Privacy Policy

1. Who we are

Hakuu is an AI-powered job application platform operated as a personal project. For privacy matters, contact: hasnaynajmal@gmail.com

2. Data we collect

• Waitlist: Your email address and the timestamp of your consent.
• Registered users: Email address, name, uploaded CV content, job applications and generated documents you create within the platform.

3. Why we collect it

• Waitlist email: Solely to notify you when early access opens (legal basis: consent — GDPR Art. 6(1)(a)).
• Account data: To provide and improve the service (legal basis: contract performance — GDPR Art. 6(1)(b)).

4. How long we keep it

Waitlist emails are deleted within 30 days of sending the early-access invitation, or earlier on request. Account data is retained for as long as you have an active account and deleted within 30 days of account deletion.

5. Who we share it with

We do not sell or share your data with third parties for marketing purposes. Data is stored on Supabase (EU region, AWS eu-north-1, Stockholm). AI generation uses Anthropic — CV content is sent to their API to generate documents; it is not stored by us beyond your account.

6. Your rights (GDPR)

As an EU/EEA resident you have the right to:

• Access — request a copy of your personal data
• Rectification — correct inaccurate data
• Erasure — request deletion of your data (“right to be forgotten”)
• Withdraw consent — at any time, for waitlist entries; this will not affect lawfulness of prior processing
• Portability — receive your data in a machine-readable format
• Lodge a complaint — with the Finnish Data Protection Ombudsman (tietosuoja.fi)

To exercise any of these rights, email hasnaynajmal@gmail.com. We will respond within 30 days.

7. Cookies

We use only essential session cookies required for authentication. No tracking or advertising cookies are used.

8. Changes to this policy

If we make material changes, we will update the date at the top of this page. Continued use of the service after changes constitutes acceptance.