Privacy Policy
Prometrix (tryprometrix.com) · UK GDPR · Last updated 5 July 2026 · Contact: prometrixai@gmail.com
This explains what personal data Prometrix collects, why, who we share it with, and the rights you have. If anything here conflicts with your statutory rights, your statutory rights prevail.
1. Who we are
Prometrix is an AI-powered job-search tool. For the personal data described here, Prometrix is the data controller. For any privacy request, email prometrixai@gmail.com.
2. What we collect
Account. Your name and email, and a securely hashed password (we never store it in plain text). Social sign-in (Google) shares your verified email and name with us.
Profile and CV. Your CV text and work history, target roles, locations, salary floor, visa needs and other job preferences you enter.
Generated content. The tailored CVs, cover letters, interview transcripts and other documents Prometrix produces for you.
Usage and security logs. Basic logs of actions and requests, used to apply plan limits, keep the service secure, and improve it.
Payments. Handled by Stripe. We never see or store your card details.
Free CV audit. If you use the free mini-audit without an account, we use your CV text only to produce your result. We store it for up to 90 days then delete it automatically; your name, email and overall score may be kept so we can follow up. Ask us to delete everything sooner at prometrixai@gmail.com.
3. How we use your data, and our lawful bases
To deliver the service you ask for - scoring, tailoring, documents, matches (performance of a contract).
To secure and improve the service and prevent abuse (legitimate interests).
To meet legal obligations such as keeping payment records (legal obligation).
We do not sell your data, and we do not use it to train third-party AI models.
4. AI processing
To do its job, Prometrix sends the relevant content (such as your CV and a job description) to Anthropic's Claude to perform the analysis and generation. Anthropic processes this under contract, on our instructions, and does not use it to train its models for this use. AI output can contain errors; you review everything before you use or send it, and Prometrix never submits an application for you.
5. Browser extension
The Prometrix browser extension only acts when you click something - it never reads or sends anything in the background. On a job page, clicking Optimise & Apply reads that page's job title, company and description text and sends it to Prometrix to score and tailor your CV, the same way pasting a job description on the website does. On a search results page, clicking scan sends the visible job cards' title, company, salary and short snippet for a rough fit read. When autofilling an application form, it fills in your own name, email and location from your Prometrix profile - it never submits the form or reads anything else on the page. The extension talks only to Prometrix's own API (api.tryprometrix.com); it does not talk to LinkedIn, Indeed or any other site's servers, and does not sell or share this data beyond the sub-processors below.
6. Who else processes it (sub-processors)
We use a small set of providers, each acting under contract and only on our instructions:
- AnthropicRuns the Claude AI that scores roles, tailors CVs and generates documents (United States).
- StripeProcesses subscription payments. We never see or store your card details.
- ResendSends transactional email (verification, password reset, delivery).
- RailwayHosts the application server and database.
- VercelHosts and serves the web app.
7. International transfers
Some providers (for example Anthropic) process data in the United States. Where data leaves the UK, it is protected by appropriate safeguards such as the UK International Data Transfer Agreement or Standard Contractual Clauses.
8. How long we keep it
We keep your account data while your account is active and delete it on request or after you close your account, except for limited records (such as payment records) we must retain to meet legal obligations. Free-audit CV text is deleted after 90 days. Deleting your account from Account settings removes your profile, CVs, applications, saved jobs and preferences.
9. Your rights
Under UK GDPR you can access, correct, delete, export, restrict or object to our use of your data, and withdraw consent at any time. Email prometrixai@gmail.com and we will respond within one month. You can also complain to the UK Information Commissioner's Office (ico.org.uk), though we hope you will contact us first.
10. Security
We protect your data with encryption in transit, hashed passwords, signed session tokens and email verification on sign-up. No system is perfectly secure, but we take reasonable measures appropriate to the data we hold.
12. Children
Prometrix is for people aged 16 and over. We do not knowingly collect data from children under 16.
13. Changes to this policy
We may update this policy as the service evolves. We will change the date above and, for material changes, give you reasonable notice. Continuing to use Prometrix after a change means you accept the updated policy.
14. Contact
For any question or request about your data, email prometrixai@gmail.com.
See also our Terms of Service and Refunds & Cancellation policy.