Privacy

Tailwright is built to handle as little personal data as possible. This page explains what we collect, why, and what control you have. Plain English first, legal precision second.

Who we are

Tailwright is a product concept by Ainika and is developed by Lyrava. The data controller for the service is Ainika Ventures. Contact: hello@tailwright.com.

What we collect, and why

• Your email — to sign you in (magic link or authenticator code) and to contact you about the service.
• Your profile data (industry, target countries, job type, seniority, sector tags, summary, skills, work history, education) — so we can score role fit and tailor applications for you. You enter and own this.
• Jobs you paste or score, and applications you submit — so the tracker and audit log work. Pasted jobs are scoped to your account and are never pooled with other users.
• Encrypted API keys (BYOK) — if you connect your own AI provider key, we seal it with envelope encryption (AES‑256‑GCM). The plaintext key is never stored and is decrypted only in memory at the moment of use.
• Operational logs — minimal request and error logs for reliability.

What we do NOT do

• We do not collect or harvest individuals' personal contact details from the web.
• We do not pool your pasted jobs into a shared dataset.
• We do not sell or share your data with third‑party advertisers.
• We do not train AI models on your data.

Where your data goes

Your CV and the role you're tailoring for are sent to the AI model you've chosen (your own provider under BYOK, or our platform key under the managed‑credits tier) at the moment of scoring or drafting. We don't persist the model's drafts — they're returned to you for download. Operational data lives with our infrastructure providers: Neon (Postgres), Vercel (web hosting), Upstash (queue), Resend (email).

Legal basis (UK/EU GDPR)

We process your data under contract performance (Article 6(1)(b)) for the core service. Optional features (e.g. analytics) are processed under consent(Article 6(1)(a)) where they apply.

Your rights

• Access & export — sign in and use Profile → Export my data to download a JSON file of everything we hold about you.
• Rectification — edit your profile directly any time.
• Erasure — Profile → Delete my account cascades a hard delete of all your rows. We'll honour requests to delete or anonymise where applicable.
• Portability, restriction, objection — email hello@tailwright.com and we'll action your request within one month.

Cookies

We use a small number of strictly necessary cookies: a session cookie to keep you signed in, and a theme preference. We don't use marketing or tracking cookies. If we add analytics later, we'll ask for your consent first.

Retention

We keep your account data while your account exists. When you delete your account, all owned rows are removed from our database immediately. Backups are rotated regularly.

Children

The service is not directed to children under 16.

Changes

If we make material changes to this page we'll update the “last updated” date above and notify approved users by email.

Complaints

If you're in the UK and unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO).