Privacy Policy

This policy explains how Novocruit uses your personal data. It applies under the UK GDPR and Data Protection Act 2018, the EU GDPR, and the Swiss Federal Act on Data Protection (FADP).

Who we are

Novocruit is operated by Novocruit Ltd, a private limited company registered in England and Wales (company number 16668353). Novocruit Ltd is the data controller for your personal data. Contact us about privacy at joshua@novocruit.com.

Data we collect

• Account details: name, email address, password (stored securely hashed), and sign-in history.
• Profile and career information you provide: CVs, LinkedIn text, job targets, visa status and work history.
• Content you create: messages, community posts, questions, attachments and tool inputs and outputs.
• Payment information: handled by Stripe. We do not store your full card details.
• 1:1 session bookings made through Calendly.
• Technical data: device, browser, and essential usage logs needed to run and secure the service.

Why we use it and our legal bases

• To provide your account, tools, lessons and support (performance of a contract).
• To take payments and keep financial records (contract and legal obligation).
• To keep the platform secure and prevent abuse (legitimate interests).
• To send service emails such as receipts, password resets and session reminders (contract).
• We do not currently send marketing emails. If we start, we will only do so with your consent, which you can withdraw at any time.

Visa or immigration status you share may be sensitive. We use it only to tailor guidance you ask for.

AI processing

Some tools use AI: you can upload a CV or other document, or paste text such as your LinkedIn profile, and the tool sends that content to an AI model provider, Anthropic, to generate feedback or a rewrite. Your content is used only to produce your result and is not used by us to train AI models. AI output is guidance only and should be checked before use.

Documents and tool outputs are stored in your account so you can view them again. They are visible to you, and to our team only where a feature requires it (for example a personalised review you request). We do not otherwise read or share them. You can delete your uploaded documents at any time, and they are deleted when you delete your account.

Who we share data with

We use trusted service providers ("processors") to run Novocruit. They may only use your data to provide their service to us, under data processing terms. We never sell your data.

• Anthropic (AI model provider for the AI tools): United States.
• Our hosting, database, file storage and email delivery providers: the United States and the EU.
• Stripe (payments): United States and EU.
• Calendly (1:1 bookings): United States.
• Zoom (live sessions): United States.

We do not send your CVs or other content to anyone else, including employers. Our team only views your content where a feature needs it, such as a review you request or a message you send us.

International transfers

The countries listed above include the United States, which is outside the UK, EU and Switzerland. Where data goes there, we rely on the UK–US data bridge, the EU–US and Swiss–US Data Privacy Frameworks where the provider is certified, or standard contractual clauses (including the UK Addendum and Swiss amendments).

How long we keep it

We keep your account data while your account is active. When you delete your account, we delete or anonymise your personal data, except records we must keep by law (such as payment records, usually kept for six years).

• Accounts with no sign-in for two years are deleted automatically. We email you about 30 days beforehand; signing in keeps your account. Accounts with an active paid subscription are not deleted this way.
• AI tool results and saved CVs are deleted two years after they were created.
• CVs submitted for a Monthly Review are deleted 12 months after the review is delivered.

Your rights

You can download a copy of your data or delete your account yourself at any time from the Account page. Deleting your account also cancels any subscription immediately.

You can also ask to access, correct, delete, restrict or export your data, object to processing, or withdraw consent. Email joshua@novocruit.com and we will respond within one month. You can also complain to the UK Information Commissioner's Office (ico.org.uk), your local EU data protection authority, or the Swiss FDPIC.

Age

Novocruit is for people aged 18 and over. We do not knowingly collect data from anyone younger; if we learn we have, we will delete it.

Subscriptions and cancellation

When you subscribe you ask for immediate access to digital content, so your 14-day cancellation right ends once access begins. See our Terms for details. You can cancel future renewals at any time.

Changes

We will update this page if our practices change and tell you about significant changes by email.