Privacy Policy

1. Scope and who we are

This Privacy Policy explains how Pro Technology INC., operating under the “Olyres” name (“Olyres,” “we,” “us” or “our”), collects, uses, discloses, retains and protects personal information when you access or use the Olyres website, applications, résumé-building and editing tools, ATS analysis features, AI-assisted features, cover-letter tools, job-application tracker, document exports and related services (collectively, the “Service”).

This Privacy Policy applies when Olyres determines why and how personal information is processed. It does not apply to information processed solely on behalf of an enterprise customer under a separate data-processing agreement, where that customer is the organization responsible for the information. It also does not apply to third-party websites, job boards, employers, recruiters or services that have their own privacy practices.

“Personal information” or “personal data” means information about an identifiable individual, or information treated as personal information under applicable privacy law. It does not include information that has been irreversibly anonymized so that it cannot reasonably be linked to an identifiable person.

Your use of the Service is governed by our Terms of Service.

2. Personal information we collect

2.1 Account and identity information

Name, email address, login credentials or authentication identifiers, profile information, account preferences, language, country or region, and records of consent or acceptance.

2.2 Résumé, career and application content

Résumés, CVs, cover letters, job descriptions, employment and education history, skills, certifications, achievements, salary or role preferences, links, contact details, application status, notes, interview information and other content you choose to enter, upload, create, edit or store.

2.3 AI prompts, instructions and outputs

Prompts, selected résumé sections, job descriptions, rewrite instructions, feedback, generated suggestions, accepted or rejected changes, and safety or abuse signals associated with AI features.

2.4 Subscription and transaction information

Plan, billing cycle, transaction identifiers, invoices, tax country, billing contact details, payment status, refunds, chargebacks and related support records. Payment card details are generally collected directly by our payment processor and are not intended to be stored by Olyres.

2.5 Technical, usage and security information

IP address, device and browser type, operating system, identifiers, timestamps, pages and features used, referring URLs, session activity, performance logs, crash data, authentication events, approximate location derived from IP address, and security or fraud-detection information.

2.6 Communications and support information

Messages, support requests, survey responses, feedback, complaint records and attachments you send to us.

2.7 Information from third parties

Authentication providers, payment processors, referral partners, analytics providers, fraud-prevention providers and other services may provide account, transaction, technical or attribution information consistent with your settings and their privacy notices.

2.8 Sensitive and third-party information

Résumé content may reveal sensitive information such as immigration status, disability, union membership, ethnicity, religion, precise compensation or government identifiers. Olyres does not require most such information. Please avoid uploading sensitive information unless it is necessary for your use and you are authorized to provide it. Do not upload another person’s personal information without a lawful basis and appropriate authority.

3. How we collect information

• Directly from you when you register, subscribe, upload documents, use AI or ATS features, track applications, contact support or otherwise interact with the Service.
• Automatically through cookies, logs, local storage, software development kits and similar technologies when you use the Service.
• From service providers and partners, such as authentication, payment, hosting, analytics, email, fraud-prevention or referral providers.
• From publicly available or user-directed sources only when a feature clearly requests or permits that action.

4. Why and on what legal basis we process information

We process personal information only for identified and reasonable purposes. Depending on your location and the activity, our legal basis may be performance of a contract, consent, compliance with law, protection of vital interests, or our legitimate interests where those interests are not overridden by your rights.

5. AI-assisted features

Olyres uses artificial-intelligence providers to generate résumé suggestions, rewrites, summaries, cover letters, ATS-related recommendations and other outputs. When you invoke an AI feature, Olyres sends the prompt, the relevant résumé text, job description, instructions and limited technical metadata to the provider needed to return the requested output.

5.1 Which provider receives your content

Anthropic PBC is currently the only AI provider Olyres sends user content to. All AI features call Anthropic’s API using the claude-haiku-4-5 model. We do not send your content to any other AI or machine-learning provider. If that changes, we will update this section and, where the change is material, show you the AI notice again before your next AI action.

5.2 What is sent, feature by feature

Content is sent only when you invoke one of these features. Olyres does not send your saved résumés, cover letters or tracked applications to the AI provider in the background.

5.3 Accuracy, retention and training

AI outputs may be inaccurate, incomplete, biased, repetitive or unsuitable. You are responsible for reviewing and verifying every output before using or submitting it. Do not ask Olyres to invent credentials, employment, education, certifications, achievements or other facts.

Whether an AI provider retains prompts or uses them to improve its models depends on that provider, its product tier and the contractual configuration in place. Where such controls are commercially available we use them, and we describe below only terms we have verified apply to our requests.

Anthropic processes AI requests under its commercial API terms. Under those terms, inputs and outputs are not used to train Anthropic’s models, and API inputs and outputs are deleted from Anthropic’s systems within 30 days of receipt or generation — unless a different agreement, product feature or account configuration applies, or Anthropic needs to keep them longer to enforce its usage policy or to comply with law. Olyres has no zero-data-retention agreement and no longer-retention agreement with Anthropic, so these published defaults are the terms our requests are served under.

Anthropic may run inference in any available region by default. A data-residency option, such as US-only inference, can narrow that; Olyres sets none — neither on its API requests nor as an account default — so requests are served under Anthropic’s default global routing and may be processed outside your country. If Olyres later configures a residency option, this section will be updated.

We may use limited feedback, acceptance/rejection signals, safety events and de-identified usage information to evaluate feature quality. We will obtain additional consent where required before using identifiable résumé content for a materially different purpose.

6. Cookies and similar technologies

We may use strictly necessary cookies or local storage for authentication, security, load balancing, preferences and core functionality. These technologies are required for the Service to work and generally cannot be disabled through our consent tool.

With consent where required, we may use analytics, performance, personalization or advertising technologies to understand use of the Service and improve communications. A cookie banner or preference centre will identify the categories actually used and allow you to make available choices.

Browser controls may block or delete cookies, but doing so can impair authentication, saved preferences or other features. We will not describe technologies as “essential” merely because they are convenient for analytics or marketing.

7. How we disclose information

We do not sell personal information for money. We disclose personal information only as reasonably necessary for the purposes described below:

• Service providers: hosting, cloud infrastructure, databases, authentication, AI, analytics, email, customer support, error monitoring, security, payment processing, tax and document-processing providers acting for or with us.
• Your direction: employers, recruiters, job boards, contacts or other recipients when you choose to export, share or submit a document or direct us to connect with a third-party service.
• Professional advisers: lawyers, auditors, insurers, accountants and consultants subject to appropriate confidentiality obligations.
• Legal and safety reasons: courts, regulators, law-enforcement agencies or other parties where we reasonably believe disclosure is required by law, needed to protect rights or safety, investigate fraud or security incidents, or enforce agreements.
• Corporate transactions: actual or proposed financing, merger, acquisition, reorganization, insolvency or sale of assets, subject to appropriate safeguards and legal requirements.
• De-identified information: aggregated or anonymized information that does not reasonably identify an individual.

7.1 The service providers we actually use

We will update this table if we add or change a provider. Uploaded résumé files are parsed inside the Service itself and are not sent to a separate document-processing provider.

8. International processing and transfers

Olyres and its service providers may store or process personal information in countries other than the country where you live. Information processed in another country may be subject to that country’s laws and lawful requests from courts, regulators, law-enforcement or national-security authorities.

Where required by applicable law, we use appropriate contractual, organizational and technical safeguards for cross-border processing. These safeguards may include contractual data-protection terms, transfer assessments, access controls, encryption and other recognized transfer mechanisms.

Olyres remains accountable for personal information under its control when a service provider processes it on our behalf, subject to applicable law.

9. Data retention and deletion

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing the Service, maintaining security, resolving disputes, enforcing agreements and meeting legal, tax, accounting and regulatory obligations.

Your account and the content you create in it — resumes, cover letters, tracked job applications, editor drafts and analysis history — are retained while your account exists. We do not delete accounts for inactivity alone.

You can delete your account at any time from Account Settings, or by asking us. When you confirm a deletion, the process begins shortly afterwards and is complete within up to 4 weeks: your account content and sign-in credentials are removed from our active systems first, and residual copies held in encrypted backups are overwritten or isolated from ordinary use by the end of that window. Any renewing subscription is cancelled as part of the same process. We email a confirmation once the deletion has been carried out.

We retain technical and usage logs for up to 90 days where available, unless a shorter vendor default applies or longer retention is required for security, billing, fraud prevention, or legal purposes.

Security, transaction, tax, consent and legal records may be retained longer where reasonably necessary, including a limited record that a deletion was requested and performed. Deletion may also be delayed or limited where information is legally preserved, needed to prevent fraud, or retained in de-identified form. We will not restore deleted information to active use merely because it remains in a backup.

10. Security safeguards

We use administrative, technical and physical safeguards designed to protect personal information against unauthorized access, collection, use, disclosure, copying, modification, loss or destruction. Measures may include encryption in transit, access controls, least-privilege permissions, secure development practices, logging, monitoring, backups, vendor review and incident-response procedures.

No system is completely secure. You are responsible for using a strong unique password, protecting authentication methods and promptly notifying us of suspected unauthorized access.

Where required by law, we will notify affected individuals and regulators of a qualifying personal-information breach.

11. Your privacy rights and choices

Depending on your location and subject to legal exceptions, you may have the right to:

• Request access to personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of personal information.
• Obtain a portable copy of certain information.
• Withdraw consent, without affecting processing already lawfully completed.
• Object to or restrict certain processing.
• Opt out of non-essential marketing communications.
• Manage non-essential cookies through available controls.
• Complain to Olyres or an applicable privacy regulator.

You may exercise available self-service controls in your account or contact our Privacy Contact. We may request information reasonably necessary to verify identity and authority. We will respond within the period required by applicable law. We will not discriminate against you for exercising a privacy right.

12. Additional rights under applicable law

Depending on your location and the laws applicable to the processing, you may have additional rights concerning access, correction, deletion, restriction, objection, portability, consent withdrawal, automated processing, marketing, targeted advertising, profiling or complaints.

Mandatory rights and protections that cannot lawfully be waived remain available to you even if they are not expressly listed in this Privacy Policy. We will evaluate requests under the law applicable to the relevant person, processing activity and Olyres entity or service.

Olyres maintains a privacy-management program guided by generally recognized principles of accountability, transparency, purpose limitation, data minimization, accuracy, security safeguards, retention limitation and individual participation.

Our practices may be informed by frameworks such as the OECD Privacy Guidelines, the NIST Privacy Framework and ISO/IEC 27701. Reference to a framework does not mean that Olyres is certified, independently audited or fully compliant with every framework requirement.

13. Children and age limits

The Service is intended for adults who can enter a binding contract. Olyres does not knowingly collect personal information from children under thirteen (13), and the Terms of Service require users to be at least eighteen (18) or the age of legal majority in their jurisdiction, whichever is higher.

If you believe a child has provided personal information in violation of these requirements, contact us so we can investigate and take appropriate action.

14. Third-party services and links

The Service may link to or integrate with third-party services such as authentication providers, job boards, employers, recruiters or document viewers. Their collection and use of information is governed by their own privacy notices. Review those notices before directing Olyres to share information or leaving the Service.

15. Business transfers

Personal information may be reviewed or transferred in connection with a proposed or completed financing, merger, acquisition, reorganization, insolvency, sale of assets or similar transaction. We will use reasonable safeguards and provide notice or obtain consent where required by law.

16. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes in law, technology, providers, security practices or the Service. The revised version will show a new “Last Updated” or effective date.

For material changes, we will provide reasonable notice through the Service, email or another appropriate method. Where required, we will obtain renewed consent before applying a materially different use or disclosure.

17. Contacting us and complaints

Please describe your request or concern clearly. We may need to verify your identity before acting. If you remain dissatisfied, you may contact the privacy or data-protection authority that has jurisdiction over the matter.