (tokens expire and become unusable after that time; they are also marked used after a successful reset).

7. Your Rights

Depending on where you live, you may have the following rights regarding your personal data. To exercise any of them, email privacy@careerintel-ai.com with your request. We may need to verify your identity before responding. We will respond within the timeframes required by applicable law (typically within one month for UK GDPR requests, subject to extension where permitted).

• Access: request a copy of the personal data we hold about you and information about how we process it.
• Erasure (“right to be forgotten”): request deletion of your personal data where applicable law allows (e.g. where we no longer need it or you withdraw consent and there is no other lawful basis).
• Rectification: request correction of inaccurate or incomplete personal data.
• Portability: where processing is based on consent or contract and carried out by automated means, request a machine-readable copy of certain data you provided, where technically feasible.
• Object: object to processing based on legitimate interests (including profiling within scope of that right), and to direct marketing at any time.
• Restrict processing: request that we limit how we use your data in certain circumstances (e.g. while a dispute is resolved).
• Do Not Sell / Share (CCPA/CPRA): careerIntel AI does not sell your personal information as defined under the California Consumer Privacy Act. California residents may still submit a request regarding the use of personal information for behavioural advertising or “sharing” as defined under California law by contacting privacy@careerintel-ai.com.

Right to complain: if you are in the United Kingdom, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) (ico.org.uk). We encourage you to contact us first so we can try to resolve your concern.

8. Cookies

We use Strictly Necessary cookies (and similar technologies) that are essential for the website to operate — for example authentication, security, load balancing, remembering your cookie preferences, and limited technical data used by our error-reporting provider (Sentry) when the app needs to report a crash. These are always on and cannot be disabled through our cookie notice without breaking core functionality.

We do not currently use third-party analytics cookies (for example Google Analytics or similar). If we introduce them in the future, we will update this policy and obtain consent where required before they run.

Cookie notice: you can read this notice again at any time using the Cookie Settings link in the Legal section of the website footer on marketing pages (scroll down).

9. Children

careerIntel AI is not directed at individuals under the age of 16. We do not knowingly collect personal data from anyone under 16. If you are under 16, do not use the service or provide any personal data.

If we learn that we have collected personal data from an underage user, we will take steps to delete that information and may terminate or restrict the associated account as soon as reasonably practicable. Parents or guardians who believe a child has provided us data should contact privacy@careerintel-ai.com.

10. AI Processing

When you use AI features, CV content and related text you submit (including job descriptions and prompts) are processed by automated systems, including large language models operated by our AI provider (Anthropic), to generate suggestions, scores, rewrites, or other outputs displayed in the product.

Outputs are assistive in nature. careerIntel AI does not use solely automated processing to make legal or similarly significant decisions about you without human involvement; you remain responsible for decisions you take in your job search and career.

Fairness and non-discrimination (EU AI Act alignment): We configure our AI prompts so that outputs should not treat people less favourably based on protected characteristics under EU law (including race, colour, ethnic or social origin, genetic features, religion or belief, disability, age, sex, sexual orientation, and other grounds protected against discrimination). Suggestions, scores, and recommendations are intended to be based on professional skills, experience, and qualifications evidenced in the content you submit. The model is instructed not to rely on stereotypes, demographic proxies, or factors unrelated to professional merit, and to flag uncertainty rather than guess where that is relevant. This does not constitute legal advice and does not guarantee that every output will be error-free; you should always review outputs before relying on them.

Model training: Under Anthropic's API usage policy, content submitted through the API is not used to train or improve Anthropic's models by default. Your CV content and related inputs are processed solely to generate the outputs you request and are subject to Anthropic's own Privacy Policy and Terms of Service (available at anthropic.com).

11. Policy Updates

We may update this Privacy Policy from time to time. When we make changes, we will post the revised policy on this page and update the “Last updated” date. Where changes are material, we will notify you by email (to the address associated with your account) or through a prominent notice in the service, where required by law.

12. Contact

For privacy matters, contact privacy@careerintel-ai.com.