Data Processing Policy

1. Controller details and scope

Data controller: MARYSCHAKGROUP LTD, 71-75 Shelton Street, London WC2H 9FE, United Kingdom. This policy applies to site visitors, free users, and paying subscribers.

2. Processing principles

• lawfulness, fairness, and transparency;
• purpose limitation and data minimization;
• accuracy and storage limitation;
• integrity, confidentiality, and secure handling;
• accountability for compliance with applicable law.

3. Data categories

• account and contact details (email, subscription status, user ID);
• documents and text submitted for analysis (resume files, job descriptions);
• technical and usage data (IP, browser/device data, logs);
• customer support communications.

4. Processing activities

We may collect, record, structure, store, update, use, transfer to processors, pseudonymize where appropriate, and delete personal data to provide the service and protect the platform.

5. Purposes and legal bases

• performing our contract with users for subscription access and features;
• generating ATS insights and AI recommendations, including Gemini-powered analysis;
• fraud prevention, abuse detection, and service security;
• compliance with legal, tax, and accounting obligations;
• product improvement based on legitimate interests.

6. Third-party processors and international transfers

We may engage vetted processors such as hosting, billing, analytics, and AI infrastructure providers. They process data under contractual confidentiality and security obligations.

Where international transfers occur, we apply safeguards required by applicable data protection laws.

7. Retention and deletion

Data is retained only as long as necessary for service delivery, security, dispute handling, and legal obligations. Data is deleted or anonymized when no longer required.

8. Data subject rights

• request access and a copy of personal data;
• request correction, restriction, or deletion;
• withdraw consent where processing is based on consent;
• file a complaint with a competent supervisory authority.

Requests can be sent to privacy@pitchmycv.com.

9. Security controls

We use organizational and technical safeguards, including access controls, secure transmission, logging, and incident response procedures.