Privacy Policy

1. Introduction

Welcome to Pinpoint Apply ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered CV optimization service.

2. Information We Collect

2.1 Personal Information

• Name, email address, phone number, and other contact details from your CV
• Professional information including work experience, education, skills, and achievements
• Account information when you create an account with us
• Authentication data when using Google Sign-In or other third-party services

2.2 CV Content

• Complete CV/resume documents you upload
• Job descriptions you provide for optimization
• Generated optimized CV versions
• Gap analysis results and recommendations

2.3 Technical Information

• IP address, browser type, and device information
• Usage data and analytics about how you interact with our service
• Cookies and similar tracking technologies

3. How We Use Your Information

3.1 Primary Services

• Parse and analyze your CV content using AI technology
• Generate optimized CV versions tailored to specific job descriptions
• Provide gap analysis and career recommendations
• Create downloadable PDF versions of optimized CVs

3.2 Service Improvement

• Improve our AI models and algorithms (using anonymized data)
• Enhance user experience and service functionality
• Provide customer support and respond to inquiries

3.3 Communication

• Send service-related notifications and updates
• Provide technical support and assistance
• Send marketing communications (with your consent)

4. AI Processing and Third-Party Services

We use advanced AI models including Google Gemini and Groq to process your CV content. Your data is processed securely and is never shared with these AI providers for their own purposes. We maintain strict data processing agreements with all AI service providers.

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• With your explicit consent
• To comply with legal obligations or court orders
• To protect our rights, property, or safety, or that of our users
• With service providers who assist in our operations (under strict confidentiality agreements)
• In connection with a business transfer or acquisition

6. Your Rights (GDPR & CCPA Compliance)

You have the following rights regarding your personal data:

• Access: Request a copy of all personal data we hold about you
• Rectification: Correct any inaccurate or incomplete information
• Erasure: Request deletion of your personal data ("right to be forgotten")
• Portability: Receive your data in a structured, machine-readable format
• Restriction: Limit how we process your data
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time where processing is based on consent

7. Data Security

We implement industry-standard security measures to protect your data:

• Encryption in transit and at rest
• Secure cloud infrastructure with access controls
• Regular security audits and vulnerability assessments
• Employee training on data protection and privacy
• Incident response procedures for data breaches

8. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy:

• CV content: Retained while your account is active and for 30 days after account deletion
• Account information: Retained until you request deletion
• Analytics data: Anonymized and retained for up to 2 years for service improvement
• Legal compliance: Some data may be retained longer if required by law

9. International Data Transfers

Your data may be processed in countries outside your residence. We ensure adequate protection through:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions for countries with equivalent data protection laws
• Other appropriate safeguards as required by applicable law

10. Cookies and Tracking

We use cookies and similar technologies to:

• Remember your preferences and settings
• Analyze website usage and performance
• Provide personalized content and recommendations
• Ensure security and prevent fraud

You can control cookies through your browser settings, but some features may not function properly if cookies are disabled.

11. Children's Privacy

Our service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy on our website
• Sending an email notification to registered users
• Displaying a prominent notice on our service

13. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

14. Supervisory Authority

If you are located in the European Union, you have the right to lodge a complaint with your local data protection supervisory authority if you believe we have not complied with applicable data protection laws.