Privacy Policy
Last updated: July 29, 2026
Data Controller
The data controller responsible for your personal information under this policy is Reviya A.I Technologies LTD (Israeli company registration no. 517319281), trading as Callback ("we", "us"). For privacy questions or to exercise your rights, contact ehud@reviya.ai.
1. Information We Collect
We collect information you provide directly, including your name, email address, uploaded CVs and resumes, supplementary work-history material (performance reviews, notes, LinkedIn exports, and similar documents you choose to upload), job descriptions you provide, and any answers you give to follow-up questions used to improve your profile. We also collect usage data such as device information, IP addresses, and interaction patterns to improve our Service.
2. How We Use Your Information
Your information is used to build your Master Profile, generate tailored CVs, cover letters, and submission instructions against the job descriptions you provide, process payments, communicate with you about your account, and ensure the security of our platform.
3. CV & Work-History Data
Your uploaded CVs, supplementary documents, and job descriptions are processed using AI to extract, consolidate, and rewrite work-history content into tailored application materials. This data is encrypted at rest and in transit. We never use this data for purposes other than providing the Service to you, and we never sell or share it with third parties.
We do not intentionally collect sensitive special-category information (such as health status, religious affiliation, or union membership). Because CVs and free-text notes are user-authored, we cannot fully prevent such details from being included if you choose to add them — we recommend not including anything beyond standard professional history, and any such information volunteered by a user is still handled under the same security and access controls as the rest of this policy.
Legal Basis for Processing
We process your CV, work-history, and job-description data to perform our agreement with you (GDPR Article 6(1)(b)). We process anonymised analytics on the basis of legitimate interest in improving the Service (GDPR Article 6(1)(f)).
4. Data Sharing & Sub-Processors
We do not sell your personal information. We share data only with the sub-processors listed below, under strict contractual obligations to protect your data:
- Google Cloud Platform (United States) — hosting of application data and uploaded documents, encrypted at rest.
- Google Gemini / Google AI (United States) — processing of your CVs, job descriptions, and profile data to generate tailored output.
- Lemon Squeezy, LLC (United States) — our merchant of record for one-time purchases. We do not store payment card information; payment details are handled by Lemon Squeezy.
- Resend (United States) — delivery of the emails containing your tailored CV, cover letter, and submission instructions.
External job-listing sources (not sub-processors of your data): if you use the Autopilot job-search feature, we query publicly available job-listing data from Adzuna, Greenhouse and Lever's public job-board endpoints, USAJOBS, and TheMuse to find matching postings. None of your personal data is sent to these sources — we query them using your stated search criteria (job title, location, etc.) only. LinkedIn postings are surfaced only via a direct link that opens in your own browser under your own LinkedIn session; we do not query LinkedIn's systems on your behalf and no data about you is sent to LinkedIn by our Service.
We will update this list when sub-processors change. To request the current sub-processor list, contact ehud@reviya.ai.
International Data Transfers
Your data is stored and processed on Google Cloud Platform servers located in the United States, and processed by Google AI also in the United States. If you access the Service from outside the U.S., your information will be transferred to and processed in the U.S. We rely on appropriate safeguards (e.g., Standard Contractual Clauses) where required by applicable law.
5. Data Retention
- Uploaded CVs and supplementary documents: retained only while your account is active; deletable by you at any time; permanently purged within 30 days of deletion or account closure.
- Extracted text and your Master Profile: retained for the life of your account, since it powers every future tailoring run; you can request full erasure at any time, which cascades to all data derived from it.
- Job descriptions and completed run outputs (CVs, cover letters, instructions, scorecards): retained 12 months to support your history and re-runs, unless you pin them, then auto-purged; individually deletable at any time.
- Autopilot search criteria and matched postings: retained while Autopilot is active, purged 90 days after you pause or cancel it.
- Billing records: retained per standard financial record-keeping requirements (typically around 7 years), kept separate from your CV/profile content.
- Email delivery logs (confirmation only, not the content of what was sent): retained 90 days.
- On full account deletion: all CV content, profile data, job descriptions, and run outputs are permanently deleted within 30 days; billing records are retained separately as required by law.
6. Your Rights
You have the right to access, correct, or delete your personal data at any time. You can also request a copy of your data or restrict its processing. To exercise these rights, contact us or visit your account settings.
7. Security
We implement industry-standard security measures including encryption, access controls, and regular security audits to protect your information from unauthorized access, alteration, or destruction.
Texas Privacy Rights (TDPSA)
If you are a Texas resident, under the Texas Data Privacy and Security Act (TDPSA) you have the right to: (i) confirm whether we process your personal data and access that data; (ii) correct inaccuracies in your personal data; (iii) delete your personal data; (iv) obtain a portable copy of your personal data; (v) opt out of the sale of personal data, targeted advertising, or profiling that produces legal or similarly significant effects; and (vi) appeal a denial of these rights.
To exercise your TDPSA rights or to appeal a denial, email ehud@reviya.ai with the subject line "Texas Privacy Request." We will respond within 45 days as required by law.
Florida Privacy Rights (FDBR)
If you are a Florida resident, under the Florida Digital Bill of Rights (FDBR) you have the right to: (i) confirm whether we process your personal data and access it; (ii) correct inaccuracies; (iii) delete your personal data; (iv) obtain a portable copy; (v) opt out of the sale of personal data, targeted advertising, and profiling; and (vi) appeal a denial of these rights.
To exercise your FDBR rights or to appeal, email ehud@reviya.ai with the subject line "Florida Privacy Request." We will respond within 45 days as required by law.
Children's Privacy
Our Service is not intended for children under 16. We do not knowingly collect personal information from minors under 16. If you believe a child has provided us with personal information, contact ehud@reviya.ai and we will delete the data promptly. Where required, we obtain verifiable parental consent before collecting personal information from a minor.
Payments
Payments are processed by Lemon Squeezy, LLC, our merchant of record. We do not store credit card information. Lemon Squeezy's privacy policy governs the handling of payment details.
8. California Privacy Rights (CPRA)
If you are a California resident, under the California Privacy Rights Act (CPRA), you have the right to know what personal information we collect, to access and correct it, to delete it, to opt out of the sale or sharing of personal information (we do not sell or share your personal information), and to limit the use of any sensitive personal information you choose to include in your uploaded documents.
To exercise these rights, contact us at ehud@reviya.ai. We will process your request within 45 days as required by law.
9. Contact Us
For privacy-related questions, contact us at ehud@reviya.ai.