Privacy Policy

1. Introduction

This Privacy Policy explains how CloakAI.me, operated by Lussy Company Limited, collects, uses, stores, processes, and protects personal information when users access our website, applications, and related services.

By using the platform, you acknowledge and agree to the practices described in this Privacy Policy.

2. Company information

CloakAI is operated by Lussy Company Limited, a company registered in the United Kingdom.

Website: https://cloakai.me
Support Email: support@cloakai.me
Privacy Contact: privacy@cloakai.me

3. Information we collect

We may collect and process the following categories of personal information:

Account information

• Name
• Email address
• Account credentials
• Google account email and name, if you sign in with Google (see section 7)
• Subscription details

User uploaded content

• CVs and resumes
• Job descriptions
• Interview transcripts
• Audio recordings
• Screenshots
• User prompts and AI interactions

Technical information

• IP addresses
• Browser type and version
• Operating system
• Device identifiers
• Session logs
• Usage analytics
• Cookie related information

Payment information

Payments are securely processed through Stripe. CloakAI does not store full payment card details.

4. How we use information

We may use personal information to:

• Provide and operate the platform
• Deliver AI interview assistance features
• Generate AI powered outputs and recommendations
• Process subscriptions and payments
• Maintain platform security and integrity
• Detect abuse, fraud, or unauthorized activity
• Improve platform functionality and performance
• Respond to support requests
• Comply with legal obligations
• Develop and improve AI related services

5. Legal basis for processing

Under UK GDPR and EU GDPR, we rely on the following legal bases for processing personal data:

• Performance of a contract
• Legitimate interests
• User consent
• Compliance with legal obligations

6. AI processing and third party providers

CloakAI may use trusted third party providers to deliver platform functionality and AI related services.

These providers may include:

• OpenAI
• Anthropic
• Google
• Stripe
• Hosting and analytics providers

Certain user content including prompts, transcripts, recordings, screenshots, and uploaded files may be processed through these providers solely for the purpose of operating and improving the service.

7. Google user data (Sign in with Google)

You can create or sign in to a CloakAI account with your Google account. This section explains exactly what we receive from Google and what we do with it.

What we access

We request only the basic sign-in scopes (openid, email and profile). From Google we receive:

• Your email address and whether Google has verified it
• Your first and last name

We do not request or receive access to your Gmail, Google Drive, Calendar, Contacts, YouTube, or any other Google service or data. We never see or store your Google password.

How we use it

• To create your CloakAI account or sign you in to it
• To fill in the name on your account profile
• To send account emails such as receipts and password resets

We do not use Google user data for advertising, we do not sell it, and we do not use it to train AI models. Your Google email and name are not sent to AI model providers.

How we store it

Your email address and name are stored in our account database together with the rest of your account information and protected by the security measures described in this policy. We do not store the access tokens Google issues during sign-in; they are used once to confirm your identity and then discarded.

Who we share it with

We share your email address and name only with the service providers we need to run your account: our payment processor (Stripe) for billing, our email delivery provider for account emails, and our product analytics provider to understand how the service is used. These providers may use the data only to provide their services to CloakAI.

Deleting your data and revoking access

You can ask us to delete your account and the Google data associated with it at any time by emailing privacy@cloakai.me. You can also remove CloakAI's access to your Google account at any time at myaccount.google.com/permissions.

CloakAI's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

8. Data retention

User content and account related information may be retained until the account is deleted or a deletion request is submitted.

Certain technical logs, billing records, and security related information may be retained for longer periods where necessary for legal, compliance, fraud prevention, dispute resolution, or security purposes.

9. Data sharing

CloakAI does not sell personal information.

We may share information with:

• AI and cloud infrastructure providers
• Payment processors
• Analytics and monitoring providers
• Professional advisors and auditors
• Law enforcement or regulatory authorities when required

10. International data transfers

Some data may be processed outside the United Kingdom or European Economic Area.

Where international transfers occur, we implement appropriate safeguards in accordance with applicable data protection laws.

11. Security measures

We implement reasonable technical and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, misuse, or destruction.

However, no internet based platform or storage system can guarantee absolute security.

12. User rights

Under UK GDPR and EU GDPR, users may have rights to:

• Access personal data
• Correct inaccurate information
• Request deletion of data
• Restrict processing
• Object to processing
• Withdraw consent where applicable
• Request data portability
• Lodge complaints with supervisory authorities

Requests may be submitted to privacy@cloakai.me.

13. Cookies and analytics

CloakAI uses cookies and similar technologies for authentication, analytics, security, and platform functionality.

Additional information can be found in our Cookie Policy.

14. Children’s privacy

CloakAI is not intended for individuals under the age of 18.

We do not knowingly collect personal information from children.

15. Automated processing and AI systems

Certain platform functionality relies on automated systems and AI technologies to process user inputs and generate responses.

AI generated outputs may contain inaccuracies or incomplete information and should not be relied upon without independent review.

16. Service providers and infrastructure

CloakAI may use external hosting, monitoring, analytics, customer support, and infrastructure providers to operate the platform.

These providers may process data only as necessary to deliver their services to CloakAI.

17. Changes to this Privacy Policy

We may update this Privacy Policy periodically to reflect legal, operational, or technical changes.

Updated versions will be published on this page with a revised effective date.

18. Contact us

If you have questions regarding this Privacy Policy or personal data processing, please contact:

privacy@cloakai.me