Privacy
You give us your CV so we can find roles that fit you and help you tailor your CV to them. We use it for that and nothing else. There are no ads and no trackers, and we don’t sell anything about you. One button deletes it all.
Who we are
Umanuto is run by [controller: your name or company], [postal address]. We decide how your data is used, which makes us the “controller” under UK data protection law. Questions or requests: support@umanuto.com.
What we keep
| What | Why | How long |
|---|---|---|
| Your email address, if you save your matches with it | To sign you in, and to contact you about your account | Until you delete your data |
| Your CV or the background you write, and the profile we read from it, including your name if the CV has one | To check jobs against you | Until you delete your data |
| Your searches, the roles we found and their fit scores, and what you save, apply to, dismiss or react to, with any notes | To show your matches and steer future searches | Until you delete your data |
| Tailored CVs you make, and the job ads they were made for | So you can open and edit them again | Until you delete your data |
| Passes and other purchases: a Stripe reference, the amount and what it bought. No card details. | To know what you’ve paid for | Until you delete your data |
| A one-way code made from your email address, once you’ve had the free tailored CVs | So the free CVs are given once per person, even after an account is deleted | Kept, but it can’t be turned back into your address |
| Server logs: the pages and requests made, with IP addresses and errors | To keep the site working and secure | [Fly.io log retention] |
A sign-in code we email you is stored only in a scrambled form and deleted once used or after 10 minutes. A workspace that’s started but never set up, and has no email, is deleted automatically after about a day. Our server keeps nightly backups for 5 days, so something you delete can stay in a backup for up to 5 days before it’s gone for good.
Please leave out of your CV anything we don’t need, such as your date of birth, health, religion or a photo. We don’t use it, and you’re safer without it.
Cookies
We use cookies only to make the site work, so we don’t ask before setting them:
- Your session (
radar_uid), so the site knows which workspace is yours. It lasts about 13 months, or until you sign out or delete your data. - Invite and gift links (
radar_ref,radar_gift), which remember the link you arrived from for 30 days. The invite code names a group of links, never a person.
Your light or dark choice is stored in your own browser and never sent to us. We don’t use analytics or advertising cookies, or any third-party scripts. Even the fonts come from our own server.
Who else sees it
These companies process data for us, under contracts that limit them to doing that job:
- Google (Gemini API) reads your CV and job ads to pull out your experience and each role’s requirements, and helps word tailored CVs. We use Google’s paid service, where Google doesn’t use what we send to improve its products. [Google’s abuse-monitoring retention]
- TypeSafe scores each job against your profile. [what it keeps, and for how long]
- Fly.io hosts our server and database in London.
- Resend sends the sign-in codes to your email address.
- Stripe sells passes as merchant of record. It collects your payment details and email and handles receipts, VAT and refunds as its own controller, under Stripe’s privacy policy. We never see your card.
Google, TypeSafe and Resend may process data outside the UK. When they do, it’s covered by [UK-US data bridge / UK addendum to the EU standard clauses].
Why we’re allowed to
Most of this is needed to provide the service you asked for (contract). Logs, and the one-way code that stops the free CVs being claimed twice, are kept for security and to prevent misuse (our legitimate interest).
Fit scores are automated
The fit percentage is worked out automatically. It only ranks job ads for you. It isn’t sent to employers and doesn’t decide anything about you. If a score looks wrong, the reasons are shown next to it, and you can change your profile.
Your rights
You can see, correct, download or delete your data, and object to how we use it. Most of this you can do yourself: your profile is editable, and Delete my data (under Your data in the app) erases everything at once. For anything else, email support@umanuto.com from the address you sign in with. We’ll reply within a month.
If you’re unhappy with how we’ve handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
Changes
If this changes in a way that matters, we’ll say so on the site. Last updated [date].