Privacy Policy

1. Introduction

This Privacy Policy describes how Preplink Limited ("Preplink", "we", "us", "our") collects, uses, discloses, and protects your personal data when you use our website, mobile applications, and services.

We are committed to protecting your privacy and processing your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the Irish Data Protection Acts 1988-2018, and other applicable data protection laws.

2. Data Controller

The data controller responsible for your personal data is:

3. Data We Collect

3.1 Information You Provide

• Account Data: Name, email address, password, profile photo
• Profile Data: Employment history, education, skills, career preferences, job titles
• Resume Data: CV content, work experience, qualifications, certifications
• Communication Data: Messages, feedback, support requests
• Payment Data: Billing address, payment method details (processed by Stripe)

3.2 Automatically Collected Data

• Device Data: IP address, browser type, operating system, device identifiers
• Usage Data: Pages visited, features used, time spent, click patterns
• Location Data: Approximate location based on IP address
• Cookie Data: See our Cookies section below

3.3 Third-Party Data

• Social Login: Profile information from Google, LinkedIn, or Apple when you sign in
• Job Boards: Application status and job data from integrated platforms

4. How We Use Your Data

We use your personal data to:

• Provide Services: Create and manage your account, deliver our AI-powered career tools
• Personalise Experience: Tailor job recommendations, resume suggestions, and interview practice
• Process Payments: Handle subscriptions, billing, and refunds
• Communicate: Send service updates, respond to enquiries, provide support
• Improve Services: Analyse usage patterns, develop new features, fix bugs
• Ensure Security: Detect fraud, prevent abuse, protect our systems
• Legal Compliance: Meet legal obligations, respond to lawful requests
• Marketing: Send promotional content (with your consent)

5. Legal Basis for Processing

Under GDPR, we process your data based on:

6. AI & Automated Processing

Our services use artificial intelligence and automated processing to:

• Generate resume content and suggestions
• Create personalised cover letters
• Provide interview practice questions and feedback
• Match you with relevant job opportunities
• Analyse your profile for career recommendations

Your Rights: Under GDPR Article 22, you have the right not to be subject to decisions based solely on automated processing that significantly affect you. Our AI tools provide suggestions that you review and control. You can request human review of any automated decision by contacting us.

7. Data Sharing

We do not sell your personal data. We may share your data with:

• Service Providers: Cloud hosting (Google Cloud), payment processing (Stripe, RevenueCat), analytics (PostHog), email services (Brevo)
• Job Platforms: When you use Auto-Apply, your data is shared with job boards you select
• AI Providers: Gemini by Google for AI-powered features (data is processed per Google's privacy policies)
• Legal Requirements: When required by law, court order, or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

8. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States. When we transfer data outside the EEA, we ensure appropriate safeguards:

• EU-US Data Privacy Framework certification
• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions by the European Commission

9. Data Retention

We retain your data for as long as necessary to provide our services and fulfil the purposes described in this policy:

• Account Data: Until you delete your account, plus 30 days for backup recovery
• Resume & Profile Data: Until you delete your account
• Payment Records: 7 years for tax and legal compliance
• Usage Logs: 12 months
• Support Communications: 3 years

After account deletion, we may retain anonymised data for analytics and service improvement.

10. Your Rights Under GDPR

As a data subject, you have the following rights:

To exercise your rights, contact us at privacy@preplink.ai. We will respond within 30 days.

Right to Lodge a Complaint: You have the right to lodge a complaint with the Irish Data Protection Commission (www.dataprotection.ie) or your local supervisory authority.

11. Security

We implement appropriate technical and organisational measures to protect your data:

• Encryption in transit (TLS/SSL) and at rest
• Secure authentication and access controls
• Regular security assessments and monitoring
• Employee training on data protection
• Incident response procedures

While we strive to protect your data, no method of transmission or storage is 100% secure. Please use strong passwords and protect your account credentials.

12. Cookies & Tracking

We use cookies and similar technologies to:

• Essential Cookies: Required for the service to function (authentication, security)
• Analytics Cookies: Help us understand how you use our service (PostHog)
• Preference Cookies: Remember your settings and preferences

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect service functionality.

13. Children's Privacy

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately at privacy@preplink.ai.

14. Changes to This Policy

We may update this Privacy Policy periodically. When we make material changes:

• We will update the "Last Updated" date
• We will notify you via email or in-app notification
• We may ask for your consent where required by law

15. Contact Us

For privacy-related enquiries or to exercise your rights: