Privacy Policy
Effective date: July 27, 2026
This Privacy Policy explains how Nahag ("Nahag+," "we," "us") collects, uses, discloses, and protects your personal information when you use the Service. It is written to reflect the requirements of the GDPR, UK GDPR, PIPEDA, CCPA/CPRA, and comparable frameworks applicable to our users in Canada, the United States, the United Kingdom, the European Union, and Australia.
1. Information We Collect
| Category | Examples |
|---|---|
| Account information | Name, email address, password (hashed), account preferences |
| Resume data | Resume uploads, work history, education, skills |
| Job description data | Job postings you submit for tailoring |
| Interview data | Written and spoken interview responses |
| Voice recordings | Audio captured during mock interview sessions |
| AI-generated feedback | Feedback, scores, and suggestions generated about your materials |
| Usage analytics | Pages visited, features used, session duration, device/browser data |
| Billing information | Subscription tier, transaction history (processed via a third-party payment processor; we do not store full card numbers) |
2. How We Use Resume and Job Description Data
We process your resume and the job descriptions you submit to generate tailored suggestions, keyword alignment, and formatting recommendations. This data is used to generate your AI Output and, where you have consented, to improve and train our AI features in de-identified or aggregated form. We do not sell your resume content to employers, recruiters, or data brokers.
3. How We Use Voice and Interview Data
When you use mock interview features, we may record and transcribe your voice to generate feedback on content and delivery. Nahag+ processes voice recordings solely to provide conversational interview functionality and generate interview feedback. We do not use voice recordings to identify individuals, create biometric profiles, detect emotion, infer personality traits, or perform voice-identity matching.
Voice recordings are:
Voice recordings are:
- Processed to generate transcripts and AI feedback;
- Stored in accordance with our Data Retention Policy (30 days by default, deletable earlier by you);
- Not used to train third-party AI systems outside our processing agreements without your explicit consent;
- Deletable by you at any time via your account settings or by request to support@nahagplus.com.
4. Cookies and Analytics
We use cookies and similar technologies for authentication, functionality, and analytics. See our Cookie Policy for details and how to manage your preferences.
5. Legal Basis for Processing (GDPR/UK GDPR)
Where GDPR or UK GDPR applies, we process your personal data on the following bases:
- Contract: to provide the Service you've signed up for;
- Consent: for voice recording, marketing communications, and optional AI training uses;
- Legitimate interests: for security, fraud prevention, and service improvement, balanced against your rights;
- Legal obligation: where required by law (e.g., tax and billing records).
6. Your GDPR/UK GDPR Rights
If you are located in the EU or UK, you have the right to: access your data; rectify inaccurate data; erase your data ("right to be forgotten"); restrict processing; data portability; object to processing (including profiling); and withdraw consent at any time. You also have the right to lodge a complaint with your local supervisory authority (e.g., the ICO in the UK).
7. Your CCPA/CPRA Rights (California)
If you are a California resident, you have the right to: know what personal information we collect and how it's used; request deletion of your personal information; correct inaccurate information; opt out of the "sale" or "sharing" of personal information (Nahag+ does not sell personal information); limit use of sensitive personal information; and not be discriminated against for exercising these rights.
8. Data Retention
We retain personal information only as long as necessary for the purposes described in this Policy, or as required by law. See our full Data Retention Policy for category-specific retention periods.
9. International Data Transfers
Nahag+ may process and store data in Canada, the United States, and other countries where our service providers operate. Where we transfer personal data from the EU/UK to a country without an adequacy decision, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum.
10. Security Measures
We apply administrative, technical, and physical safeguards to protect your data, described further in our Security Policy, including encryption in transit, access controls, and regular security review.
11. Exercising Your Rights
To exercise any privacy right described above, email support@nahagplus.com with the subject line "Privacy Request." We will verify your identity and respond within the timeframe required by applicable law (e.g., 30 days under GDPR, 45 days under CCPA).
12. Children's Privacy
Nahag+ is not directed to children and is not intended for use by anyone under the applicable age of digital consent in their jurisdiction. We do not knowingly collect personal information from children.
13. Contact Us
Questions about this Privacy Policy or our data practices can be directed to support@nahagplus.com.