Privacy Policy

This Privacy Policy explains what personal data Lavin AI (“we”, “us”) collects, why, how it is stored, and your rights. It applies to getlavinai.com and the E-CV and E-HRM products.

WHO WE ARE

Lavin AI is operated by Sarwar Mohammed, trading under All Safe, Erbil, Iraq.
Contact for any privacy question or request: info@allsafer.uk.

WHAT WE COLLECT

• Account data: name, email address, and authentication identifiers when you sign up (via Google sign-in or email/password).
• Content you provide: CV/resume content, cover letters, profile and portfolio details, job descriptions, and any files you upload (e.g. PDF/DOCX).
• For E-HRM (recruiter use): job postings you create and applications/CVs submitted to your jobs.
• Technical data: basic log and device information needed to operate and secure the service.
• If analytics or cookies are used, see the Cookies section below.

WHY WE PROCESS IT (PURPOSE & LEGAL BASIS)

• To provide the service you request (creating/optimizing resumes, portfolios, ranking candidates) — performance of a contract.
• To operate, secure, and improve the service — legitimate interests.
• To communicate with you about your account or support — contract / legitimate interests.
• We do NOT sell your personal data. We do NOT use your CV content to train our own models.

AI PROCESSING

Resume/portfolio features send the relevant content you submit to Google Gemini (Google) to generate analysis, rewrites, translations, or scores. Only the content needed for the requested feature is sent. We do not use this content to train Lavin AI models.

WHERE YOUR DATA IS STORED

Data is stored using Supabase on servers in the EU (Frankfurt, Germany). Some processing (e.g. AI features) may involve providers that operate internationally; where data leaves the EU it is handled under appropriate safeguards. [Confirm provider transfer terms before relying.]

RETENTION

We keep your account and content while your account is active. You can delete your content or request account deletion at any time by contacting info@allsafer.uk; we will delete or anonymize personal data unless we must retain it for legal/accounting reasons.

YOUR RIGHTS

Subject to applicable law (including GDPR where it applies), you can request access, correction, deletion, export, or restriction of your personal data, and object to certain processing. Contact info@allsafer.uk. You may also lodge a complaint with a data protection authority.

SECURITY

We use reputable infrastructure (Supabase, hosting on Vercel) and access controls. No system is perfectly secure, but we take reasonable measures to protect your data.

CHILDREN

The service is not directed to children under 16. Do not use it if you are under 16.

CHANGES

We may update this policy; the “Last updated” date will change. Material changes will be indicated on this page.

CONTACT

Privacy questions or requests: info@allsafer.uk