Privacy

Carerio is operated by TUNET LTD. For data protection purposes we are the data controller for the information described below. Our company number is 13472660 and our registered office is 117 Waldeck Street, Reading, England, RG1 2RF. Use the privacy request form to reach us.

You can also email alex@tunet.xyz.

• Your account — email address, display name, and the sign-in method you used. If you sign in with Google we receive your name, email and profile photo from Google; we never receive your Google password.
• Your CV — the file you upload and the structured profile parsed from it: contact details, work history, education and skills, plus optional answers you store for application forms (right to work, notice period, salary expectation, relocation).
• Your search — the roles you are tracking, job descriptions you paste or import, cover letters and tailored resumes generated for them, contacts you record, skill plans, reviewed application answers, and any offers you enter.
• Interview practice — the transcript of your answers, the questions asked, and the coaching feedback. We do not store the audio: your voice is transcribed in your own browser and only the text is sent on.
• Usage counts — how many practice questions you have used this month, so your plan allowance can be applied.
• Support requests — the reply address, topic and message you submit through the support form, plus its case status.
• Service and security records — subscription references, scheduled reminders and workflow history, usage limits, request and error logs, and technical information used to prevent abuse and operate the service.
• Optional website analytics — if you consent, public-page visits, referral origins, approved campaign labels, selected link clicks and account-creation events, with browser/session identifiers and technical device information. Analytics events do not include your account ID, email, form contents, CV, job records or interview answers.

We do not sell your data and we do not share it with recruiters, employers or advertisers. The following providers help us operate the service. Payment providers and sign-in providers may also process some information for their own security and legal purposes:

• Google Firebase (authentication, Firestore database, Cloud Storage) — stores your account, your records and your uploaded CV file. Your database is hosted in the European Union. Data is encrypted in transit and at rest.
• Google Cloud and Gemini — host the application and process relevant CV content, job descriptions and your interview answers in order to generate cover letters, tailored resumes, questions and coaching. Processing takes place for features you request, including background workflows you enable. We do not use your content to train our own models. Provider processing, security logging and retention are governed by the applicable Google service terms; we do not promise that AI requests have zero retention.
• Stripe — handles payment if you subscribe. Your card details go to Stripe directly and never reach us. We store customer and plan references, subscription status and renewal details needed to manage your access.
• Twilio SendGrid — when email delivery is configured, receives your email address and the message content needed to deliver account or workflow notifications. Messages may include details of the role or reminder concerned. Your email provider also processes messages delivered to your inbox.
• Google Analytics — only with your analytics consent, measures use of our public website and signup completion. Google receives technical information including network information needed to receive requests. We disable advertising personalisation, Google signals and automatic enhanced measurement. We do not track private workspace page views. See Google's privacy policy and data processing terms, including their international-transfer provisions.

Coach sharing is off by default. If you enable it for your organisation, authorised coaches can see a summary that may include your name and email, application progress, interview dates, debrief summaries and next actions. They can send notes and practice assignments. Disable sharing in your account to stop future access; this cannot recall information a coach has already seen.

If you choose to contribute interview questions, the question text and employer/role context enter a shared question bank without your account identifier or your answers. Do not include names, confidential material or personal details in contributed questions. Contributions are stored separately and are not automatically removed when your account is deleted. Contact us with the question text if you need help identifying a contribution.

AI scores and suggestions are coaching aids, not employment decisions made about you. We do not decide whether an employer hires you. You choose what to edit, export, share or submit.

The Carerio application database is hosted in the European Union. That does not mean every provider operation stays in the EU: authentication, AI processing, email delivery, payments and support operations may involve other countries, including the United States.

Provider transfer terms describe applicable safeguards, such as adequacy decisions and contractual safeguards where required. See Google Cloud's data processing terms, Stripe's data processing terms and Twilio's data protection addendum. Ask us through the privacy request form for information about the safeguards applicable to your data.

Your profile can be returned to your own browser as an apply packet — the same contact details, work history and form answers you already stored — so you can copy them into an employer's form or, if you install the optional fill helper, have those fields filled on a click. The packet is not sent to the employer by us. Protected characteristics (including race, gender, disability and veteran status) are not part of the packet and are not filled. The helper does not submit the form. We do not receive the contents of the destination form unless you choose to import that job listing into Carerio.

The interview studio asks for microphone access when you start a session, and only then. Audio is analysed in your browser to draw the waveform and, where your browser supports it, transcribed by your browser's own speech recognition service. Depending on your browser (Chrome and Edge, for example), that service may send the audio to the browser vendor's servers to produce the transcript — we never receive or store the recording ourselves. The resulting text is sent to us so your answer can be scored, and you can edit or delete it before that happens. If you prefer to keep audio entirely on your device, you can type your answers instead.

Your saved career records stay until you delete them or close your account. Successful account deletion removes your account profile, uploaded CV files, career records and queued workflow jobs, and closes your sign-in. This cannot be undone. It is not a promise of immediate erasure from every provider log, legally retained billing record or separately submitted support request.

Billing records may be retained where required for tax, accounting, dispute resolution or fraud prevention. Stripe also keeps records under its own legal obligations and retention rules. Operational logs are subject to the relevant provider retention settings. Contact us for details or to request erasure of records outside your account.

Support requests are scheduled for deletion after 180 days so we can investigate and follow up; automatic database deletion may take additional processing time. Browser data is covered by our cookie and storage policy. Clearing an account does not necessarily clear site data on every device you used.

Google Analytics user-level and event-level retention is set to two months, without resetting retention on new activity. These settings do not limit the lifetime of aggregated standard reports. Analytics cookies have a configured lifetime of up to 180 days and are removed when analytics consent expires or is withdrawn on this site.

If you are in the UK or the European Economic Area, you have the right to access, correct, export, restrict and delete your personal data, and to object to processing, subject to the conditions and exceptions in the law. Settings provides these self-service tools:

• Export downloads your account's career records, uploaded CV files and workflow jobs as a JSON file. Contact us for other records, such as support correspondence or billing information.
• Delete account removes your data and closes the account.

For anything else, use the privacy request form. You also have the right to complain to your data protection authority — in the UK, theInformation Commissioner's Office.

We process your account and search data to provide the service you asked for (performance of a contract), including AI features, subscriptions and service messages. We use legitimate interests for security, abuse prevention, troubleshooting and responding to enquiries, balancing these against your rights. Legal obligations may require retention of financial records. We rely on consent for website analytics, optional device preferences and optional sharing. You can withdraw those choices without affecting earlier lawful processing. Microphone access separately requires your browser permission; you can revoke it in the browser and use typed answers instead.

You do not have to supply optional information. We need an account identifier to provide a signed-in workspace and relevant content to carry out the AI task you request. Avoid adding sensitive personal data or third-party details that are not needed, and only upload information you are entitled to use.

We do not use advertising trackers. Essential device storage supports sign-in, security and requested app features. Persistent language preferences and Google Analytics are separate optional choices, both off until you agree. Rejecting analytics prevents the tracker from loading. Withdrawal stops future collection and removes its cookies, but does not erase information already received by Google. Read the cookie policy to see the storage categories and change your choice.

If we change what we collect or who processes it, we will update this page and change the date at the top. Material changes will be brought to your attention in the app rather than left here to be found.