Privacy Policy

GetToKnow is operated by ECom24 Ltd ("we", "our", or "us"), a company registered in Scotland, United Kingdom. We are registered with the UK Information Commissioner's Office (ICO) as required by the Data Protection Act 2018.

We are committed to protecting your privacy and processing your personal data in accordance with the UK General Data Protection Regulation (UK GDPR). This Privacy Policy explains how we collect, use, and safeguard your information when you use our service.

We collect the following types of information:

• a. Account Information - Email address and password when you register
• b. Profile Information - Display name, headline, employment history, skills, certifications, contact details, and links you provide
• c. CV Data - CV files you upload (PDF or DOCX) for AI processing
• d. Billing Information - Payment details processed securely through Stripe
• e. Usage Data - Profile view counts and basic analytics

We use the information we collect to:

• a. Create and maintain your public profile page
• b. Process your CV using AI to generate profile content
• c. Process your subscription payments
• d. Communicate with you about your account
• e. Improve our service

Under UK GDPR, we process your personal data on the following legal bases:

• a. Contract Performance - Processing your account, profile, and CV data is necessary to provide the service you have requested
• b. Legitimate Interests - We process usage data (such as profile view counts) to improve our service and provide you with analytics
• c. Legal Obligation - We may process data where required to comply with applicable laws

When you upload a CV, we use OpenAI's GPT-4o to extract and summarise your professional information. Your CV content is sent to OpenAI for processing. We do not use your data to train AI models. The AI-generated content is provided for your review and editing before publication.

We use essential cookies only. These are required for our website to function correctly, including session management and security. We do not use tracking or advertising cookies.

We use Plausible Analytics for website usage statistics. Plausible is a privacy-focused analytics tool that does not use cookies, does not collect personal data, and does not track users across sites or devices. No consent banner is required as Plausible is fully compliant with GDPR, CCPA, and PECR without collecting any personally identifiable information. All analytics data is hosted in the EU. For more information, see Plausible's data policy.

We use the following third-party services:

• a. Stripe - for payment processing
• b. OpenAI - for CV processing and content generation
• c. Cloudflare R2 - for file storage
• d. Mailtrap - for transactional emails
• e. Plausible Analytics - for privacy-focused, cookie-free website analytics (EU-hosted, no personal data collected)

Each of these services has their own privacy policy governing their use of your data.

We implement appropriate security measures to protect your personal information. All data is transmitted over encrypted connections (TLS/SSL) and stored securely. Passwords are hashed and never stored in plain text.

Under UK GDPR, you have the following rights:

• a. Right of Access - You can view and download your profile data at any time through your dashboard
• b. Right to Rectification - You can correct your data at any time through your profile editor
• c. Right to Erasure - You can permanently delete your account and all associated data through Settings > Account > Delete Account
• d. Right to Data Portability - You can export your data through your dashboard
• e. Right to Object - You can object to processing based on legitimate interests by contacting us
• f. Right to Complain - You have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk

We retain your account data for the duration of your account. If you cancel your subscription, your account and data remain accessible but your public profile will no longer be visible. Your data is retained until you choose to delete your account.

When you delete your account (via Settings > Account > Delete Account), the following data is immediately and permanently erased in accordance with UK GDPR:

• a. Your profile information (name, headline, employment history, skills, certifications, contact details, links)
• b. Your uploaded files (CVs and avatars)
• c. Your saved contacts and any contacts others have saved of you
• d. Your Stripe customer data (subscription cancelled and customer record deleted)
• e. Your account credentials and personal identifiers

This action is irreversible. Once deleted, your data cannot be recovered.

Your data may be transferred to and processed in countries outside the United Kingdom. When we transfer data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK Government, to protect your data in accordance with UK GDPR.

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

GetToKnow is operated by ECom24 Ltd. If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at support [AT] gettoknow.me.