Karyo Privacy Policy

1. Introduction

This Privacy Policy explains how Karyo ("we," "us," "our") collects, uses, and protects your personal data when you use our job application automation tool. We are committed to protecting your privacy and complying with the Swiss Federal Act on Data Protection (FADP) and the EU General Data Protection Regulation (GDPR) where applicable.

2. What Data We Collect

Account Information

• Email address
• Password (encrypted)
• Account credits/payment information

Usage Data

• Application generation history (job titles, timestamps)
• Service usage statistics
• Technical data (IP address, browser type, device information)

Data We Do NOT Store

• Your CV content
• Generated cover letters
• Scraped job listing content
• Job application details beyond basic metadata

3. How We Process Your Data

Client-Side Processing

Our application performs web scraping on your device using your browser. We do not store or retain scraped job listing data on our servers.

CV and Cover Letter Generation

• Your CV text is temporarily transmitted through our servers to OpenAI's API.
• Generated cover letters are created and delivered directly to your device.
• We do NOT store CV content or generated letters on our servers.
• Data passes through our infrastructure but is not retained.

Third-Party Processors

We use OpenAI (OpenAI, L.L.C., based in the United States) to generate cover letters and tailored CVs. When you use our service:

• Your CV text and job listing text are sent to OpenAI's API.
• OpenAI processes this data according to their Data Processing Agreement and Privacy Policy.
• OpenAI does not use API data to train their models (per their business terms).
• We have a Data Processing Agreement with OpenAI as required by GDPR/FADP.

You can review OpenAI's privacy practices at: https://openai.com/policies/privacy-policy

4. Legal Basis for Processing

• Contract performance: To provide our service to you.
• Consent: You explicitly consent to data processing when creating an account.
• Legitimate interests: To improve our service and prevent fraud.

5. Data Retention

• Account data: Retained while your account is active.
• Usage statistics: Retained for 12 months for analytics.
• CV/Cover letter content: NOT retained – processed in real-time only.
• Payment information: Retained as required by Swiss tax law (10 years for invoices).

6. Your Rights

Under FADP and GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and associated data
• Export your data (data portability)
• Object to processing
• Withdraw consent at any time

To exercise these rights, contact us at: kashif02ahmed@hotmail.com.

7. International Data Transfers

Your data may be transferred to:

• United States: When using OpenAI's services.
• EU countries: If using EU-based hosting or services.

We ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses with processors.
• Data Processing Agreements with all third parties.
• Compliance with adequacy decisions where applicable.

8. Security

• Encrypted data transmission (HTTPS/TLS)
• Encrypted password storage
• Regular security updates
• Access controls and monitoring

However, no internet transmission is 100% secure. You use our service at your own risk.

9. Cookies

We use only essential cookies necessary for the Service to function:

Essential Cookies

• Session cookies: Keep you logged in and maintain your session.
• Authentication tokens: Verify your identity securely.

These cookies are strictly necessary to provide the Service and do not require your consent. Without these cookies, you cannot use Karyo. We do not use tracking, analytics, or advertising cookies.

Managing Cookies

You can delete cookies through your browser settings, but this will log you out and may prevent you from using the Service.

10. Children's Privacy

Our service is not intended for users under 16 years of age. We do not knowingly collect data from children.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or prominent notice on our website.

12. Contact Us

13. Supervisory Authority

If you believe we have not handled your data properly, you may file a complaint with:

Switzerland:

Federal Data Protection and Information Commissioner (FDPIC) – https://www.edoeb.admin.ch

EU (if applicable): Your local data protection authority.