Privacy Policy for ELJO
Last Updated: January 12, 2026
1. Introduction
Welcome to ELJO ("we," "our," or "us"). We are committed to protecting your personal data and respecting your privacy.
This Privacy Policy explains how we collect, use, store, and share your personal information when you use our website (https://eljo.ai) and our AI-powered career services (collectively, the "Platform"). It also explains your privacy rights and how the law protects you.
2. Who We Are (Data Controller)
For the purposes of the Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR), the Data Controller constitutes:
Business Name: ELJO LTD
Representative: Privacy Team
Location: United Kingdom
Email: contact@eljo.ai
3. The Data We Collect About You
We currently collect and process the following categories of personal data:
- Identity Data: First name, last name, and username (imported via Google Sign-In).
- Contact Data: Email address.
- User-Uploaded Career Data:
- Resumes/CVs: Files (PDF/DOCX) you manually upload containing employment history and skills.
- Job Descriptions: Text of job postings you upload for analysis.
- Professional Stories: Written behavioural interview stories (STAR method) you enter into the "Story Bank."
- Salary Information: Compensation details you enter into the "Offer Manager."
- Generated Reports:
- AI Insights: The final output reports generated by our AI tools, such as "CV Deep Dive" scores, "Cheat Sheets," and Interview Feedback Summaries.
- Technical Data: Internet Protocol (IP) address, browser type and version, time zone setting, operating system, and platform.
- Usage Data: Information about which features you access (e.g., timestamps of when you generated a report).
- Marketing & Communications Data: Your preferences in receiving marketing from us and our third parties.
- Tracking Data: Information collected via the Meta Pixel, including pages visited and buttons clicked (e.g., “Start Free Trial”).
- Advanced Matching Data: If you have consented to “Experience & Analytics” cookies, we may share hashed (pseudonymized) contact details (primarily City, State, Zip, and Country) with advertising partners like Meta. This is performed via a secure server-to-server connection to help match ad views to outcomes and does not expose your raw data publicly.
Google Analytics 4 (GA4) Data
We use Google Analytics to understand website usage. This tool collects the following anonymized data:
- Engagement Metrics: Pages visited, time spent per page, and scroll depth.
- Demographics: Approximate location (Country/City) derived from IP address.
- Technical Specs: Device type, screen resolution, and browser version.
You can opt-out of this tracking via our Cookie Banner or by installing the Google Analytics Opt-out Add-on.
We do not collect, record, or store your voice recordings, audio files, or the raw transcripts of your discussions within the "Live Simulator".
4. How We Collect Your Data
- Direct Interactions: You provide data by creating an account, uploading a resume, or typing text into forms (e.g., the Story Bank).
- Automated Generation: We collect data in the form of Reports created by the LLM (Large Language Model) in response to your inputs.
- Automated Technologies: As you interact with our website, we may automatically collect Technical Data via cookies and local storage to maintain your login session.
- Third Parties: We receive authentication data from Google (Firebase Auth).
5. How We Use Your Personal Data
We will only use your personal data when the law allows us to. Most commonly, we use your personal data in the following circumstances:
| Purpose / Activity | Type of Data | Legal Basis |
|---|---|---|
| User Account Creation: To register you as a new customer and verify identity. | Identity, Contact | Performance of a contract |
| Service Delivery: To process CVs, JD and Story Bank entries via AI. | Identity, Career Data, Content | Performance of a contract |
| Subscription & Payments: To manage payments and collect fees. | Contact, Financial, Transaction | Performance of contract; Legitimate interests |
| Relationship Management: To notify you about term changes or review requests. | Identity, Contact, Marketing | Performance of contract; Legal obligation |
| Technical Support: To provide customer support and troubleshoot issues. | Identity, Contact, Technical | Performance of contract; Legitimate interests |
| Website Optimization: To use analytics (Vercel) to improve services. | Technical, Usage | Legitimate interests |
| Marketing & Remarketing: To use Meta Pixel for relevant content/ads. | Identity, Contact, Usage, Marketing | Consent (Opt-in); Legitimate interests |
| Fraud Prevention: To protect our business and website. | Identity, Technical, Usage | Legitimate interests |
6. Artificial Intelligence & Mock Interviews
A core feature of ELJO is the use of Generative AI. By using our Platform, you acknowledge the following regarding your data:
A. "Live Simulator" (Mock Interview Simulator)
- No Audio Recording: We do not store your voice recordings. Audio is processed in real-time solely for immediate response and is then discarded.
- Transcript Retention: Text transcripts of your interview are stored temporarily to allow you to resume interrupted sessions. These transcripts are automatically deleted from our database when you complete the session/generate feedback. If you abandon a session without finishing, the transcript may be retained until you start a new session or delete your account.
B. General AI Processing
- Data Processing: Your uploaded data (Resume, Job Description) is sent to third-party AI providers (specifically Google Gemini API).
- Accuracy: Verify all automated advice before acting on it.
- Privacy with AI Providers: Your data is not used to train their public foundation models.
7. Disclosures of Your Personal Data
We may share data with trusted third parties to operate our Platform:
- Cloud Infrastructure: Vercel (Hosting), Google Firebase (Database & Auth).
- AI Service Providers: Google (Gemini/Vertex AI) for feedback reports.
- Advertising Partners: Meta Platforms, Inc. (Facebook/Instagram) via Meta Pixel.
- Legal Obligations: If required by law.
We do not sell your personal data.
8. International Data Transfers
ELJO operates using cloud infrastructure that may process data outside the UK/EEA (specifically in the US). Data collected by the Meta Pixel may also be stored by Meta in the US.
- Adequacy Decisions (UK-US Data Bridge): Our primary US providers (Google, Vercel) participate in this framework.
- Data Processing Agreements: We rely on SCCs or IDTAs where adequacy decisions do not apply.
9. Data Security
- Encryption: Data encrypted in transit (SSL/TLS) and at rest (Firebase Storage).
- Access Control: Limited to employees/contractors with a business need.
10. Data Retention
- Account Data: Retained while account is active.
- Uploaded Files & Reports: Stored until you delete them or your account.
- Interview Sessions: Discussions are not retained.
11. Your Legal Rights
Under GDPR, you have rights to access, correct, or erase your data. Contact us at contact@eljo.ai.