Legal

Privacy Policy

Last updated: June 3, 2026

1. What we collect

We collect your email address, password hash, and the profile information you provide: skills, preferred job title, seniority level, salary range, and timezone. If you upload a resume, we store it encrypted and extract your skills and experience automatically. We also collect standard server logs (IP address, browser type, timestamps) for security and abuse prevention.

2. How we use it

We use your profile data solely to match you against job listings and deliver your daily digest. Your email is used for account authentication and for sending your digest. We do not use your data for advertising, profiling for third parties, or any purpose other than running the service.

3. What we do not do

We don't sell your data. We don't share your profile with employers or recruiters. We don't send your resume anywhere without your explicit action. We don't buy or merge third-party data about you.

4. Data storage

Your data is stored on servers managed by our infrastructure provider. Resumes are encrypted at rest. We retain your account data for as long as your account is active. If you delete your account, your personal data is deleted within 30 days.

5. Cookies

We use a single session cookie for authentication. We do not use tracking cookies, analytics cookies, or third-party advertising cookies. The only third-party service we embed is our payment processor (Stripe), which may set cookies on payment pages.

6. Your rights

You have the right to access, correct, or delete your personal data at any time. You can do this from your account settings. You can also request a full data export by emailing hello@lurelo.io. If you're in the EU or UK, you have the right to lodge a complaint with your supervisory authority.

7. Contact

If you have questions about this policy or your data, email us at hello@lurelo.io. We aim to respond within 5 business days.