Privacy Policy

Last updated: 27 March 2026

1. Who we are

EuroCareer AI ("we", "us", "our") operates the EuroCareer AI platform at this domain. We are the data controller for the personal data described in this policy.

2. What data we collect

• Account data: email address and password hash, collected when you register.
• Profile data: name, nationality, work authorisation status, languages, and CV/resume text — provided voluntarily to power AI features.
• Application data: job application records you create (company, role, status, notes).
• AI-generated content: CVs and cover letters generated on your behalf, stored against your application records.
• Usage data: AI credit usage, subscription plan, and generation history.
• Payment data: handled entirely by Stripe — we store only your Stripe customer ID, not card details.
• Technical data: IP address, browser type, and access logs retained for security purposes.

3. Legal basis (GDPR)

We process your data under the following legal bases:

• Contract performance: to provide the service you signed up for.
• Legitimate interests: security, fraud prevention, and service improvement.
• Consent: for optional cookies and marketing communications.

4. How we use your data

• To provide and personalise the EuroCareer AI service.
• To generate AI-adapted CVs and cover letters using your resume text and job details.
• To process subscription payments via Stripe.
• To enforce fair-use limits and detect abuse.
• To communicate service updates and (with consent) marketing messages.

5. AI processing

Your resume text and job details are sent to Anthropic's Claude API to generate career documents. Anthropic processes this data as a sub-processor under their API terms. We do not use your data to train AI models.

6. Data sharing

We share data only with the following sub-processors:

• Supabase — database and authentication (EU-hosted).
• Anthropic — AI generation.
• Stripe — payment processing.

We do not sell your data to third parties.

7. Data retention

We retain your data for as long as your account is active. When you delete your account, all personal data is deleted within 30 days. AI generation logs are retained for 90 days for abuse prevention.

8. Your rights (GDPR)

You have the right to: access your data, rectify inaccurate data, erase your data ("right to be forgotten"), restrict processing, data portability, and object to processing. To exercise any right, contact us at the email below.

9. Cookies

We use strictly necessary cookies for authentication (Supabase session token). We use no third-party advertising or tracking cookies. You can manage cookie preferences via the banner shown on first visit.

10. Security

All data is encrypted in transit (TLS) and at rest. Database access is protected by Row Level Security — only you can access your data. We conduct regular security reviews.

11. Contact

For privacy enquiries or to exercise your rights: privacy@eurocareer.ai