Privacy Policy and Personal Data Processing

The data controller is SerenGPT headquartered in Geneva, Switzerland and contact email support@serengpt.ai.

We care about protecting your personal data. This privacy policy explains what data we collect, how we use it, and what rights you have under applicable data protection laws, including the EU General Data Protection Regulation (GDPR) and the Swiss Data Protection Act (DSG).

The platform collects and processes personal data for the following purposes:

Creating and generating CVs and cover letters from:

• Files uploaded by the user (PDF, Word, images, or other formats).
• Forms completed on the platform.
• Data imported from the user's LinkedIn profile (with prior user authorisation).

• Job search: we analyse your profile to find job offers matching your skills and experience.
• Communication: we communicate with you to inform you about updates, job offers, and other relevant information.
• Market analysis: we conduct internal analyses to better understand the labour market and user needs.

Processing information using:

• Google (for example, for text extraction or auxiliary services).
• Artificial Intelligence (AI) systems for the analysis and drafting of CV and cover letter content.

All of this without disclosing non-anonymised personal data to these external providers.

Service improvements, internal statistics, and platform maintenance. Improving and personalising our services based on user needs and feedback.

Before using third-party services (such as Google or AI tools), the platform:

• Removes or replaces all personally identifiable information (name, surname, address, emails, phones, specific dates, LinkedIn identifiers, etc.).
• Generates an anonymised dataset that prevents the direct or indirect identification of the user.
• Only these anonymised data are used for external analysis or processing.

In this way, external providers do not receive personal data, but information previously processed by the platform to make user identification impossible.

Processing is based on:

• User consent, given explicitly when registering, uploading documents, or connecting a LinkedIn account.
• Performance of a contract, where processing is necessary to provide the primary CV creation service.
• Legitimate interest, for service maintenance and technical improvement, always without infringing user rights.

We may collect:

• Identification data: name, surname, email, phone (only for CV creation).
• Professional data: work experience, education, certificates.
• Information provided in the CV.
• LinkedIn data authorised by the user.
• Technical browsing data: approximate IP, technical cookies, logs.

No sensitive data (health, religion, ideology…) is requested; if it appears in user files, it will be automatically removed during the anonymisation process.

The platform does not share identifiable personal data with third parties.

Third-party tools (OpenAI, Google, etc.) will only be used with previously anonymised data, exclusively to provide analysis features, CV generation, cover letters, related job search, and other associated functionalities.

External providers operate as processors under the GDPR, always without access to the user's personal information.

Personal data is retained only for the time necessary to generate the CV or while the user maintains an active account.

The user may at any time request the immediate deletion of their data and documents.

Anonymised data used for statistical or service improvement purposes may be retained indefinitely, as they do not allow user identification.

The user may exercise the following rights:

Supervisory authorities:

• Switzerland: FDPIC — edoeb.admin.ch
• EEA: edpb.europa.eu

You may exercise them by contacting us through our contact form or by sending an email to support@serengpt.ai.

Information is stored in Satigny, Geneva, Switzerland on Infomaniak servers. The platform implements technical and organisational measures to ensure:

• Confidentiality and security of data.
• Encryption of communications (HTTPS).
• Internal access controls.
• Automatic deletion of documents after processing.

Google services and other AI tools may involve international data transfers. However, only anonymised data is sent, which does not constitute personal data under the GDPR.

In any case, they are secured through standard contractual clauses (SCCs) or equivalent mechanisms.

The controller may update this Policy at any time. The user will be notified when there is a substantial change.

A. Use of cookies

We use cookies and similar technologies to enhance your experience on our platform, analyse the use of our services, and personalise content.

B. Types of cookies used

• Essential cookies: necessary for the proper functioning of our site and cannot be disabled in our systems.
• Performance cookies: allow us to count visits and traffic sources to measure and improve site performance.
• Functional cookies: allow the site to provide enhanced functionality and personalisation.
• Targeting cookies: our advertising partners may set them to build a profile of your interests and show you relevant ads.

C. Cookie management

You can set your browser to block or alert you when these cookies are installed. However, some parts of the site may not function correctly without them.

Use of Google Analytics

We use Google Analytics to collect information about the use of our site, such as the frequency of page visits, visit duration, and interactions with the site.

Google Analytics collects information such as IP address, browser type, referring page, etc. This data is anonymised and does not allow personal identification.