Privacy Policy

1. Who this policy covers

Vundux (“we”, “us”) provides an AI-assisted career platform that compares your CV against a job description, identifies skill gaps, and builds a plan to close them. This policy applies to the Vundux website and application.

By creating an account you agree to this policy and to our Terms of Use.

2. Information we collect

Information you give us

• Account details — your name and email address, and a password that is stored only as a one-way hash. If you sign in with Google, Facebook or GitHub, we receive your name, email address and that provider’s account identifier instead of a password.
• Profile details — optional phone number, city, country, time zone and profile picture.
• Documents you upload — your CV and any job descriptions, including the file itself and the text extracted from it.
• Organization details — for Enterprise, the company name, contact details and seat count given on the application form.

Information the service creates

• Match scores, skill-gap findings, gap closure plans, recommended learning resources, and your progress through them.
• A record of metered actions — analyses run, documents added — so your plan allowance can be counted.
• Invoices and payment records for any purchase you make.

Information collected automatically

• Standard server logs, including IP address and browser type, kept for security and troubleshooting.
• The cookies described in section 6. We do not use advertising or cross-site tracking cookies.

We never receive your card details. Payments are entered on the payment provider’s own secure page. We store only the outcome, the amount, and a reference.

3. How we use your information

• To create and administer your account.
• To provide the service itself — analysing your CV against a job description, generating plans and resource recommendations.
• To count usage against the allowance included in your plan.
• To send service messages: email verification, password resets, payment receipts and important notices about your account.
• To take payment and issue invoices.
• To keep the service secure, investigate abuse, and meet our legal obligations.

We do not sell your personal information, and we do not use your CV or your analyses to advertise to you.

4. Artificial intelligence processing

This is the part of the service worth reading closely.

To produce an analysis, a plan or a set of recommendations, the text of your CV and of the job description is sent to our AI provider, OpenAI, and processed on their infrastructure. The result is returned to us and stored in your account.

We send only what the task needs, and we send it under a business agreement that does not permit your content to be used to train their models. If you would rather this did not happen, do not upload the document — the analysis features cannot work without it.

AI output can be wrong. Scores, gaps and recommendations are guidance to help you decide, not statements of fact and not a guarantee of any employment outcome.

5. Who we share information with

We share personal information only with service providers who need it to run Vundux, and only for that purpose:

• OpenAI — AI processing of CV and job-description text, as described above.
• Our payment provider — to take payment and confirm it. They handle your card details directly; we do not see them.
• Our email provider — to deliver verification, password reset and receipt emails.
• Google, Facebook or GitHub — only if you choose to sign in with them, and only to confirm your identity.
• Our hosting and database providers — to run the service and store your data.

If you join an Enterprise organization, the organization’s owner can see that you are a member and can remove your access. They cannot see your CV, your analyses or your plans.

We may also disclose information where the law requires it, or to establish or defend legal claims.

6. Cookies

Vundux uses two cookies, both strictly necessary:

• A session cookie, set when you sign in, so the service knows who you are. It is signed, cannot be read by JavaScript, and lasts one day — or thirty days if you choose “remember me”.
• A short-lived sign-in cookie, set only while you are signing in with Google, Facebook or GitHub. It protects that exchange from tampering and expires within ten minutes.

We do not set advertising, analytics or cross-site tracking cookies.

7. How long we keep it

• While your account is open — your profile, documents, analyses and plans are kept so they are there when you return.
• You can delete as you go — removing a CV, a job description or a plan deletes it from your account.
• After your account closes — we delete your personal data, except records we are required to keep, such as invoices and payment records retained for tax and accounting purposes.

8. How we protect it

• All traffic is encrypted in transit using HTTPS.
• Passwords are stored only as bcrypt hashes. We cannot read your password, and neither can anyone who obtains the database.
• Every request for your data is scoped to your own account, so one user’s documents cannot be reached by another.
• Card details never reach our servers; they are entered on the payment provider’s page.

No service can promise perfect security, but we treat a CV as sensitive and build accordingly.

9. Your rights

Depending on where you live, you may have the right to:

• Ask for a copy of the personal information we hold about you.
• Have inaccurate information corrected.
• Have your information deleted.
• Object to or restrict certain processing.
• Withdraw consent where we rely on it.

Much of this you can do yourself from Settings. For anything else, email us at privacy@vundux.app and we will respond within 30 days.

10. International transfers

Our providers may process your information in countries other than your own. Where that happens we rely on the safeguards those providers offer, including standard contractual clauses where they apply.

11. Children

Vundux is not intended for anyone under 16. We do not knowingly collect information from children. If you believe a child has given us personal information, contact us and we will delete it.

12. Changes to this policy

We may update this policy as the service changes. The date at the top shows when the wording last changed, and we will tell you by email before any change that materially affects your rights.

13. Contact us

Privacy questions and data requests: privacy@vundux.app

Anything else: support@vundux.app