← Back to Get The Offer

Privacy Policy

Effective 25 July 2026

This policy explains how Operational AI Systems Ltd("we", "us") collects and uses your personal data when you use Get The Offer(the "Service"), including our website and Chrome extension. We are the data controller for that personal data. It is written to meet our obligations under the UK GDPR and the Data Protection Act 2018.

Who we are

Operational AI Systems Ltd, a company registered in England and Wales (company number [COMPANY NUMBER — to confirm]), registered address [REGISTERED ADDRESS — to confirm]. For any privacy question or to exercise your rights, contact us at [privacy@your-domain — to confirm].

The data we collect

  • Account & identity: your name, email address, and profile photo (from Google sign-in), plus any phone number, location, LinkedIn or portfolio links you add.
  • Career data you create: CVs and CV content, work history, skills, achievements, cover letters, interview-prep notes, and learning progress.
  • Job-search activity: the opportunities you track, application details, notes, and job descriptions you capture (including via the extension).
  • Authentication data: the sign-in token that keeps you signed in. We do not read your email, and we never ask for access to your inbox.
  • Payment data (once paid plans launch): handled by our payment processor; we do not store full card details.
  • Technical data: essential cookies for keeping you signed in (see our Cookie Notice).

Please do not put special-category data (such as health, ethnicity or religious information) into free-text fields unless necessary; if you do, you consent to us processing it as part of your content.

Why we use it, and our lawful bases

  • To provide the Service (build CVs, track applications, generate content) — performance of our contract with you.
  • To keep the Service secure and working (rate limiting, preventing abuse) — our legitimate interests.
  • To take payment for paid plans — performance of our contract.
  • To meet legal obligations (e.g. tax records) — legal obligation.

AI processing

Features such as CV tailoring, cover letters and course generation send the relevant content (for example your CV and a job description) to our AI provider, OpenAI, to generate the output. OpenAI processes this data on our behalf to return a result and, under its API terms, does not use it to train its models. Outputs are AI-generated and may contain errors — always review them before use.

Who we share it with

We do not sell your personal data. We share it only with service providers who process it on our behalf:

  • Supabase — Database, authentication and file storage (See hosting region).
  • Vercel — Application hosting and content delivery (United States / global edge).
  • Google — Sign-in only (United States).
  • OpenAI — Generating CVs, cover letters, course content and other AI features (United States).
  • Stripe — Subscription billing and payment processing (once paid plans launch) (United States / global).

We may also disclose data where required by law, or to establish, exercise or defend legal claims.

International transfers

Your data is hosted in [HOSTING REGION — to confirm], and some processors above are located outside the UK (notably in the United States). Where data is transferred outside the UK, we rely on appropriate safeguards such as the UK International Data Transfer Agreement / Addendum or an adequacy decision.

How long we keep it

We keep your personal data for as long as your account is active. When you delete your account we permanently erase your data from our live systems promptly; residual copies in encrypted backups are overwritten on our normal backup cycle (within 30 days). We may retain limited records where required by law (e.g. transaction records).

Our free CV check: we read your CV to work out your result and do not keep it. The result of a check, and any email address you gave for it, is deleted after 90 days unless you create an account.

Your rights

Under UK data protection law you have the right to:

  • access a copy of your data — you can download it any time from Profile → Privacy & Your Data;
  • have inaccurate data corrected;
  • have your data erased — you can delete your account any time from the same place;
  • data portability (we provide your data in a machine-readable JSON file);
  • object to or restrict certain processing, and to withdraw any consent you have given at any time.

To exercise any right, use the in-app tools or email [privacy@your-domain — to confirm]. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk, though we'd appreciate the chance to help first.

Security

We protect your data with encryption in transit, database row-level security so users can only access their own data, and short-lived access tokens. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your information.

Children

The Service is not intended for anyone under 18, and we do not knowingly collect their data.

Changes

We may update this policy; we'll change the effective date above and, for material changes, notify you in the app or by email.

Operational AI Systems Ltd