Privacy Policy

1. Who we are

NV Connect Ltd, trading as Recruiter Studio, is the controller of the personal information described in this policy. Our registered address is 84 Morden Road, London SW19 3BP, United Kingdom. You can contact us at hello@nvconnect.uk.

2. Information we collect

• Account information: user ID, name, email address, country, language preference.
• Authentication records, including sign-in events and security metadata.
• Your Brand Voice Profile and content preferences, as you enter them (anonymised facts only).
• Generated posts and drafts stored in your account.
• Usage balance, subscription type and status.
• Stripe customer and subscription references (not card details).
• Consent records, support requests and account-deletion status.

We deliberately keep the database minimal. We do not collect or store candidate CVs, candidate or client databases, candidate or client contact details, special-category personal data, identity documents, full payment-card information or LinkedIn credentials. There is no file-upload functionality at launch.

3. Purposes and lawful bases

• To provide the platform and generate the content you request — performance of a contract.
• To take payment and manage subscriptions — performance of a contract.
• To keep the service secure, prevent abuse and enforce fair use — legitimate interests.
• To send necessary transactional messages such as verification, password reset, security alerts, receipts, failed-payment notices and material service notices — contract and legitimate interests.
• To meet tax, accounting and legal obligations — legal obligation.
• Optional analytics cookies — consent, which you can withdraw at any time.

We do not sell personal information and we do not operate a marketing newsletter.

4. AI processing

When you ask the platform to generate content, the information you have entered for that purpose (your Brand Voice Profile and the facts you supply) may be securely sent to our contracted AI provider, Google Gemini (accessed via the Lovable AI Gateway), solely to provide the requested service. The AI provider acts as a processor under contract. Do not enter personal data about candidates or clients. Automated output must be reviewed by you before publication and is not legal, HR or recruitment-compliance advice.

5. Payment processing

Payments are processed by Stripe. Stripe collects and processes your payment details directly; we receive only limited references such as a customer ID, subscription ID, plan status and payment outcome. We never receive or store full payment-card information.

6. Hosting, database and other providers

The platform is hosted on managed cloud infrastructure with a managed database provider, alongside our email delivery provider, our AI provider and Stripe. Each provider is contracted to process personal information on our instructions only.

7. International transfers

The service is available to recruiters worldwide, and our providers may process information outside your country. Where information is transferred internationally we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses with supplementary measures where required.

8. Security

We use encryption in transit, access controls, row-level security so users can access only their own records, secure secret storage for API credentials, and least-privilege administrative access. No system can be guaranteed absolutely secure, and you should not submit information you are not permitted to share.

9. Retention

Account and content records are retained while your account is active. When deletion is confirmed, we disable the account, cancel future renewals where requested, and delete or anonymise your Brand Voice content and generated posts within your next billing cycle, and encrypted backups roll off within 30 days. We retain only records legally required for tax, fraud prevention, accounting or disputes.

10. Your rights

Depending on your location you may have rights to access, rectification, erasure, restriction, portability, objection, withdrawal of consent and the right not to be subject to unlawful automated decision-making. This policy is written to be consistent with UK GDPR while acknowledging that mandatory local privacy rights may also apply internationally. To exercise a right, use the privacy-request form on our contact page.

11. Account deletion

You can delete individual posts and drafts immediately, and request account deletion from Account Settings at any time.

12. Cookies

See our Cookie Policy for the cookies we use, their durations and how to change your choices. Rejecting optional cookies is as easy as accepting them.

13. Children

The service is intended for professional users aged 18 or over. We do not knowingly collect information from children.

14. Complaints

Please contact us first at hello@nvconnect.uk. You also have the right to complain to your data protection authority. In the UK this is the Information Commissioner’s Office.

15. Changes to this policy

We will update this policy when the service changes and will notify you of material changes by email or in-app notice. The effective date above shows the current version.