Privacy Policy

Gephra ATS Resume Optimizer

Last Updated: January 15, 2025

Table of Contents

1. Introduction

Gephra ("we," "our," or "us") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our ATS resume optimization service.

Scope: This policy applies to all users of Gephra's services, regardless of location, and complies with international data protection standards including GDPR, CCPA, PIPEDA, LGPD, and other applicable privacy laws.

By using our service, you consent to the data practices described in this policy. If you do not agree with our practices, please do not use our service.

2. Information We Collect

2.1 Personal Information

Resume Content

Your uploaded resume files, including personal details, work experience, education, skills, and other career-related information.

Job Posting Data

Job descriptions and requirements you provide for optimization purposes.

Contact Information

Email address, name, and other contact details you provide.

Payment Information

Billing details processed through PayPal (we do not store credit card information).

2.2 Technical Information

2.3 Special Categories of Data

Your resume may contain sensitive information such as:

We process this information only as necessary for resume optimization and with appropriate safeguards.

3. How We Use Your Information

3.1 Primary Purposes

3.2 Legal Bases (GDPR)

3.3 Third-Party Processing

We use the following third-party services:

4. Information Sharing and Disclosure

4.1 We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4.2 Limited Sharing

We may share your information only in these circumstances:

4.3 AI Processing Partners

Your resume content is processed by OpenAI under strict data processing agreements that ensure:

5. Data Storage and Security

5.1 Security Measures

5.2 Data Locations

Your data is primarily stored in:

5.3 Breach Notification

In the event of a data breach, we will notify affected users within 72 hours as required by GDPR and other applicable laws.

6. Your Privacy Rights

Right to Access

Request copies of your personal data

Right to Rectification

Correct inaccurate or incomplete data

Right to Erasure

Request deletion of your personal data

Right to Portability

Receive your data in a structured format

Right to Restriction

Limit how we process your data

Right to Object

Object to certain types of processing

6.1 How to Exercise Your Rights

To exercise any of these rights, contact us at:

Privacy Requests

Email: privacy@gephra.com

Response Time: Within 30 days (GDPR) or 45 days (CCPA)

6.2 Jurisdiction-Specific Rights

European Union (GDPR)

EU residents have additional rights including the right to lodge a complaint with their local supervisory authority.

California (CCPA)

California residents have the right to know, delete, opt-out, and non-discrimination. Call our toll-free number: 1-800-GEPHRA-1

Canada (PIPEDA)

Canadian residents have the right to access, correct, and challenge our data practices.

7. International Data Transfers

7.1 Transfer Mechanisms

When transferring data internationally, we use appropriate safeguards:

7.2 Data Localization

We comply with data localization requirements in jurisdictions that require it, while maintaining service functionality.

8. Cookies and Tracking Technologies

8.1 Cookie Categories

8.2 Consent Management

You can manage your cookie preferences through our consent management platform. Essential cookies cannot be disabled as they are necessary for service operation.

9. Data Retention

9.1 Retention Periods

9.2 Automatic Deletion

We automatically delete resume content and personal information according to our retention schedule, unless you request earlier deletion.

10. Children's Privacy

Our service is not intended for children under 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected such information, we will delete it immediately.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by:

Continued use of our service after changes constitutes acceptance of the updated policy.

12. Contact Information

Data Protection Officer

Email: dpo@gephra.com

Address: Gephra Privacy Office, Kigali, Rwanda

General Privacy Inquiries

Email: privacy@gephra.com

Phone: 1-800-GEPHRA-1

Address: Kigali, Rwanda

EU Supervisory Authority

If you are an EU resident, you have the right to lodge a complaint with your local data protection authority.