Privacy Policy

Last updated: March 2026

Believele is operated by Techno Believe Solutions Ltd (Company number 10866509), registered at 128 City Road, London, United Kingdom, EC1V 2NX. The company serves as the data controller for personal information.

1. Information We Collect

Account Information: Email address and display name collected during registration, or name and email from third-party providers like Google.

Profile Data: Voluntary professional information including work experience, education history, skills, certifications, and career preferences.

LinkedIn Profile Data: When using the Chrome extension on LinkedIn, publicly visible profile information is extractable, including full name, headline, location, work experience, education, skills, certifications, projects, and languages. Extraction occurs only when explicitly triggered by clicking the extension icon.

Job Listing Data: Job title, company name, location, and description text from manually pasted or extension-captured job listings.

Generated Documents: CVs, cover letters, strategy reports, and other created documents stored in user accounts.

Application Outcome Data: Job application statuses (saved, applied, interviewing, offered, rejected) tracked through the Pipeline feature, with automatic AI analysis of associated documents.

Email Data (Gmail Sync): When you connect your Gmail account, Believele accesses your inbox in read-only mode to detect job-related emails. We extract only: sender name, email subject line, and a short snippet (first 200 characters). We use this information solely to identify job application confirmations, interview invitations, and offer or rejection notifications. We do NOT read the full body of your emails, and we do NOT send, delete, modify, or forward any emails. The extracted data (company name, job title, application status) is stored in your application tracker. The raw email content is not stored — only the classified result.

Usage Data: Technical information including IP address, browser type, device type, pages visited, and timestamps.

Error Logs: When errors occur in the app, we may log the error message, the action being performed, and the page where it occurred. These logs are stored per user for up to 30 days and are used solely for debugging and improving the service. Error logs are automatically attached to support tickets to help diagnose issues faster.

Cookies and Local Storage: Essential cookies for login sessions and preferences; analytics cookies for usage understanding; extension local storage caching vocabulary patterns for 24 hours.

2. Legal Basis for Processing

Processing occurs under these UK GDPR articles:

Contract (6(1)(b)): Account data, profile information, and document generation
Legitimate Interest (6(1)(f)): Usage data, analytics, anonymised patterns, and security
Consent (6(1)(a)): Marketing communications, Gmail sync, and optional features

3. How We Use Your Information

The service uses information for: providing and maintaining services, generating tailored documents, personalising experiences, tracking applications, analysing outcomes for pattern identification, improving parsing accuracy through anonymised vocabulary learning, auto-detecting job applications from connected email accounts, sending notifications, analysing usage patterns, and ensuring security.

We do not sell, rent, or share your personal data with third parties for their marketing purposes.

4. Chrome Extension

Job Capture: Reads job listing content only when extension icon is clicked; data transmits via HTTPS upon explicit user request.

LinkedIn Profile Import: Reads publicly visible information when icon is clicked; may visit detail pages; transmits via secure URL fragment.

Vocabulary Pattern Learning: Sends anonymised vocabulary patterns (job titles, skills, universities, degrees) to improve parsing; caches locally for 24 hours.

General: Extension does not track browsing history, intercept websites, or collect background data; uses HTTPS only; communicates exclusively with believele.com and app.believele.com.

5. Gmail Sync

What We Access: When you connect your Gmail account via Google OAuth, Believele requests the gmail.readonly scope. This grants read-only access to your email messages and settings. We cannot send, delete, or modify any emails.

What We Read: We scan email subject lines, sender addresses, and short snippets to identify job-related emails such as application confirmations, interview invitations, and offer or rejection notices.

What We Store: Only the classified result — company name, job title, and application status. We do not store the raw email content, attachments, or full message body.

How Often: Email sync runs automatically every 6 hours via a server-side scheduled process. You can also trigger a manual sync from the Profile page. Each sync processes emails from the last 7 days only.

Third-Party Processing: Email classification is performed by our AI classifier running on our private server. Email data is not sent to OpenAI or any external AI provider for this purpose.

Disconnecting: You can disconnect your Gmail account at any time from the Profile page. When you disconnect, the OAuth tokens are immediately deleted from our database. Previously synced application data (company name, job title, status) remains in your tracker unless you manually delete it or request full data deletion.

Token Storage: Gmail OAuth refresh tokens are stored encrypted in our Supabase database. Access tokens are refreshed server-side and are never exposed to client-side code.

6. Pattern Learning Engine

What We Analyse: CV and cover letter analysis triggered when updating application status to “Interviewing,” “Offered,” or “Rejected,” evaluating keyword match rates, quantified achievements, action verbs, summary style, opening types, personalisation, and career progression framing.

Per-User Patterns: Detailed analysis results stored privately in user accounts, accessible only to individual users, used for improving their future documents.

Anonymised Global Patterns: Aggregated statistical data extracted from outcomes contains no personal information, no CV content, no cover letter text, and no identifying details.

Automated Decision-Making: Analysis provides recommendations without making legally significant decisions; human review available upon request; users may opt out by not using Pipeline feature.

7. Third-Party Service Providers

Supabase: Database and authentication, hosted on AWS in Ireland
OpenAI: AI processing for CV/cover letter generation; data not used to train models
Vercel: Web hosting and serverless functions
Google: Authentication, Gmail API (read-only), and analytics
LinkedIn: Extension reads publicly visible profile data
Brevo: Transactional email delivery (support ticket replies, notifications)

Data transfers outside UK/EEA occur only to OpenAI and Vercel (US) under Standard Contractual Clauses.

8. Data Retention

Account data: deleted within 30 days of account deletion. Profile, documents, and application tracking: retained while account active. Personal patterns: deleted with account. Anonymised global patterns: retained indefinitely. Usage data: retained up to 24 months. Error logs: retained for 30 days, then automatically deleted. Gmail OAuth tokens: deleted immediately upon disconnection.

9. Data Security

All data encrypted in transit using TLS/HTTPS and at rest using AES-256. API credentials stored server-side only. Row-level security ensures users access only their own data. Authentication tokens verified on every request. Gmail OAuth tokens stored encrypted server-side; never exposed to client code. ProGuard/R8 code obfuscation enabled on the Android app.

10. Your Rights

Under UK GDPR, users possess rights to: access, rectification, erasure, restrict processing, data portability, object to processing, and request human review of automated analysis. Contact support@believele.app to exercise rights; 30-day response commitment applies.

11. How to Delete Your Account and Data

You can request deletion of your account and all associated data at any time:

Via the app: Go to Profile Settings → Support tab → submit a ticket requesting account deletion
Via email: Send a request to support@believele.app from the email address associated with your account
Via the web dashboard: Go to app.believele.com/dashboard/support and submit a deletion request

Upon receiving a deletion request, we will:

Delete your account and profile data within 30 days
Delete all generated CVs, cover letters, and strategy reports
Delete all application tracking data
Delete all error logs associated with your account
Revoke and delete any connected Gmail OAuth tokens
Delete all support tickets and replies
Anonymised global patterns (which contain no personal data) are retained

You may also delete specific data without deleting your account:

Disconnect Gmail: Profile page → Email Integrations → Disconnect
Delete individual applications: Pipeline page → click on an application → Delete
Delete generated documents: CV Vault or Cover Letters page → Delete

12. Children’s Privacy

Believele is not intended for users under 18; the company does not knowingly collect children’s information.

13. Changes to This Policy

Updates may occur; significant changes will be communicated through the Service, email notification, or in-app notice. We will notify all registered users by email when material changes are made to this policy, particularly regarding data collection, third-party sharing, or Gmail/email access.

14. Contact Information

Email: support@believele.app
Company: Techno Believe Solutions Ltd
Address: 128 City Road, London, EC1V 2NX, United Kingdom
Company number: 10866509

Users may lodge complaints with the Information Commissioner’s Office at ico.org.uk.

By using Believele, you acknowledge that you have read and understood this Privacy Policy.