Privacy Policy

This Privacy Policy explains what personal data Ytick collects, why we collect it, who we share it with, and the choices and rights you have. It applies to candidates, students, and recruiters using the Platform.

1. Data we collect

Account & profile data

• Name, email address, and password (handled via our authentication provider).
• Role (candidate, student, or recruiter) and, for recruiters, company details and verification documents.

CV / resume & career data

• The content of CVs/resumes you upload, including work history, education, and skills.
• Target job roles, job descriptions you paste or share in for analysis (including via our browser extension and mobile app), gap analysis results, generated cover letters, application answers, ATS scores, and skills test results.
• Application tracker entries you create (job title, company, status, notes).
• For students: subjects and interests you provide, career exploration and pathway data, quiz and assessment results, learning roadmaps, flashcards generated from curriculum content you upload, and educational game progress.
• Course and learning preferences used to recommend third-party courses (e.g. from YouTube, Coursera, and edX).

Recruiter data

• Company details, professional role, contact details, and identity/LinkedIn verification information.
• Shortlists, candidate review notes, job postings you create, and earnings/payout records where you use paid review features.

Payment data

• Subscription and payment status, plan type, and transaction history. Card details are entered directly into Stripe's secure checkout and are never stored on our servers.

Usage data

• Pages visited, features used, and approximate usage counts (e.g. number of searches or enhancements), used for plan limits and product improvement.

Device & technical data

• When you use our mobile app, device information and push notification tokens (where you enable notifications) so we can deliver alerts such as recruiter responses.
• When you use our browser extension, the job posting content on the page you choose to analyse. The extension acts only on pages where you actively use it and relies on your existing signed-in session.

2. How we use your data

• To provide the Platform's features: gap analysis, resume enhancement, cover letter and application answer generation, skills testing, salary intelligence, career path suggestions, and the application tracker.
• To provide student features: career exploration and suggestions, "day in the life" and role insights, learning roadmaps and pathways, flashcards and study games, and quiz-based guidance.
• To recommend relevant third-party learning courses (e.g. from YouTube, Coursera, and edX) based on your skill gaps and interests.
• To process payments and apply coupon discounts where eligible.
• To match candidates with relevant job listings and, where applicable, with recruiters; and to enable recruiter tools such as candidate search, shortlisting, reviews, and job postings.
• To verify recruiter identity (including via LinkedIn) where required.
• To send transactional emails (such as verification codes, password resets, and review notifications) and, where you enable them, mobile push notifications.
• To enforce usage limits associated with your plan (free or premium).
• To communicate with you about your account, transactions, and (where you've opted in) product updates.
• To maintain platform security and prevent fraud or abuse.

3. AI processing of your data

To generate gap analyses, resume suggestions, cover letters, and career path recommendations, relevant portions of your CV/resume content and target job description are sent to our AI provider (OpenAI) for processing. This data is used to generate the response shown to you and is subject to OpenAI's data processing terms; we do not permit it to be used to train OpenAI's general-purpose models.

4. Who we share data with

We do not sell your personal data to third parties.

5. Data retention

We retain your account and CV/resume data for as long as your account is active. If you delete your account, we delete or anonymise your personal data within a reasonable period, except where we are required to retain certain records (e.g. transaction history) for legal, tax, or accounting purposes.

6. Your rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Export your data in a portable format.
• Object to or restrict certain processing, including marketing communications.
• Withdraw consent where processing is based on consent (e.g. non-essential cookies — see our Cookie Policy).

To exercise any of these rights, contact us at privacy@ytick.com. We may need to verify your identity before responding.

7. Data security

We use industry-standard measures including encryption in transit, role-based access controls, and secure third-party infrastructure to protect your data. No system is completely secure, and we encourage you to use a strong, unique password for your account.

8. International data transfers

Our service providers (including Supabase, OpenAI, and Stripe) may process data outside your home country. Where this occurs, we rely on appropriate safeguards such as standard contractual clauses to ensure your data remains protected.

9. Children's privacy

Ytick's student features are intended for users aged 16 and over. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us so we can remove it.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be notified via the Platform or by email before they take effect.

11. Contact

For privacy questions or to exercise your rights, email privacy@ytick.com.