Privacy Policy
Tigran Galstyan ("cAIerra", "we", "us") is the controller responsible for personal data processed through cAIerra. Contact: tgalstyan2100@gmail.com, Ler Kamsar St. 30/3, Apt. 9, Yerevan, 0019, Armenia. This policy explains what we process, why, who receives it, retention, international processing, security and your choices.
Who may use cAIerra
cAIerra is intended only for people who are at least 18 years old. We do not knowingly collect personal data from anyone under 18. If we learn that such an account exists, we will restrict it and take deletion or other steps required by law.
Data we process
- Account and authentication: email address, interface language, internal user ID, password hash, sign-in provider and security records.
- Career profile: name, contact details, location, work history, education, skills, languages, qualifications, salary and job preferences, links and confirmed career facts.
- Content you provide: CVs, certificates, portfolios, cover letters, other documents, chat messages and instructions.
- Career activity: search directions, matches, saved, viewed or dismissed vacancies, applications, drafts, reminders and notification preferences.
- Subscription and device data: product and entitlement status, renewal and expiry information, push token, app version and limited diagnostic/security logs. Apple processes payment credentials; cAIerra does not receive your full card number.
Sensitive data
cAIerra does not need health, biometric, political, religious, trade-union, sexual-life, national-origin or ethnic-origin data for career matching. Do not upload these details and remove them from CVs or other documents. If such data is found, we may restrict its processing or ask you to delete or replace the document.
Purposes and legal grounds
- Provide the account, documents, matching, search and application tools: performance of the service contract and steps you request.
- Send service and job notifications: your settings and, where required, device permission.
- Protect accounts, prevent abuse, troubleshoot and maintain service integrity: legitimate interests and legal obligations.
- Process relevant career data through the OpenAI API: only after the separate informed permission described below and only for a feature you request.
- Meet accounting, regulatory, dispute and lawful-authority requirements: applicable legal obligations.
External AI processing and separate permission
Before cAIerra sends any personal data, the app clearly identifies OpenAI as the recipient, describes the data categories and purpose, and asks for separate permission. After you agree, only data relevant to the requested feature may be sent through the OpenAI API, including profile data, document text, chat messages, vacancy context and application instructions, to analyze your profile, support career chat, assess opportunities or prepare requested materials. For supported API requests, cAIerra disables application-level response storage and does not enable optional API data sharing for model training. OpenAI may process or temporarily retain limited service or security data under its business terms, data-processing agreement and legal obligations. OpenAI API data is not used to train models by default unless the API customer voluntarily opts in to such sharing.
You can withdraw permission from Profile → Legal & Privacy. Withdrawal stops future third-party AI processing until you consent again. It does not affect the lawfulness of processing already completed or automatically erase data held in cAIerra; you can delete content or the account separately. The version and time of permission and withdrawal are retained as evidence until account deletion or another legally required period.
Other processors and recipients
Providers needed to operate the service may include Apple and Google for authentication, RevenueCat for subscription entitlement management, Expo for app and push infrastructure, OpenAI for user-authorized AI processing, and contracted hosting, database, private storage, monitoring and support providers. cAIerra contractually requires every processor that receives personal data, including OpenAI, to provide the same or equivalent protection required by this Privacy Policy and applicable law. We do not sell personal data, use it for third-party advertising, or perform cross-app tracking.
International processing
OpenAI and other providers may process data outside Armenia or your country. cAIerra applies the relevant lawful transfer mechanisms and contractual safeguards, and where authority permission is required, the transfer is made only after that requirement is satisfied. GDPR international-transfer rules also apply where EU/EEA individuals are covered. Contact tgalstyan2100@gmail.com for information about a transfer safeguard.
Retention and deletion
Account, profile and user content are retained while the account is active and as needed to provide the service. Deleting the account removes cAIerra active-system account data, uploaded documents, profile, career memory, conversations, applications and related records, and sends deletion or de-linking requests to applicable providers. Isolated encrypted backups age out under the documented rotation. Providers may retain limited transaction, security or legal records only for their mandatory retention period.
Security
Safeguards include HTTPS, access control, authenticated file access, encrypted provider credentials, least-privilege service accounts, upload validation, server-side subscription and consent enforcement, log minimization, backups and production configuration checks. No service can guarantee absolute security. We will follow Armenian and other applicable breach-notification duties if personal data is exposed.
Your rights and controls
Inside the app you can review and correct profile data, remove documents, change notification settings, export a portable JSON copy of account data, withdraw future AI permission and delete the account. Depending on applicable law, you may also request access, correction, blocking, erasure, restriction, portability, objection or withdrawal of consent by contacting tgalstyan2100@gmail.com. We may reasonably verify identity. Armenian law can impose short response periods for written requests, so all privacy requests are escalated promptly.
Subscriptions and account deletion
Deleting a cAIerra account does not cancel Apple billing. Use Manage Subscription or Apple ID subscription settings to stop renewal. Apple controls payment and refund decisions. Eligible purchases can be restored in cAIerra.
Changes and complaints
Material changes will be shown through a new version and, where appropriate, a new in-app acceptance or permission request. Contact tgalstyan2100@gmail.com with a request or complaint. You may also contact the competent data-protection authority.