Skip to main content
العربيةSign inSign Up

Legal

Trust & Security →

This policy is published in both English and Arabic. In the event of any conflict between the two versions, the Arabic text shall prevail.

Privacy Policy v1.0

Last updated 4 September 2026

Issued by نوابغ الابداع لتنمية قدرات الشباب (Reg. 606722), Amman, Jordan. Operates as Humanly Intelligent.

The Short Version
  • Nothing you create expires. Your tool outputs stay under your account for as long as the account exists, and you can export or erase them at any time. We never sell your data or use it to train AI models.
  • Usage logs record only metadata (service, timestamp, status, duration) — never prompt text, AI output, CV content, or any personal data from input forms.
  • Payment card data is handled entirely by Lemon Squeezy. We never see raw card numbers.

The Short Version

What We Collect & Why

We collect only what is necessary to provide the service.

Account Data

Your name, email address, and password hash. Collected when you register and used for authentication, billing, and communications.

Consent Records

Records of your agreement to these Terms and this Privacy Policy, including timestamp and version number.

Tool Inputs & AI Outputs

Text you enter into any tool, uploaded candidate CV files, and the AI outputs generated from them. Stored to power session continuity and Recall memory. CV content is sent to our AI sub-processor as uploaded, including any personal data it contains. Never used to train AI models. Some tools do not retain their inputs at all — Interview Management discards your raw notes and any file you upload once the debrief is written, keeping neither the text, the file, nor its name. The generated output may quote from those inputs, and any such quotation is stored with the output, under your account, until you delete it.

Usage Metadata

Which tools you use, when, and how often — including request status and processing duration. Used for quota enforcement and product improvement. Usage logs never contain prompt text, AI output, CV content, or any PII from input forms. Not sold or shared with advertisers.

Billing Records

Subscription plan, renewal date, and promotional pricing tier. Raw payment card data is handled entirely by Lemon Squeezy and never touches our servers.

Support Communications

Emails and messages you send to us. Retained to resolve your enquiry and improve our service.

Security & Abuse Prevention

IP address, device type, request timestamps, and rate-limit counters. Used to detect abuse and protect the platform.

Company Branding

Company logo and name you upload to personalise your outputs. Stored in object storage, associated with your account.

Session & Authentication Cookies

Cookies necessary to keep you signed in and to protect your session. See our Cookie Policy for the full list.

  • ContractAccount dataName, email addressAuthentication, billing, communications
  • ContractUsage dataTool inputs, AI outputs, Recall memoryCore service delivery, session continuity
  • ContractPayment dataHandled entirely by Lemon Squeezy — we never see raw card detailsBilling
  • Legitimate interestLog dataIP address, device type, timestampsSecurity, abuse prevention

How We Use Your Data

We use your data to operate and improve Humanly Intelligent. Our processing grounds are:

We use your data to operate and improve Humanly Intelligent. We do not sell your data. We do not use your data to train AI models. AI outputs are generated in-context from your session inputs.

Contract — to deliver the service you subscribed to.

Legitimate interest — to maintain security, prevent abuse, and improve reliability.

We do not sell your data. We do not use your inputs or outputs to train AI models.

Sub-Processors & International Transfers

We share data only with processors necessary to run the service. See our Trust page for the full sub-processor list.

Lemon Squeezy (payments, USA) · Replit (hosting, database, file storage, USA) · Google Cloud (file storage, USA) · Anthropic/Claude (AI generation over user-submitted content, which may include personal data contained in uploaded CVs, USA) · SendGrid (transactional email, USA) · hCaptcha (bot protection, USA) · Plausible (cookieless analytics, EU) · Google (optional sign-in only)

Data associated with your account, including any candidate data you upload, is processed on servers located in the United States by the processors listed above. We protect it there with encryption in transit and at rest, and with signed data processing agreements with every processor. You can request deletion of that data at any time. We do not represent that data is stored or processed within any particular country or region outside the United States.

Lemon Squeezy is the Merchant of Record for all transactions. Payment card data, refund processing, and tax compliance are their responsibility under their published terms.

Third Parties

We share data only with processors that are necessary to run the service: Lemon Squeezy (payments), SendGrid (transactional email), Replit (infrastructure). Each is bound by a Data Processing Agreement.

  • USALemon SqueezyPayment processing
  • USASendGridTransactional email
  • USAReplitInfrastructure & hosting

Candidate contact information (email, phone, address) is never included in any generated output. Uploaded CV files are stored encrypted for as long as your account exists, and are erasable by you at any time.

AI inference calls are made over encrypted connections. Inputs are processed in-context and are not retained by Anthropic/Claude beyond the API request lifecycle.

You may delete your account and all associated data at any time from Settings. Deletion is permanent and irreversible.

Retention Schedule

Data CategoryRetention PeriodDeletion Method
Account dataDuration of the accountHard delete the moment you delete your account
Tool inputs & AI outputsDuration of the accountUser-erasable at any time; deleted with the account
Recall memoryDuration of the accountUser-erasable at any time; deleted with the account
Uploaded CV files and extracted textDuration of the accountUser-erasable at any time; deleted with the account
Billing recordsIndefinite (statutory accounting obligation)Unlinked from your account immediately on account deletion; the record itself is kept indefinitely, as accounting law requires
Support communications12 months from last interactionHard delete
Security logs90 daysRolling purge
System eventsEach event carries its own expiry date and is deleted when it passes; events recorded without one are kept for the life of the accountPurged at expiry

Nothing in this table expires on a timer. Data is deleted in exactly two ways: you delete it yourself, which is instant and always available; or the account goes unused for 24 months, in which case we email you 90, 30 and 7 days before deletion, and any sign-in resets the clock entirely. Cancelling a subscription deletes nothing — you move to the free tier and keep viewing and exporting everything. Billing records are the single exception: they are never deleted, since accounting law requires us to retain them, but the moment you delete your account the record is unlinked from your identity.

Billing & Payments

Payments are processed by Lemon Squeezy, our Merchant of Record. We never store or view your payment card data. On successful payment, Lemon Squeezy shares only your name, email address, country, transaction ID, and amount paid — enough for us to activate your subscription and issue your payment confirmation. Card details and full account numbers remain solely with Lemon Squeezy under their PCI-DSS obligations.

Regional & Global Data Rights

Under Jordan's Personal Data Protection Law (PDPL) and equivalent legislation where applicable, you have the following rights regarding your personal data. We acknowledge every verified request within 3 business days. Where a request concerns a candidate whose data was uploaded by one of our customers, we route it to that customer and keep you informed of progress.

Access

Request a copy of all personal data we hold about you.

Correction

Correct inaccurate personal data (e.g. update your name or email in Settings).

Deletion

Request deletion of your account and all associated data at any time. Deletion is permanent and irreversible.

Withdraw Consent

Withdraw any consent previously given to processing not required to deliver the core service.

Objection

Object to processing carried out on legitimate interest grounds. We acknowledge every verified objection within 3 business days. Where it concerns a candidate whose data was uploaded by one of our customers, we route it to that customer and keep you informed of progress.

To exercise any of these rights, use Settings > Account for self-serve actions, or email info@humanlyintelligent.com.

For Candidates

If your CV or personal information was submitted through Humanly Intelligent by a company or recruiter you applied to, that company is the controller of your data. Humanly Intelligent processes it only on their instructions, as their data processor.

To access, correct, or delete your information, please contact that employer or recruiter directly — they control your candidate record and can act on your request immediately from their own account.

If you are unable to reach them, email privacy@humanlyintelligent.com. We will help identify the account that holds your data and facilitate its correction or deletion, even though we do not control it ourselves.

Contact & Rights Exercise

Self-serve (instant)

Privacy Desk

For requests that require our review — data export, correction, or objection — email info@humanlyintelligent.com or use our contact form. We acknowledge every verified request within 3 business days. Where a request concerns a candidate whose data was uploaded by one of our customers, we route it to that customer and keep you informed of progress.

Update your name or email: Settings → Account

Delete your account and all data: Settings → Account → Delete Account

Export your outputs: use the download buttons on each tool's workspace

Go to Settings →

Refund Policy

2-day money-back guarantee applies to your first payment. Email info@humanlyintelligent.com within 2 days of your first charge for a full refund, no questions asked. Refunds are processed via Lemon Squeezy to your original payment method; bank posting takes 5–10 business days. No partial-month refunds are issued after the 2-day window. If you cancel, your access continues until the end of the paid period.

Third Party Advertising

We do not serve third-party advertising on this platform and we do not set advertising trackers or third-party profiling cookies. Our analytics are powered by Plausible, which is cookieless and does not track individual users across websites.

Data Security

We implement administrative, technical, and physical safeguards designed to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee the security of any information disclosed online.

Our support staff can access your account data only when needed to act on a request you make to us — for example troubleshooting an issue, exporting your data, or processing a deletion request. Every such access is attributed to the staff member who performed it and recorded in an internal audit log.