1. Introduction

FractionalGPT ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use our Service.

2. Information We Collect

Information You Provide

Role descriptions and requirements
Candidate information (CVs, notes, names)
Payment information (processed by Stripe)
Contact information for support requests

Information Collected Automatically

Usage data (pages visited, features used)
Device information (browser type, operating system)
IP address (for security and analytics)

3. How We Use Your Information

To provide and improve our Service
To generate hiring packs and outputs
To process payments
To respond to support requests
To analyze usage and improve features
To detect and prevent fraud

4. Data Processing

AI Processing: Role and candidate information is processed using AI services to generate outputs. Data is transmitted to these processors for the purpose of generating hiring pack outputs:

OpenAI (GPT-4) - primary AI processing
Vercel - hosting and serverless functions
Stripe - payment processing

We do not use your data to train AI models. Your candidate data is processed only to generate your requested outputs and is not retained by AI providers beyond the processing session.

Payment Processing: Payment information is processed by Stripe. We do not store credit card details on our servers.

5. Data Retention

We retain your data only as long as necessary to provide the Service. Session data is stored temporarily during your workflow. You can request deletion of your data at any time.

6. Data Sharing

We do not sell your data. We may share data with:

AI providers (OpenAI) for processing
Payment processors (Stripe) for transactions
Analytics services for improving the Service
Legal authorities when required by law

7. Your Rights

Under GDPR and UK data protection law, you have the right to:

Access your personal data
Correct inaccurate data
Request deletion of your data
Object to processing
Data portability
Withdraw consent

8. Candidate Data

Your Responsibility: You are responsible for ensuring you have appropriate consent or legal basis to input candidate data into our Service.

Candidate Rights: Candidates whose data is processed through our Service retain their data protection rights. You must inform them of how their data is being used.

9. Security

We implement appropriate technical and organizational measures to protect your data, including:

HTTPS encryption for all data transmission
Secure cloud infrastructure
Access controls and authentication
Regular security reviews

10. Cookies

We use essential cookies for functionality (session management) and analytics cookies to understand usage. You can control cookie preferences in your browser.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our website.

12. Contact

For privacy-related questions or to exercise your rights, contact us at privacy@fractionalgpt.com.

13. Data Protection Officer

For formal data protection inquiries, contact: dpo@fractionalgpt.com