Part II: Privacy Policy

EloApply, operated by Elosyth Consulting Ltd. ("we," "us," or "our"), is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, share, and protect your information when you use eloapply.com, our transactional email services (mail.eloapply.com), and our interactive Interview Room.

1. Information We Collect

We collect the following types of information to provide and improve our Services:

• Account & Identity Data: Name, email address, password hash, phone number, and account settings.
• Candidate Profile Data (Master Experience Library): Full work history, education, qualifications, certifications, technical skills, summary statements, preferred job titles, salary expectations, and geographic targets.
• Job Application Data: Uploaded original CVs, target job postings, employer job descriptions, generated cover letters, and application submission logs.
• Interview Room Data: User input provided during practice interview sessions, including audio recordings, speech-to-text transcripts, text responses, practice question logs, and AI-generated performance evaluations or feedback metrics.
• Payment & Transactional Data: Billing name, address, subscription status, card verification status via Stripe, and payment receipts.
• Technical & Usage Data: IP addresses, browser types, device information, access times, referral tracking parameters (?ref=...), and interaction logs collected automatically via cookies and diagnostic tools.

2. How We Use Your Information

We process your personal data under the following legal bases and for the following purposes:

• To Deliver Our Services (Contract Performance): To tailor your CV and cover letters, run implicit strategic analysis prompts, execute Custom or Auto-Apply submissions to employers on your behalf, power interactive Interview Room simulations, and track referral rewards.
• To Power the Interview Room: To process practice responses, generate tailored interview questions, transcribe audio, synthesise speech/text feedback, and deliver performance analytics for candidate preparation.
• Transactional Communications: To send account verifications, password reset links, application status updates, and 14-day referral reward expiration notifications via our transactional email provider (Resend, hosted in the EU/Ireland region).
• Service Improvement & Analytics: To optimise AI generation prompts, monitor application delivery success rates, enhance interview simulation accuracy, and resolve technical bugs.
• Legal Compliance & Fraud Prevention: To maintain accounting records, verify payment card signatures, prevent trial farm abuse, and comply with statutory legal requirements.

3. AI Processing & Third-Party Service Providers

To deliver AI-driven tailoring, interview simulations, and transactional infrastructure, we share minimal required data with trusted third-party cloud service providers bound by strict confidentiality and data protection agreements:

• Database & Authentication: Supabase (for secure user auth and database storage).
• Payment Processing: Stripe (for secure £0 card verification, subscription billing, and customer portal management).
• Transactional Email: Resend (hosted in the EU/Ireland region; used to send transactional system emails from no-reply@mail.eloapply.com).
• AI & Speech Processing Models: Anthropic / Claude API and enterprise audio transcription APIs (used to process job descriptions, evaluate strategic alignment, draft cover letters, transcribe interview audio, and generate practice feedback). Data submitted via enterprise APIs is strictly confidential and is not used to train public base AI models.
• Domain Infrastructure: GoDaddy (DNS routing).

4. International Data Transfers & GDPR Compliance

EloApply complies with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018:

• User Rights: You have the right to access, rectify, port, or request the erasure of your personal data (including profile data, cover letters, and stored Interview Room transcripts/audio) at any time through your account settings or by contacting support@eloapply.com.
• Data Retention: We retain your profile, application history, and interview practice logs for as long as your account is active or as necessary to fulfil your job search requests. You can request full account deletion at any time, which permanently removes your stored profile and session data from our primary databases.

5. Automated Decision-Making & Proxy Submissions

When you enable Auto-Apply features, EloApply acts under your explicit direction to automate the manual task of submitting your application materials to external job postings. EloApply does not make binding legal decisions or hire/fire decisions regarding your employment; all final hiring decisions rest with the prospective third-party employers.

6. Data Security

We implement robust technical and organisational measures to safeguard your personal data, including HTTPS encryption in transit, strict API key domain-scoping, and encrypted database connections.

7. Contact Us

For any questions regarding this Privacy Policy, your data protection rights, or the Terms of Service, please contact us at:

• Email: support@eloapply.com
• Website: https://eloapply.com