Legal

Privacy Policy

This policy explains what we collect, why, and the choices you have. We keep it plain because your data deserves plain answers.

Last updated: 6 October 2026

Who we are

StayHireable is operated by CloudDynamics Unipessoal Lda, a company established in Portugal (sociedade unipessoal por quotas). Tax ID: PT514857137. CloudDynamics Unipessoal Lda ("we", "us") is the data controller for personal data processed through stayhireable.com.

For privacy questions, including access, correction, export, or deletion requests, email hello@stayhireable.com.

What we collect

  • Account data: your email address, and any profile details you add (name, nickname, phone, address, language, timezone).
  • Career content: the information you put into a career, including any photo you upload. The downloadable file is a CV (PDF or PNG).
  • Payment data: if you subscribe, payments are handled by Stripe. We never see or store your full card details; we keep a customer and subscription reference to manage your plan.
  • Usage data: privacy-friendly, aggregate analytics (no cookies, no cross-site tracking) to understand what's working.
  • Where you came from: only if you allowed analytics or marketing cookies, we note on your account how you first reached us (for example a search engine, a site that linked to us, or a campaign name) when you sign up, to learn which channels bring members.

Reviews

If you submit a review of StayHireable, we store it with your account id, the rating, the text, and the display name you chose. Email is not stored on the review. If you tick "Show this on stayhireable.com", we may publish the rating, title, body, tags, display name, and date after a person reads it. We do not require a last name, photo, or employer. If you later delete your account, a published review is kept as an anonymous quote; unpublished reviews are deleted. You can withdraw publication anytime from the review form.

How we use it

  • To provide the service: your account, your careers, and publishing.
  • To process subscriptions and billing.
  • To write what you ask us to generate (a Career Story, a Career Deck, a Skills Map match, your Career Site's words, a Film's lines) and to find and score jobs for Job Hunt, via Anthropic.
  • To draw and voice a Career Film, a Career Story's voice, and a living portrait, via xAI.
  • To send account and security emails (always on) and, only if you opt in, tips and product updates.
  • To improve the product using aggregate, non-identifying analytics.

Who we share it with

We do not sell your data, and we don't share it for third-party advertising. These processors run parts of the service for us:

  • Amazon Web Services: hosting, authentication, and database. Account data (email, login, billing references, consent) is stored in the European Union (Frankfurt). Careers and what we generate from them live in the data region you choose.
  • Stripe: payments and subscriptions. The Stripe merchant is CloudDynamics Unipessoal Lda. We never see or store your full card details.
  • Cloudflare Turnstile: the "I am not a robot" check at signup.
  • Plausible: privacy-friendly, cookieless analytics on every page. It sets no cookie, stores nothing on your device and does not identify you, so it runs without asking.
  • Google (Tag Manager and Analytics): measurement of our public pages, only if you allow analytics or marketing, and never on the signed-in app or on a published Career Site.
  • X Corp. (X Ads pixel): measuring our ad campaigns on X, only if you allow marketing: on our public pages, and once when you create an account, with no email or other personal details.
  • Anthropic, PBC: Claude, which writes what we generate and runs Job Hunt's searches. See Claude and Anthropic.
  • xAI, Inc.: Career Film, voices, and the living portrait, via the Imagine and voice APIs. See Career Film and xAI.
  • Google Fonts: extra typefaces on a career (Roboto, Lato, and the other faces). Inter is self-hosted. A Google stylesheet loads only if you pick one of those other faces on a career.
  • Sentry: optional crash reports for the app, when that environment has error tracking on. Stack traces only; emails, career content, and document ids are stripped before they leave the browser.

If you choose Continue with Google, Facebook, or LinkedIn, that provider authenticates you and sends us the email, name, and profile picture on that account so we can create or sign in to your StayHireable account. We do not receive your social-network password. You can keep using email and a password instead.

Claude and Anthropic

Some of what we generate is written by Claude, a model made by Anthropic, PBC, through its API. When you ask for one of these, we send Anthropic text from the career, for that request only:

  • Career Story: your first name, title, summary, key achievements and skills, and for each job or study its title, organisation, year and achievement lines; and the job ad, if you added one.
  • Career Deck, your Career Site's words, and a Manifesto Film: your full name and the same career text; for the Deck, also the job ad you added.
  • A narrated Chronicle or a Teaser Film: your first name, title and summary, and each job's role, organisation, period, place and achievements.
  • Skills Map match: the job ad you pasted, your skills and certificates, and the titles, organisations, years and lines of your jobs and studies. No name.
  • Job Hunt: the search you saved, the profile you chose to share (headline, current role, years of experience, skills, languages, location and a short summary), and the titles and companies of jobs you saved or dismissed. No name and no CV. Claude writes web searches from it, which Anthropic runs.

We never send Anthropic your email address, phone number, photo, or the career as a file. Anthropic processes this in the United States, outside your chosen data region. Under its commercial terms it does not train its models on what we send or on what it returns, and it keeps API data only for a limited time, as its privacy policy sets out. What Claude writes is stored with the career, in its region.

Career Film and xAI

Career Film is on Max and Ultra. When you generate one, we send xAI, Inc. (Imagine API) what it needs to draw it: a prompt built from the career (job titles, employers, places and dates), the logos and country flags shown on those jobs, and your CV photo, so the film can show you. Spoken lines (a narrated Chronicle, a Teaser, a Manifesto, and a Career Story's voice) go to xAI's voice API; they use your first name. Animating your CV photo (the living portrait) sends that photo to xAI with a fixed instruction and nothing else. We do not send xAI your email address, phone number, or the career as a file.

xAI processes this outside your chosen data region (their API is in the United States). Their API terms state they do not train models on API inputs or outputs unless a customer opts in. They may keep API logs for up to 30 days for abuse review, then delete them. The finished film, voice and portrait are stored in the same region as the source career.

Only these steps send career content to xAI: generating a Film, a Career Story's voice, and a living portrait. Editing, PDF or PNG export, and publishing a career do not.

Connected assistants

You can connect an AI assistant to your StayHireable account. For now that is Claude, made by Anthropic: you add StayHireable as a connector in Claude and sign in to us when it asks. Once connected, the assistant can:

  • read your careers, your plan and what is left of your allowances, your Job Hunt matches, your Site Analytics, and your Career Stories, Interview Decks and Skills Map matches;
  • when you ask it to, change a career, make a copy of one, start an Interview Deck or a Skills Map match, save or dismiss a Job Hunt match, and publish or unpublish your Career Site.

It cannot delete a career or your account, change your plan, spend credits or make videos, images or audio. Every tool is listed on StayHireable in Claude. It never gets your password: you sign in on our page, and the assistant receives a key that works only for these things and expires. Your email address and phone number are left out of what it reads unless you ask it for them.

The assistant's provider is not one of our processors. What the assistant reads from StayHireable goes to it because you asked, and its provider processes it under its own terms, usually outside your chosen data region. For Claude those are Anthropic's consumer terms and privacy policy, or your organisation's agreement with Anthropic if you use Claude through work. What the assistant changes here is stored in the career's region, as if you had made the change yourself.

We record which assistants you connected, when, and when each last used your account, and keep that for 60 days after its last use or after you disconnect it. You can disconnect an assistant anytime in Settings, Connected assistants; it stops working at once.

Where your data lives

At signup we assign the closest data region (United States, European Union, Switzerland, or India) from your timezone; you can change the active region anytime from the region switcher. New careers are created in your active region. Each record keeps the region it was created in for as long as it exists. Data residency for careers is free on every plan. Your account itself stays in the EU, as above.

Anything we generate from a career follows that career. A Business Card, a Career Deck, a Skills Map, a Career Timeline, a Career Story, a Career Site or a Career Film is created in the same region as its source career, and the result is stored there. The exceptions are the requests to Anthropic and xAI described above; what they return is stored in the career's region. What an assistant you connected reads at your request goes to its provider, as described under Connected assistants.

Published careers

When you publish a career, its content is available at its link. A public link can be opened by anyone with the URL, and search engines may index it if they find it. A PIN-protected link still sits on a URL: only share the PIN with people you trust. Unpublish or delete to remove it from our published store.

AI assistants (such as ChatGPT, Claude and Perplexity) and search engines can read a public Career Site. They get its text without your email address or phone number. Crawlers that collect data to train AI models are turned away from Career Sites.

When someone opens a published Career Site, we count the view for its owner: the day, a rough country from the time zone their device is set to, the site that linked there, the kind of device, which parts of the page they reached and roughly how long it stayed open. These are plain counters. We set no cookie on a Career Site and keep no IP address or anything else that identifies the visitor.

Security

Your data is encrypted at rest and in transit. Careers are hosted on Amazon Web Services in the region you choose; account data is hosted in the EU. We use managed authentication with optional two-factor, and follow least-privilege access to the systems that hold your data. No system is ever perfectly secure, but we take reasonable, industry-standard measures to keep your information protected.

Your rights

If you are in the EU/EEA, GDPR rights to access, correct, export, and delete your data, and to object to certain processing, are against CloudDynamics Unipessoal Lda. Delete is in Settings. For access, correction, or a copy of account records, email hello@stayhireable.com. We aim to reply within 30 days.

If you are in California, we do not sell or share personal information for cross-context advertising. Email the same address to ask what we hold. Careers stored in Switzerland are under the FADP; careers stored in India are under the DPDP Act. Email us to exercise those rights too.

Deleting your account and data

You can permanently delete your account anytime from Settings. That removes your careers, generated assets, profile, and login, and cancels any active subscription. You can export a career as PDF or PNG from the builder before you delete. Aggregated usage counters used to enforce plan limits may remain so a new account cannot reset those limits. Billing records we must keep for tax and accounting stay as required by law. Backups expire on their own schedule.

Cookies

We aim to run cookie-light. Essential cookies keep you signed in. Our analytics are cookieless. If we ever add advertising pixels, we'll ask for your consent first.

Changes

We'll update this page when things change and revise the date above. This is an early-access product, so expect it to evolve.