Privacy Policy

1. Who we are

Veyra is a global career intelligence platform operated by Diocreations LTD, a company registered in United Kingdom. Diocreations LTD is the data controller for personal data processed through Veyra.

Contact routes for privacy and data protection are listed on our Contact page.

2. Information we collect

We collect only the information needed to operate the platform for you:

• Account information: name, email address, authentication identifiers and account preferences.
• Career profile information: employment history, education, skills, certifications, languages, locations and target markets you enter or import.
• Resume and CV files you upload, plus the structured data extracted from them.
• Generated documents: country-specific resume versions and cover letters created in your account.
• Job activity: searches, filters, saved jobs, application records and application status you track.
• Payment information: purchase records, product, amount, currency and payment status. Card details are handled by our payment processors and are never stored by us.
• Technical information: browser and device type, approximate region, and diagnostic logs needed for security and reliability.

3. Authentication data

You can sign in with an email and password, a one-time magic link, or Google sign-in. When you use Google sign-in, we receive your name, email address and a unique identifier from Google — we do not receive your Google password.

Magic links and password reset links are single-purpose, time-limited and delivered to the email address on your account. Session tokens are stored in your browser so you stay signed in.

4. How we use your information

We process your information to:

• Create and secure your account.
• Maintain your Master Career Profile as the single source of truth for your documents.
• Analyse resumes, produce diagnostic scores and suggest improvements.
• Generate country-adapted resume versions and cover letters at your request.
• Match your profile against job listings and show relevance scores.
• Process purchases and provide access to paid features.
• Send service communications such as sign-in links, receipts and account notices.
• Detect, investigate and prevent abuse, fraud and security incidents.

5. Automated and AI-assisted processing

Resume analysis, career profile extraction, resume optimisation, country localisation, job matching and cover-letter drafting are automated. They operate on the information you provide and on the job listing you select.

Veyra is designed not to invent professional experience. Where information is missing or ambiguous, the platform flags it for your confirmation instead of fabricating facts. You remain responsible for reviewing, correcting and approving every generated document before you send it to an employer.

Automated scores and match percentages are guidance only. They are not decisions with legal effect and do not determine whether an employer will consider you.

6. Legal bases for processing (UK GDPR)

Where UK GDPR applies, we rely on the following legal bases:

• Contract: operating your account, generating documents and delivering purchased features.
• Legitimate interests: platform security, abuse prevention, service improvement and essential service messages.
• Consent: non-essential cookies and any optional communications, which you can withdraw at any time.
• Legal obligation: financial records and responses to lawful requests.

7. Employers, job sources and external sites

Job listings on the platform may be posted by employers or drawn from approved external sources. When you apply through the platform, the details you submit are shared with the employer or recipient address attached to that listing.

Where a listing directs you to an employer or third-party application system, you leave the platform and your information is then handled under that site's own privacy policy. We record only that you were referred, so your tracker stays accurate.

8. Service providers

We share personal data with providers that operate parts of the service on our behalf: cloud hosting and database infrastructure, authentication, payment processing (including Stripe and Razorpay for the relevant regions), and email delivery for service messages. Each provider receives only what it needs for its function.

We do not sell your personal data and we do not share it with advertisers.

9. International transfers

Our providers may process data outside the UK and the European Economic Area. Where that happens we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses offered by those providers.

10. Retention

We keep your account data, career profile, uploaded files and generated documents for as long as your account is active, so that your profile remains available across markets.

You can delete individual documents at any time, and you can delete your account from Settings. When you delete your account we remove your profile, documents and job activity from the live platform. Records we must keep for financial, legal or fraud-prevention reasons — such as payment records — are retained for the period required by law. Routine backups may briefly retain copies before they age out.

11. Security

We use access controls, database row-level security, encrypted connections and least-privilege service credentials. Secrets and payment credentials are held server-side and are never exposed to the browser.

No online service can guarantee absolute security, and we do not claim any certification or formal security accreditation we have not obtained. Please use a strong, unique password and keep your email account secure.

12. Your rights

Subject to applicable law, you can request access to your data, correction, deletion, restriction, objection to certain processing, and portability. Most of these are available directly in the product through your Career Profile, Library and Settings pages.

To exercise a right, use the channels on our Contact page. If you are in the UK you may also complain to the Information Commissioner's Office.

13. Children

Veyra is intended for people in or entering the workforce and is not directed at children under 16. We do not knowingly create accounts for children. If you believe a child has an account, contact us and we will remove it.

14. Cookies

We use cookies and similar browser storage for sign-in sessions and preferences, and we ask for consent before any non-essential use. See the Cookie Policy for details.

15. Changes to this policy

We update this policy when the platform or the law changes. The effective date below always reflects the current version, and material changes are highlighted in the product.