Privacy Policy

1. Who This Applies To

This Privacy Policy applies to all users of Karia — the web platform operated by KariaOS Ltd ("we", "us", "our"). It explains what data we collect, why we collect it, how we use it, and your rights over it.

2. What We Collect

Information you give us directly:

• Your name, email address, and profile photo (via Google Sign-In).
• Your CV, work history, skills, salary expectations, and job preferences.
• Conversation history within the Karia chat interface.
• Application data: jobs you evaluated, applied to, or tracked.
• Payment information (processed by Paystack — we do not store card numbers).

Information collected automatically:

• Browser type, device type, and operating system.
• IP address and approximate location (country/city level).
• Session activity: pages visited, features used, time spent.
• Error logs and performance data to diagnose technical issues.

Information we do not collect:

• Your full payment card numbers (handled entirely by Paystack).
• Biometric data of any kind.
• Data from other apps or services on your device.

3. How We Use Your Data

We use your data exclusively to provide and improve Karia:

• To operate the AI agent: finding jobs, evaluating them, and generating application documents tailored to your profile.
• To maintain your application pipeline and career memory across sessions.
• To send account-related notifications (billing, important service changes).
• To diagnose bugs and improve platform performance.
• To detect and prevent fraud or abuse.

We do not use your career data for advertising. We do not sell, rent, or share your data with recruiters, employers, or third-party data brokers.

4. AI and Your Data

Karia uses AI models (including those provided by OpenAI and Anthropic) to power the career agent. When you interact with Karia, your messages and profile data are processed by these models to generate responses.

We do not use your personal data to train AI models — neither our own models nor any third-party model. Data sent to AI providers is governed by their API terms, which prohibit using API inputs to train their models.

AI-generated outputs (CVs, cover letters, evaluations) are stored in your account so you can access them later. You can delete them at any time.

5. Data Storage and Security

Your data is stored on Supabase (PostgreSQL) hosted on infrastructure compliant with industry security standards. Career memory (semantic embeddings) is stored using pgvector. Session state is cached via Redis.

We implement industry-standard security measures including:

• Encryption in transit (TLS/HTTPS) for all data.
• Encrypted storage for sensitive fields.
• Access controls limiting which team members can access user data.
• Regular security reviews.

No system is 100% secure. If we become aware of a data breach that affects you, we will notify you within 72 hours via your registered email address.

6. Data Retention

We retain your data for as long as your account is active. If you delete your account:

• Your profile, CV, and conversation history are deleted within 30 days.
• Anonymised aggregate usage data (no personal identifiers) may be retained for analytics.
• Billing records are retained for 7 years as required by Nigerian financial regulations.

7. Third-Party Services

We use the following third-party services to operate Karia:

Each provider has their own privacy policy. We select providers who meet industry data protection standards and who contractually prohibit using your data for purposes beyond service delivery.

8. Cookies

Karia uses cookies and local storage for:

• Keeping you signed in (authentication session).
• Remembering UI preferences (dismissed banners, active tabs).
• Anonymous analytics to understand how features are used.

We do not use third-party advertising cookies. You can clear cookies at any time through your browser settings. Note that clearing auth cookies will sign you out.

9. Your Rights

You have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Ask us to correct inaccurate data.
• Deletion: Request deletion of your account and all associated personal data.
• Portability: Request your data in a machine-readable format.
• Objection: Object to processing in specific circumstances.

To exercise any of these rights, email hello@kariahq.com with "Data Request" in the subject line. We will respond within 14 days.

10. Children's Privacy

Karia is not intended for users under the age of 18. We do not knowingly collect data from minors. If you believe a minor has created an account, contact us and we will delete it immediately.

11. Changes to This Policy

We may update this Privacy Policy as the platform evolves. We will notify you of significant changes via email or an in-app notice before they take effect. The date at the top of this page reflects the most recent update.

12. Contact

Questions about your privacy or this policy? hello@kariahq.com