Privacy Policy

The EuliAI application is operated and delivered through services provided by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare also runs the server-side application functions. This involves processing the inputs and responses transmitted for the respective function. When the website is accessed, technically necessary data may be processed, in particular the IP address, date and time of access, address accessed, referrer, browser and device information, and security and error data. This processing serves to provide the website securely, reliably and efficiently and to prevent abusive access.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the secure and reliable operation of the service. Cloudflare operates a worldwide network; processing in third countries, particularly the USA, therefore cannot be ruled out. According to its own statements, Cloudflare provides appropriate safeguards for this, including EU Standard Contractual Clauses. Further information: Cloudflare Privacy Policy.

For registration and login, we process in particular your name, email address, encrypted authentication data, user ID, session data and the times of security-relevant events. Passwords are not stored in plain text. We use Supabase for authentication, the database and account management. The provider is Supabase, Inc., USA; depending on the selected project region, the technical infrastructure may be provided by additional subcontractors.

The legal basis is Article 6(1)(b) GDPR for the performance of the user relationship and Article 6(1)(f) GDPR for protection and prevention of abuse. Authentication and session information is stored in the browser as technically necessary for login to work. Further information: Supabase Privacy Policy.

When you create Hiring Kits, we process your inputs and the content generated from them. This may include, for example, the job title, job description, department, location, contract type, seniority level, requirements and justifications. Information submitted for processing is not always stored permanently as source material. Depending on the input method, we store source texts such as notes, transcripts or job descriptions, structured project information including Hiring Profiles, and generated Hiring Kit content. Stored project information and content are associated with your user account and kept in the Supabase database so that you can access and manage your Hiring Kits again.

During document analysis, text extracted from supported files may be submitted for processing, and information derived from it may be stored in the project. This does not imply permanent storage of the original file. The current document input flow does not provide an archive of uploaded original files.

The legal basis is Article 6(1)(b) GDPR. Please do not enter data about specific applicants, particularly special categories of personal data within the meaning of Article 9 GDPR, unless this is strictly necessary and legally safeguarded.

EuliAI uses the OpenAI API for AI-supported functions. These include analysing submitted information, extracting and structuring details, checking job titles and generating Hiring Kit content. Depending on the function, your inputs, text extracted from supported documents and file names, or previously stored project information are transmitted to OpenAI and processed there.

For these requests, EuliAI does not request storage of the response as OpenAI application state. This request setting is not a guarantee that the provider does not store any information. The information EuliAI itself stores depends on the input method and the function used, as described in section 4.

The legal basis is Article 6(1)(b) GDPR. Information about data processing by OpenAI can be found in the OpenAI Data Processing Addendum and the OpenAI Privacy Policy.

EuliAI uses browser storage and, where applicable, technically necessary cookies to enable sessions, login, security and templates you have saved. These functions are necessary for the service you have requested. At the current stage of this application, we do not use analytics, marketing or tracking services. If such services are added later, this policy will be updated and any required consent will be obtained.

If you contact us by email, we process your contact details and the content of your message to handle your request. Technically necessary system emails may be sent during registration, verification and password resets. We use Resend as the email delivery service to send these account-related emails from Supabase Auth. For this purpose, the recipient address and the respective message content, including confirmation or password reset links, are transmitted to Resend. Depending on the request, the legal basis is Article 6(1)(b) or (f) GDPR.

Only parties that need data for the purposes described receive it. These include in particular Cloudflare (operation and delivery of the application, including server-side functions), Supabase (authentication and storage of account and product data), OpenAI (AI-supported analysis, structuring, checking and creation of content) and Resend (delivery of account-related system emails). Where providers process data outside the EEA, this takes place in accordance with the applicable statutory transfer mechanisms, such as an adequacy decision or the EU Standard Contractual Clauses. You may request a copy or explanation of the relevant safeguards from us.

As a general rule, we store account data and saved Hiring Kits for as long as your account exists. Following a deletion request, data is deleted unless statutory retention obligations, security interests or the establishment, exercise or defence of legal claims prevent this. Technical backups and log data may remain for a limited period and are subsequently overwritten or deleted.

Subject to the statutory requirements, you have the right of access, rectification, erasure, restriction of processing, data portability and objection. You may withdraw any consent you have given at any time with effect for the future. To exercise your rights, simply send a message to info@euliai.com.

You may lodge a complaint with a data protection supervisory authority. In particular, the Berliner Beauftragte für Datenschutz und Informationsfreiheit is responsible for us, Alt-Moabit 59–61, 10555 Berlin, email: mailbox@datenschutz-berlin.de. Further information is available at datenschutz-berlin.de.

We update this Privacy Policy when functions, providers used or legal requirements change. The current version published on this page applies.