Privacy Policy

This Privacy Policy explains how OfferRun (operated by Oleksandr Anatoliiovych Vapniaruk, Individual Entrepreneur (ФОП), registered in Ukraine — "we", "us") collects, uses, and protects your information when you use offer-run.com (the "Service"). For the purposes of the GDPR, the data controller is Oleksandr Anatoliiovych Vapniaruk (Individual Entrepreneur registered in Ukraine), contactable at alexvap23@gmail.com.

1. Information we collect

• Account data: your email address and authentication details.
• Profile & content: the CVs, work history, and other information you upload or enter to use the Service.
• Usage data: actions you take in the app, used to operate, secure, and improve the Service.
• Payment data: top-ups are handled by our payment provider. We receive confirmation of a payment and the amount, but we do not collect or store your full card number.

2. How we use your information

• To provide the Service — generating CVs, cover letters, research, and other features you request;
• To maintain your account and prepaid balance;
• To secure the Service and prevent abuse;
• To communicate with you about your account and support requests.

We process this data to perform our contract with you, on the basis of our legitimate interest in securing and improving the Service, to comply with legal obligations (such as accounting), and with your consent where required.

3. AI processing

To generate your documents and results, the content you provide is sent to third-party AI providers (including Anthropic, based in the United States) that process it on our behalf to return the requested output. We send only what is needed to perform the action you requested.

4. Sharing your information

We do not sell your personal data. We share it only with:

• Our payment provider (Monobank), to process card top-ups;
• Infrastructure and AI providers, who process data solely to run the Service;
• Authorities, where required by law.

5. Data retention & deletion

We keep your information for as long as your account is active. You can delete your account at any time from your settings; this removes your profile, generated documents, and related data. Payment and accounting records are kept for up to 3 years after the transaction, as required by law.

6. Security

We use reasonable technical and organisational measures to protect your data, including encrypted connections and hashed credentials. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

7. Cookies

We use a strictly necessary session cookie to keep you signed in. We do not use it for advertising.

8. Your rights

Depending on your location, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at alexvap23@gmail.com. You also have the right to lodge a complaint with your local data-protection authority.

9. International transfers

We are based in Ukraine, and our AI and infrastructure providers (including Anthropic, based in the United States) may process your data outside your country, including in the United States. Where we transfer personal data from the EEA, UK, or Switzerland, we rely on the European Commission's Standard Contractual Clauses (or an equivalent safeguard) with those providers to protect your data. You may request a copy of the relevant safeguards by emailing us.

10. Children

The Service is not directed to anyone under 18, and we do not knowingly collect their data.

11. Changes

We may update this policy; material changes are reflected by updating the "Last updated" date above.

12. Contact

For privacy questions, contact us at alexvap23@gmail.com.