Privacy Policy
Information about how PhD2Industry processes account, career and technical data.
This page describes how PhD2Industry currently handles information when you use its career tools. It is a technical summary based on the application code reviewed for this version, not a substitute for a complete privacy notice tailored to the operator, hosting setup and applicable law.
1. Data controller and contact
Controller: [Insert full legal name or registered business name]
Postal address: [Insert complete business/contact address]
Privacy contact: [Insert monitored privacy email]
2. Information stored in your browser
The CV Toolkit stores working CV context and related workflow inputs in your browser's local storage so you can move between tools in the same browser. This information is not automatically synchronised to your PhD2Industry account. It remains in that browser until you clear the site's local storage or browser data. Avoid using a shared device and clear the data when you no longer want it saved.
3. Information sent for AI processing
When you actively request an AI feature, relevant text may be sent through the PhD2Industry server to the OpenAI API. This may include CV text, LinkedIn profile text, job details, interview answers and text used to create an audio response. The current application code reviewed for this version does not save this submitted career content in the PhD2Industry database; it is transmitted to OpenAI to generate the requested result.
4. AI provider and retention
OpenAI states that API data is not used to train its models by default unless the API customer opts in. OpenAI's standard abuse-monitoring logs may retain customer content for up to 30 days, subject to its policies and exceptions. PhD2Industry does not control OpenAI's independent retention or processing. Do not submit information you are not comfortable sharing with the AI provider.
5. Account and payment information
Supabase is used for account authentication and account records. It receives information such as your email address and stores account/profile status, plan and relevant payment identifiers or event records. If paid checkout is enabled, Creem processes the checkout. The current database design stores payment-related identifiers and status, not your full card number.
6. Files and third-party services
PDF and Word files are read in your browser to extract text; the original file is not uploaded as a file by the current tool workflow. Extracted text may then be sent for AI processing when you request feedback or generation. The site also loads fonts and code libraries from Google Fonts, cdnjs and jsDelivr; those providers may receive technical connection data such as your IP address and browser information.
7. Purposes, legal bases, recipients and international transfers
Purposes include providing requested career tools, operating user accounts, handling payments where enabled, maintaining security and responding to enquiries. The controller must specify the applicable legal basis for each purpose and identify relevant recipients/processors, hosting locations and safeguards for transfers outside the EEA. These details depend on the final hosting and provider configuration and must be completed before launch.
8. Retention
Browser-stored career content remains until you clear it. Account and payment-related records may be retained as needed to provide the service and meet legal, accounting and security obligations. The operator must define specific retention periods or criteria for each category, including server logs and support correspondence.
9. Your rights and choices
Depending on applicable law, you may have rights to access, rectification, erasure, restriction, objection and data portability, and to withdraw consent where processing is based on consent. You may lodge a complaint with a competent data protection supervisory authority. To exercise rights or ask a privacy question, contact the controller using the details above. You can clear locally saved CV context through your browser settings.
10. Automated decisions
AI-generated suggestions are intended as decision-support material. The current workflow does not make automated hiring decisions about you.
11. Hosting and technical service providers
Hosting provider and server region: [Insert provider and region]
Other processors and services: Confirm and list the final providers, their roles and relevant locations before launch.