Last updated: February 2026
1. Introduction
Welcome to Nuralto (“we,” “our,” or “us”). We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information in compliance with the General Data Protection Regulation (GDPR) and other relevant data-protection laws.
2. Data Controller
Nuralto is the Data Controller responsible for your personal information. If you have any questions about this policy, please contact us at privacy@applica.ai.
3. Information We Collect
- Account Information: Name, email address, password (encrypted), and billing details.
- Professional Data: Resumes, work history, education, skills, certifications, and portfolio links.
- Usage Data: How you interact with our platform, including job searches, saved jobs, and AI usage logs.
- Technical Data: IP address, browser type, device information, and cookies.
4. How We Use Your Data
We process your data for the following lawful purposes:
- To provide and maintain the Nuralto service (Contractual Necessity).
- To generate and optimize resumes using AI technology (Consent/Contract).
- To match you with relevant job opportunities (Legitimate Interest).
- To process subscription payments (Contractual Necessity).
- To improve our AI models and user experience (Legitimate Interest).
5. AI Processing & Third Parties
Our service uses Artificial Intelligence to analyze resumes and jobs. We share minimal necessary data with trusted third-party providers:
- AI Providers: (e.g., OpenAI, Anthropic) — Data is sent for processing only and is not used to train their public models without your explicit consent.
- Payment Processors: (e.g., Stripe) — For secure billing transactions.
- Hosting Services: For secure data storage and backup.
We ensure all third-party processors are GDPR compliant and bound by Data Processing Agreements.
6. Your Rights (GDPR)
Under GDPR, you have the following rights:
- Right to Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Correct inaccurate or incomplete data.
- Right to Erasure (“Right to be Forgotten”): Request deletion of your account and data.
- Right to Restrict Processing: Request to limit how we use your data.
- Right to Data Portability: Receive your data in a structured, machine-readable format.
You can exercise most of these rights directly through your Account Settings or by contacting us.
7. Data Retention
We retain your personal data only as long as your account is active or as needed to provide you services. If you delete your account, your personal data will be permanently removed from our active databases within 30 days, except where retention is required by law (e.g., tax records).
8. Security
We implement industry-standard security measures, including encryption at rest and in transit, to protect your data. However, no method of transmission over the Internet is 100% secure.
9. Cookies
We use essential cookies to keep you logged in and analytical cookies to understand how our site is used. You can control cookie preferences in your browser settings.
10. Updates to This Policy
We may update this policy from time to time. We will notify you of any significant changes via email or a notice on our dashboard.