Privacy policy

This Policy explains what personal data the COScafe service collects, why, who it is shared with and how long it is kept. The data controller is Фізична особа-підприємець Олексюк Ольга Володимирівна (full details on the Contact information page).

1. What we collect

• Account: name, email, password (encrypted). When signing in with Google or LinkedIn — name, email and a link to your avatar.
• Your resume: the file you upload and the text extracted from it.
• Questionnaire answers and the job description you enter to generate a resume.
• Generated resumes and assessment results.
• Saved answer sets, if you create them.
• Feedback you leave through the form on the site.
• Technical data: IP address, browser type, actions on the site (through Google Analytics and Microsoft Clarity — only with your consent in the cookie banner), plus a referral tag if you arrived through a partner link.
• Anonymised recording of on-page behaviour: Microsoft Clarity records mouse movement, clicks and scrolling so we can see where the interface gets in the way. The text you type is masked in the recording — we see the page layout and the actions, not your answers, resume or contacts.
• Service logs: technical error records needed to fix the service. Passwords never end up in them.

We do not collect or see your card number or card details. Payments are handled entirely by WayForPay. From them we receive and store only administrative payment data: amount, status, date and the masked card digits (for example 44****6129) — enough to investigate a disputed charge.

2. Why we use it

• to deliver the service: analyse your resume and generate a new one;
• to give you access to your generation history and saved answer sets;
• to process payment and manage your subscription;
• to answer your support request;
• to improve the service (anonymised statistics and your feedback).

The legal basis is performance of our contract with you (the Offer) and your consent.

3. Who we share it with

We do not sell your data. To make the service work we share it only with these partners:

• Anthropic (Claude AI, USA) — the text of your resume, your answers and the job description are sent for analysis and generation. This is the core technology of the service: without this transfer the service cannot be delivered. Under Anthropic's API terms, data sent through it is not used to train models.
• Google Drive (Google, USA) — a copy of each successful generation (uploaded resume, answers, job description and the finished file) is archived in our workspace. Only the Provider has access to that archive; it is not opened to third parties.
• WayForPay — the data needed to process the payment.
• Google Analytics — anonymised visit statistics, only after your consent in the cookie banner.
• Microsoft Clarity — anonymised recording of on-page behaviour (clicks, scrolling, heatmaps) with masked text, only after your consent in the cookie banner.

Some of these partners (Anthropic, Google, Microsoft) are located outside Ukraine, which means a cross-border transfer of data to the USA. By using the service you consent to that transfer; without it the service cannot technically be provided.

4. How long we keep it

• The resume uploaded for the free assessment and its result — for as long as your account exists: your latest assessment is always shown in your account and you can come back to it at any time.
• Generation history, generated files and saved answer sets — for as long as your account exists.
• The archived copy of generations in Google Drive — for as long as your account exists; deleted together with the rest of your data on request.
• Payment records — for as long as the law requires.
• Service error logs — until the problem is resolved, then cleared.

You can ask us to delete your data sooner at any time — see section 5.

5. Your rights

You have the right to:

• find out exactly what data of yours we hold;
• correct inaccurate data;
• delete your account together with all its data;
• withdraw consent to analytics (the button in the cookie banner);
• object to processing.

To exercise any of these rights, write to coscafe@careerhubpro.info — we reply within 3 business days.

6. Security

The site runs over a secure connection (HTTPS). Passwords are stored only as an irreversible hash. Only the owner can access their resume files — this is checked on every request.

7. Cookies

Essential cookies are needed for sign-in and session handling. Analytics cookies (Google Analytics, Microsoft Clarity) are switched on only after your consent in the banner.

8. Changes

We may update this Policy. A new revision takes effect once published on this page — the date is shown at the top.