Privacy policy
Updated: 27.09.2026
This explains how Bewero handles your data. Optional services work only when configured. AI consent is optional and can be withdrawn in Settings.
1. Controller
Thalassa Consulting Kft., Dózsa György út 37, 1188 Budapest, Hungary, represented by Patrik Talasi, Founder and CEO. All privacy requests: info@thalassa-consulting.com. No data protection officer has been appointed.
2. Hosting and documents
Vercel hosts the website and processes connection information, including IP addresses, request times and URLs, for delivery and security, based on our legitimate interest in operating a secure service (GDPR Article 6(1)(f)). Resumes, applications and the job tracker are stored in your browser until you delete them. An account does not currently sync these documents between devices. Export documents for backup. Necessary language preferences and your choices are also stored locally.
3. Accounts and payments
When enabled, Clerk processes sign-in and account data. A chosen social sign-in provider also processes your login. Stripe handles payments; we receive payment status and account references, not your full card details. Upstash Redis stores credits, job status and billing events. These operations support the contract (Article 6(1)(b)); legally required records are retained to meet legal obligations (Article 6(1)(c)).
4. Text AI and imports
With your consent, the text needed for an AI task is sent to DeepSeek (Hangzhou DeepSeek Artificial Intelligence Co., Ltd., China). OpenAI may be used as a fallback if configured. Recognised names, email addresses, phone numbers, birth dates and links are replaced with placeholders; free text can still contain personal information. Photos are not sent to text AI. Import files are read on our server and are not persistently stored by the app. Additional AI analysis is optional.
5. International processing
DeepSeek processes data in China, which has no EU adequacy decision. Government access and enforcement of your rights may differ from EU protection. Inputs may be used for model improvement under the provider’s terms. Other providers may also process outside the EEA; their privacy notices explain their handling. Optional AI processing relies on consent (Article 6(1)(a)), covering the described transfer and risks. Withdraw consent in Settings at any time for future processing. Accepting terms alone does not replace this choice.
6. Photo studio
The photo studio asks for separate consent for each job. When enabled, Google Gemini processes the selected photos and instructions, potentially outside the EEA. Only upload photos you are authorised to use. Bewero does not persistently store input selfies. Job records expire after 30 days. Generated images are stored privately, can be deleted in the studio and are intended to expire automatically after 30 days. Provider retention follows the provider’s own terms.
7. Optional analytics and email
PostHog analytics and Google advertising measurement, when configured, start only after your separate cookie choice. You may withdraw that choice without losing app access. Resend may deliver requested or contractual emails. Abandoned checkout reminders are sent only if you requested them at checkout.
8. Retention and your rights
Delete local data in Settings or your browser. Contact us about access to or deletion of account and server data. Data is deleted when no longer needed, subject to legal retention requirements. Technical provider logs follow the retention settings of the respective service. Under the GDPR you may request access, rectification, erasure, restriction and portability, object to processing and withdraw consent. You may complain to a supervisory authority, including Hungary’s NAIH (naih.hu) or your local authority. Bewero does not make automated hiring decisions; its ATS score is a technical aid.