Privacy Notice

Iterune is currently operated in the United Kingdom by the individual developing and operating the service. The complete controller identity and dedicated privacy contact will be published before general public launch.

Account and security data can include email address, account identifiers, authentication/session information, security events and settings.

Career can hold information you choose to provide, including contact details, professional profiles, employment and education history, skills, qualifications, achievements, projects, languages, interests, references, job opportunities, applications, timelines, CV content and uploaded CV/document files.

Other Iterune features can hold profile/member-directory information, documents, reminders, messages, community posts/comments/reports, blog content, preferences and activity records.

Free-text fields and uploaded documents may contain information about other people or information that receives additional legal protection. Iterune does not require special-category information for an ordinary CV and you should avoid adding it unless genuinely necessary for your own purpose.

We process information to create and secure accounts, provide the features you request, store and organise your records, render/export documents, maintain service integrity, prevent abuse and respond to support or rights requests. Career information is used to provide Career/CV functionality; it is not made public merely because you store it in Iterune.

We will not introduce a materially new use of personal information without updating the relevant privacy information and bringing the change to affected users' attention before that processing starts.

Where processing is necessary to provide an account or feature you request, Iterune expects primarily to rely on performance of a contract or steps taken at your request. Security, abuse prevention and service-protection processing may rely on legitimate interests where appropriate. Processing that legally requires consent will use a separate consent mechanism.

Acknowledging this Privacy Notice is not consent to processing. Where consent is the lawful basis, Iterune will ask for it separately and make withdrawal available as required.

If a future feature intentionally processes special-category data, Iterune must identify both an Article 6 lawful basis and an applicable Article 9 condition before enabling that processing.

Paid Career features may later offer AI assistance for tasks such as tailoring, rewriting or selecting relevant user-supplied evidence. AI processing is not currently represented as active. Before personal information is sent to an AI provider, Iterune will identify the provider/processing arrangement, update this notice and provide appropriate just-in-time information.

Iterune does not currently use Career information to make solely automated employment decisions about users.

Iterune currently uses Supabase for authentication, database and storage infrastructure; Vercel for application hosting/deployment; and GitHub for source-code hosting/development workflows. Providers receive information only where relevant to the services they provide. Iterune does not sell CV or Career information.

Before public launch, Iterune will publish a completed processor/recipient register reflecting the production configuration.

Some providers may process information in, or permit authorised access from, countries outside the UK. Before public launch, Iterune will document relevant processing locations and applicable UK transfer safeguards. This development notice does not invent transfer mechanisms that have not yet been verified.

Active account content is generally retained while needed to provide the account and features the user chooses to keep. Users can delete individual records where the feature provides deletion controls and can request account deletion through Account settings.

Deletion from the live application does not necessarily mean instantaneous removal from infrastructure backups. Before public launch, Iterune will publish verified backup retention/deletion criteria based on the production providers actually used.

Uploaded source files may be separate from an editable CV. Deleting an editable CV must not be described as deleting its original uploaded document unless that document is also deleted from Documents/storage.

Depending on the circumstances and lawful basis, UK data-protection law may provide rights of access, rectification, erasure, restriction, objection and data portability. Rights are not absolute in every circumstance.

Iterune provides account data-export and account-deletion foundations. Their scope and production behaviour must be tested against all user-owned tables and stored files before broad launch.

Iterune uses authenticated access, private storage, signed file URLs, database Row Level Security, security headers, bot protection and application/authentication rate-limit foundations. Personal documents and Career data are private by default.

No online service can promise absolute security. Iterune's launch process includes access-control testing, deletion/export testing, recovery verification, dependency review and incident-response preparation.

Strictly necessary authentication technologies may be used to keep users signed in and secure the service. Iterune does not currently intend to use advertising or optional analytics cookies. If non-essential tracking is introduced, this notice and any required consent controls will be updated first.

This notice is reviewed as features and providers change. If Iterune plans a new purpose for personal information, the notice will be updated and the change will be proactively brought to affected users' attention before the new processing starts.

Iterune may ask users to acknowledge a material privacy update so there is a clear record that the updated information was presented. That acknowledgement is not a substitute for a lawful basis and is not treated as consent unless consent is separately and specifically requested.

A dedicated privacy contact will be published before general public launch. UK users may have the right to complain to the Information Commissioner's Office.