1. Data controller
Neguso AI Career Hub ("Neguso", "we", "our" or "us") is the data controller for personal data processed through this website and related services. Neguso currently operates as a sole trader based in Ireland; business registration details will be published here once issued.
Privacy & GDPR: privacy@negusoaicareerhub.ie
Registered address: Ireland (full postal address available on request to the privacy contact above).
2. Definitions
- Personal Data — any information relating to an identified or identifiable natural person.
- Processing — any operation performed on Personal Data (collection, storage, use, disclosure, deletion).
- User — any person who visits the Website or uses the Services.
- Account — the authenticated profile a User creates to access the Services.
- AI Services — features powered by machine-learning models (CV review, interview practice, in-app assistant).
- Coach — a human career coach delivering sessions through Neguso.
- Customer — a User who has purchased a paid Service.
- Website — negusoaicareerhub.ie and any Neguso-operated subdomains.
3. Personal data we collect
- Account data: name, email, hashed password, authentication provider.
- Profile data: professional headline, target roles, preferences.
- Content you upload: CVs, cover letters, notes, interview recordings.
- Booking data: services selected, date/time, coach, notes.
- Payment data: transaction reference, amount, currency (processed by Stripe).
- Technical data: IP address, device, browser, log timestamps.
- Support data: messages you send to us.
4. How we use your data
- Deliver the service you requested (CV review, interviews, coaching, bookings).
- Authenticate you and keep your account secure.
- Process payments and issue receipts.
- Improve the service through aggregated, anonymised analytics.
- Comply with legal obligations (tax, accounting, DPC requests).
- Respond to your support requests.
5. Legal basis for processing
- Contract (Art. 6(1)(b)): account, bookings, AI reviews, payments.
- Legitimate interests (Art. 6(1)(f)): security, fraud prevention, aggregated analytics, service improvement.
- Consent (Art. 6(1)(a)): marketing emails, non-essential cookies.
- Legal obligation (Art. 6(1)(c)): tax and accounting records.
We do not rely on Article 6(1)(e) (public task). We do not intentionally process special categories of personal data (Article 9). Please do not upload health, biometric, religious, political or similar data in your CV or messages unless it is strictly necessary; if you do, you provide explicit consent under Article 9(2)(a) for us to process it solely to deliver the Service you requested.
6. CV uploads and AI processing
When you upload a CV or take part in AI interview practice, the content is stored in an access-controlled bucket and sent to our AI provider (via the Lovable AI Gateway) solely to generate feedback, scoring and suggestions. Neguso does not train foundation models on your uploads. Where our upstream AI providers (for example Google via the Lovable AI Gateway, or OpenAI under business API terms) publish default terms stating that API inputs are not used to train their foundation models, we rely on those terms; we do not make additional contractual claims on their behalf. If a provider's terms change, we will update this page.
AI output is advisory. See our AI Transparency page for limitations, oversight and known risks.
7. Automated decision-making
AI-generated CV scores, interview feedback and suggestions are intended to assist you. They are not used to make decisions that produce legal effects or similarly significant effects on you within the meaning of Article 22 GDPR. Human review is available for coaching services, and any AI report can be escalated to a human coach on request.
8. Children
Our Services are intended for adults aged 16 and over. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, contact privacy@negusoaicareerhub.ie and we will delete it.
9. Booking data
Bookings for coaching and pod sessions are recorded with the service, coach, date, time, notes and payment status. Coaches you book with can see the information needed to deliver the session.
10. Payment data
Card payments are processed by Stripe Payments Europe, Ltd. (Ireland). Neguso never stores full card numbers. We keep transaction metadata for tax and dispute purposes.
11. Processors and sub-processors
We rely on the following categories of processors to run the Service:
- Stripe Payments Europe, Ltd. (Ireland) — payment processing.
- Supabase — authentication, database, file storage.
- Lovable — application hosting, AI gateway routing, transactional email delivery.
- Google (Gemini via Lovable AI Gateway) — AI-generated feedback and scoring.
- Cloudflare — edge compute and CDN for the Website.
- Google Analytics — aggregated website analytics, only when you consent.
A current sub-processor list is available on request at privacy@negusoaicareerhub.ie.
13. Marketing
We only send marketing emails with your explicit opt-in. You can withdraw consent at any time via the unsubscribe link or by emailing info@negusoaicareerhub.ie.
14. Data retention
- Account data: for the life of your account plus 30 days after deletion.
- CV uploads and AI reports: 12 months by default; you can delete earlier.
- Booking records: 6 years (Irish statutory record-keeping).
- Payment records: 6 years (Revenue Commissioners requirement).
- Support correspondence: 24 months.
You may delete uploaded files and AI reports at any time from your account, subject to legal retention obligations (e.g. tax records) that override deletion requests for the statutory period.
15. Your rights under GDPR
You have the following rights:
- Access your data (Art. 15).
- Rectify inaccurate data (Art. 16).
- Erasure / "right to be forgotten" (Art. 17).
- Restrict processing (Art. 18).
- Data portability (Art. 20).
- Object to processing (Art. 21).
- Withdraw consent at any time.
- Lodge a complaint with the Irish Data Protection Commission.
How to exercise your rights:
- Email privacy@negusoaicareerhub.ie from the address associated with your account.
- We may need to verify your identity before responding, especially for access or erasure requests.
- We respond within one calendar month (GDPR Art. 12), extendable by two further months for complex requests, with notice.
- We may refuse or charge a reasonable fee for requests that are manifestly unfounded, repetitive or excessive, and will explain why.
16. International data transfers
Data is primarily hosted in the EU. Where sub-processors operate outside the EEA (for example certain AI providers), transfers rely on the European Commission's Standard Contractual Clauses (SCCs), the UK International Data Transfer Addendum where UK transfers apply, and applicable adequacy decisions (e.g. the EU–US Data Privacy Framework). Additional supplementary measures such as encryption in transit and at rest are applied where required.
17. Security
We implement HTTPS/TLS for all traffic, encryption at rest, row-level authorisation, least-privilege role-based access control, multi-factor authentication for administrative accounts, secure managed backups, security monitoring and alerting, vulnerability management, regular software updates, and audit logging of sensitive actions. Full detail is in our Security Policy.
18. Data breach notification
If a personal-data breach is likely to result in a risk to individuals, we will notify the Irish Data Protection Commission within 72 hours (GDPR Art. 33) and affected individuals without undue delay where the breach is likely to result in a high risk (GDPR Art. 34).
19. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be communicated through the Website or by email where appropriate. The "Last updated" date at the top of this page reflects the most recent revision.
20. Contact and supervisory authority
Reach the right team directly:
- Privacy & GDPR: privacy@negusoaicareerhub.ie
- Legal enquiries: legal@negusoaicareerhub.ie
- Security reports: security@negusoaicareerhub.ie
- General support: info@negusoaicareerhub.ie
You may also contact the Irish Data Protection Commission at www.dataprotection.ie, 21 Fitzwilliam Square South, Dublin 2, D02 RD28.