1. Data Controller
The data controller responsible for processing your personal data is BrainCode Sp. z o.o., ul. Floriańska 6/2, 03-707 Warszawa, Poland.
You may contact us at legal@braincode.xyz regarding this Privacy Policy or your data protection rights.
2. Data We Collect
We may collect the following categories of data: (a) Account data (name, email), (b) CV and job description content you upload, (c) usage data (pages visited, features used), (d) device/technical data (IP address, browser type), and (e) communications with us (support requests, feedback).
We do not intentionally collect special categories of data. Please avoid uploading sensitive information unless necessary.
3. Purposes and Legal Bases
We process personal data for: (a) providing and improving the Services (performance of contract), (b) account management and customer support (performance of contract/legitimate interests), (c) analytics and service enhancement (legitimate interests), (d) communications and notices (performance of contract/legitimate interests), and (e) compliance with legal obligations.
Where required, we rely on your consent (e.g., for certain cookies or marketing). You can withdraw consent at any time without affecting prior lawful processing.
4. CVs, Job Descriptions, and AI Processing
We store CVs and job descriptions you upload to deliver personalization, ATS checks, and interview training. We may use anonymized and aggregated data (with personal and contact details removed) to improve AI models.
We do not read or process your personal or contact information for training purposes; only job-relevant content may be analyzed once anonymized.
5. Data Sharing and Processors
We do not sell your personal data. We may share data with trusted service providers (processors) who support hosting, analytics, and customer support, subject to data processing agreements and appropriate safeguards.
We may disclose data if required by law, court order, or to protect our legal rights and the security of users.
6. International Transfers
If personal data is transferred outside the EU/EEA, we ensure suitable safeguards, such as European Commission Standard Contractual Clauses or other lawful transfer mechanisms.
7. Data Retention
We retain personal data only as long as necessary for the purposes described herein or as required by law. Upon account deletion, associated data (including CVs) is removed from active systems; residual backups may persist temporarily and are then securely deleted.
8. Your Rights
Subject to applicable law, you have the right to access, rectify, erase, restrict processing, object to processing, and data portability. You also have the right to withdraw consent at any time, where consent is the legal basis.
You may lodge a complaint with your local supervisory authority. In Poland, this is the President of the Personal Data Protection Office (UODO).
9. Security
We implement technical and organizational measures appropriate to the risk, including encryption in transit, access controls, and secure storage. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
10. Cookies and Analytics
We use cookies and similar technologies for essential functionality, analytics, and to improve the user experience. Where required, we obtain your consent. You can manage cookies through your browser settings.
11. Children’s Data
The Services are intended for users aged 18 and above. We do not knowingly collect personal data from children.
12. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via the site or email. Your continued use of the Services after changes take effect constitutes acceptance of the updated policy.
13. Contact
If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at legal@braincode.xyz.