Privacy Policy

Information We Collect

When you use SeratyAI, we collect the following types of information:

• Account Information:Your name, email address, password (hashed), and authentication details when you create an account. If you register via Google OAuth, we also store your Google ID and avatar.
• CV Content:The resume data you enter, including work experience, education, skills, projects, certifications, languages, and personal details. CV text may be stored as embeddings in a vector database for AI-powered evaluation features.
• Voice Data:When you use the AI voice interview feature, your speech is transcribed by Deepgram (a third-party speech-to-text service). We do not store voice recordings after transcription.
• Usage Data:Information about how you interact with our platform, including features used and actions taken.
• Device Information:Browser type, operating system, and IP address for security and fraud prevention purposes.
• Referral Tracking:If you arrive via a referral link, a 6-character referral code is used to credit your referrer at registration.
• OTP Codes:During registration, a one-time password is generated and stored temporarily (expiring after 10 minutes) for email verification.
• Communication Records:If you contact us via the contact form, we receive your name, email, and message. We also store records of emails sent to you for service delivery purposes.
• Push Subscriptions:If you enable browser notifications, your push subscription endpoint and encryption keys are stored to deliver those notifications.

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Generate AI-powered suggestions and evaluations for your CV
• Send you important account and service updates
• Monitor and analyze usage trends to improve user experience
• Detect, prevent, and address technical issues and security threats

Data Security

We take the security of your data seriously. Data transmitted between your browser and our servers is encrypted using TLS/HTTPS. Session data is encrypted before storage. Passwords are hashed using bcrypt. We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction.

Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your data only in the following circumstances: with your explicit consent, to comply with legal obligations, to protect our rights and safety, or with trusted service providers who assist us in operating our platform under strict confidentiality agreements.

Your Rights

You have the right to:

• Access and download your personal data
• Request correction of inaccurate information
• Request deletion of your account and associated data
• Opt out of non-essential communications
• Withdraw consent at any time

Data Retention

We retain your personal data for as long as your account is active or as needed to provide you services. If you delete your account, we will delete your personal information within 30 days, except where we are required to retain it for legal, regulatory, or security purposes.

Internal Access to Your Data

Our administrators have the ability to access user accounts for support, troubleshooting, and abuse prevention purposes. This access is logged and restricted to authorized personnel. Administrators may view CV data, account details, and usage history only when necessary to maintain the platform or respond to your requests.

Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.