Privacy Policy

BlackYack SUARL, Avenue Hédi Nouira, 5000 Monastir, Tunisia.

Manager: Mohamed Ghassen Brahim. Registered with the Tunisian Registre National des Entreprises (RNE) under RNE 1730839M.

We are established in Tunisia and we process personal data under Tunisian law: Loi organique n° 2004-63 of 27 July 2004 on the protection of personal data, its implementing decrees 2007-3003 and 2007-3004 of 27 November 2007, and Article 30 of the Constitution.

The authority that supervises us is the Instance Nationale de Protection des Données à Caractère Personnel (INPDP), 1 Rue Mohamed Moalla, 1002 Mutuelleville, Tunis, Tunisia — tel. +216 71 799 853, inpdp@inpdp.tn.

For privacy questions, contact hello@career-copilot.ai. See also our legal notice.

This policy covers two things: the waiting list on this site, and the Career CoPilot product itself once you have an account.

If you have only joined the waiting list, only the 'Waiting list' sections below apply to you. We do not hold a CV, an application history, or an interview recording for you.

Waitlist signup (required): your first name and email address.

Waitlist signup (optional): the stage of your career, the role you're targeting, your top goal, and the interface language you signed up in.

Operational metadata: creation and update timestamps, the signup source (always 'landing' for this page), and an internal sequence number used to print the boarding-pass code on your welcome email.

Browser telemetry: pageviews, navigation events, JavaScript exceptions, and outbound HTTP calls (see 'Analytics and cookies' below).

Account identity: your email address and authentication details, handled by our authentication provider (see 'Who else processes your data').

Your CV and career history: the full text of any CV you upload, including your name, contact details, postal address, employment history, education, and anything else you have chosen to put in that document. This is the most detailed personal data we hold about you.

Job preferences and answers: target roles, locations, salary expectations, work authorisation, and the answers you save for reuse in application forms.

Application activity: which jobs you were matched with, which you applied to, the state of each application, and any messages exchanged through a relay email address we issue on your behalf.

Generated documents: tailored CVs and cover letters produced for a specific job.

Interview practice audio: if you use the voice interview feature, the audio of that session and its transcript.

A CV can incidentally reveal sensitive data within the meaning of Article 14 of Loi 2004-63 — health, racial or genetic origin, religious belief, political or philosophical opinion, or trade-union membership — as well as a photograph. We do not ask for any of it, we do not use it to make decisions, and we cannot stop it appearing in a document you upload. Please remove anything you would rather we did not process.

To notify you when the product launches and during the staged rollout.

To measure how visitors find us and which marketing channels lead to signups, via Google Ads conversion measurement. This is conversion attribution — not behavioural advertising and not profile-building.

To monitor site health, debug errors, and detect abuse, via Azure Application Insights.

We do not sell personal data.

Waitlist entries are stored in Microsoft Azure Cosmos DB (EU region).

Product data — your account, CV text, applications, and generated documents — is stored in Microsoft Azure (PostgreSQL and Blob Storage) in the EU.

Storage is in European data centres. AI processing is not: every model call goes to Alibaba Cloud in Singapore for the duration of the request, and the result comes back. We do not keep a copy of your data there; what that provider retains for abuse monitoring is governed by its own terms.

Email is sent through Resend. Resend receives the recipient address and the message content required to deliver it.

Site telemetry is sent to Azure Application Insights, backed by an EU-region Log Analytics workspace.

Google Ads conversion data is processed by Google LLC in the United States. The United States is therefore one of the countries your data can be sent to, and only if you accept analytics cookies — see 'International transfers'.

We retain waitlist entries until you ask us to delete them or until 24 months after launch, whichever comes first. Product data is retained while your account is open and deleted within 30 days of account closure. Telemetry is retained for 30 days. Conversion data follows Google's defaults.

We use the following processors. Each is bound by a data processing agreement and receives only what it needs for the purpose listed.

Microsoft Azure (Microsoft Ireland Operations Ltd) — hosting, database, storage, email relay infrastructure, and telemetry. EU regions.

Alibaba Cloud (Model Studio / DashScope, Singapore) — all of our AI processing, and the only processor that sees your CV for inference. It does four jobs: the embeddings that match you to roles, the models that read your CV and score your fit, the models that draft tailored CVs and cover letters, and the speech models behind the practice interview. This runs in Singapore, outside Tunisia — see 'International transfers' for what that means and what we remove before sending.

Clerk — account authentication and session management. Receives your email address and login metadata.

Dodo Payments — payment processing for Sprint purchases, acting as merchant of record, which is why it and not we calculates and remits your VAT. It receives your name, email address, billing country and the payment details you enter on its own hosted checkout page. We do not see or store your card number; we keep the order reference, the amount, and whether it succeeded.

Resend — transactional and announcement email delivery.

Google LLC — advertising conversion measurement only, and only if you accept analytics cookies.

We will update this list before adding a processor that handles your CV or application data.

Where your data is stored and where it is processed are two different questions, and they have two different answers.

Storage: your account, CV, applications, generated documents, and our telemetry are held by Microsoft Ireland Operations Ltd in Microsoft Azure's European data centres.

AI processing: Singapore. Every model call — the embeddings behind matching, the evaluation of your fit for a role, the drafting of tailored CVs and cover letters, and the practice interview — runs on Alibaba Cloud's international service in Singapore.

Advertising measurement: the United States. If, and only if, you accept analytics cookies, Google LLC receives conversion data there.

Article 31 of Loi 2004-63 requires us to name the countries your data is transferred to. In full, they are: Ireland and the other European Union countries where Microsoft Azure hosts our regions, Singapore, the United States, and Tunisia, from which we operate the service.

Tunisian law sets three rules for these transfers. Article 50 forbids any transfer that could harm public security or Tunisia's vital interests. Article 51 allows a transfer only to a country that ensures an adequate level of protection of privacy and of the rights and freedoms of individuals. Article 52 requires, in every case, the prior authorisation of the INPDP, which rules within one month.

Before your CV text is sent for matching we strip direct identifiers from it: email address, phone number, profile links, and street address. City and postcode are kept, because location is one of the strongest matching signals while a street number is not. Be clear about what that is: pseudonymisation, not anonymisation. Your employment history and education remain, and those can identify a person.

That stripping applies to the matching path. When a model evaluates your fit for a specific role or drafts a document for you, it needs the whole document, and the whole document is sent.

If you would rather no data of yours left Tunisia, do not upload a CV. The waiting list needs only a first name and an email address, and neither is ever sent to an AI service.

We operate the service from Tunisia. Our staff can access your data from here to run and support it — for example to investigate a fault you report. That access is limited to what the task requires and does not change where the data is stored.

Career CoPilot scores how well your profile fits a given job, and ranks and filters the jobs shown to you, automatically. These scores are produced by AI models without a human reviewing each one.

This affects what we show you inside the product. It does not decide whether you get a job — every application is submitted to an employer who makes their own decision, and for most roles you review and submit the application yourself.

You can ask us to explain how a score was reached, contest it, and request review by a person. Article 42 of Loi 2004-63 also lets you object to the processing; if you do, we suspend it while we deal with your objection. Email us at the address below.

If you use the practice interview feature, your microphone audio is streamed to Alibaba Cloud's realtime speech models in Singapore for transcription and response. Like the rest of our AI processing, that leaves Tunisia — see 'International transfers'.

We keep the transcript so you can review the session. You can delete a session at any time, which removes both the transcript and any stored audio.

This feature is optional. If you never start a voice session, no audio is ever captured.

We ask before we set any analytics cookies. The banner you see on first visit offers Accept and Reject — neither Application Insights nor the Google Tag is loaded until you accept. If you reject, no scripts are loaded, no telemetry is sent, and no Google or Microsoft cookies are set on your device.

If you accept: Azure Application Insights sets first-party cookies named ai_user and ai_session to distinguish browser sessions across pageviews. No advertising identifiers, no cross-site tracking.

If you accept: Google Ads sets cookies (typically _gcl_au) to attribute a signup to the campaign that brought you here. The Google Tag is loaded only in production builds.

We store a small localStorage entry (cc-consent-v1) recording your choice so we don't ask again on every visit. This entry is set whether you accept or reject. You can change your mind any time from the 'Cookie settings' link in the footer — that clears the entry, reloads the page, and re-asks.

Browser-level controls (Do Not Track, third-party cookie blocking, ad/tracking blockers) also work, since none of these cookies are essential to using the waitlist.

Tunisian law does not use a lattice of lawful bases. Under Article 27 of Loi 2004-63, processing personal data requires the express written consent of the person concerned, unless one of the narrow exceptions in Article 29 applies.

You give that consent by a means that leaves a written trace: by ticking the consent box on the waiting-list form, and by accepting these terms and this policy when you create an account. Article 12 limits us to the purposes stated here, and we do not repurpose your data.

You can withdraw your consent at any time by writing to us. Withdrawal stops the processing for the future; it does not undo what was lawfully done before.

Advertising is separate. Article 30 requires specific consent before personal data is used for direct advertising, and we ask for it separately in the cookie banner. We never use your CV, your applications, or your interview sessions for advertising.

Whether you answer is your choice, and this is what turns on it. The waiting list requires a first name and an email address — without them we cannot put you on the list; every other field is optional and leaving it blank costs you nothing. An account requires an email address, because that is how we authenticate you. A CV is required only for matching, tailoring, and evaluation: without one those features do not run, and the rest of the product still works. We do not refuse service, degrade it, or charge more because you left an optional field blank.

We collect your data from you directly (Article 44). We do not buy candidate profiles and we do not scrape you from other sites.

We do not disclose your data to a third party for that party's own purposes without your written consent (Article 47). Our processors act only on our instructions.

We destroy data once the purpose it was collected for has expired (Article 45). The retention periods are set out under 'Where it lives'.

Articles 32 and 33 of Loi 2004-63 give you the right to know what data we hold about you, and to have it corrected, completed, clarified, updated, or erased.

Article 42 gives you the right to object to the processing of your data. An objection suspends the processing immediately while we deal with it. You can also ask for review by a person of an automated evaluation (see 'Automated evaluation').

Article 27 lets you withdraw your consent at any time, and Article 45 requires us to destroy your data once the purpose has expired.

To exercise any of these rights, email hello@career-copilot.ai. We answer within one month.

If you are not satisfied with our answer, you can complain to our supervisory authority, the Instance Nationale de Protection des Données à Caractère Personnel (INPDP), 1 Rue Mohamed Moalla, 1002 Mutuelleville, Tunis, Tunisia — tel. +216 71 799 853, inpdp@inpdp.tn.