Privacy Policy
Applies to Kyora Score at score.kyoraiq.com
Last updated: July 3, 2026
Kyora IQ ("we," "us," or "our") operates Kyora Score, a tool that analyzes your resume against a target cybersecurity role and produces a readiness report, a rewritten resume, a project roadmap, and interview preparation (the "Service"). This Privacy Policy explains what personal information we collect through the Service, how we use and share it, how long we keep it, and the choices and rights you have. By using the Service, you acknowledge that you have read and understood this policy.
Information We Collect
Depending on how you use the Service, we collect the following:
- Resume content. When you upload a resume, we process the text it contains, which may include your name, contact details, work history, education, certifications, skills, and any other information you chose to put in your resume.
- Email address. We collect the email address you provide so we can deliver your report link and communicate with you about the Service.
- Target role and selections. The role you choose and the options you select for your analysis.
- Payment information. When you purchase, payment is processed by our payment processor. We do not store your full card number; we receive confirmation and limited transaction details.
- Technical and usage information. Your IP address, browser and device information, and information about how you interact with the Service, collected automatically and used for security, rate limiting, and fraud prevention.
- Consent records. When you agree to our terms and to receive communications, we record that you consented, along with the date, time, and IP address, to demonstrate compliance.
How We Use Your Information
- Provide the Service. We use your resume content and target role to generate your readiness report, rewritten resume, roadmap, and interview prep, and we use your email to deliver your report link and provide support.
- AI processing. To analyze your resume, we send its text to our AI provider (Anthropic) solely to generate your report. We instruct the provider to process it only for this purpose. We do not use your resume to train AI models.
- Communications. We use your email to send you your report, service and account messages, and, where you have opted in or as permitted by law, marketing and promotional messages. You can opt out of marketing at any time.
- Security and fraud prevention. To authenticate requests, enforce rate limits, detect and prevent abuse, and protect the Service.
- Legal and compliance. To comply with applicable law and respond to lawful requests, and to enforce our terms.
How the Service Handles Your Resume
Your resume is treated as confidential input, not public content. We extract only the text needed for analysis. After your report is generated, we delete the raw resume text we used for processing; we retain the derived report and the limited record needed to let you retrieve your report and to support your account. Your resume is never shown publicly or shared with other users.
Service Providers We Use
We share personal information with vendors who process it on our behalf, under agreements that limit their use of it to providing services to us:
- Anthropic, to perform the AI analysis of your resume text.
- Supabase, for secure database storage of your report and account records.
- Vercel, for hosting and delivery of the Service.
- OneSignal, to send transactional and, where applicable, marketing email.
- Our payment processor, to process purchases securely.
These providers may process and store information in countries other than where you live. Where we transfer personal information out of the EEA or UK, we rely on recognized safeguards such as Standard Contractual Clauses.
How We Disclose Information
We do not sell your resume content. We may disclose personal information: to the service providers above; when you direct or consent to it; in connection with a business transaction such as a merger or acquisition; to comply with law or valid legal process; and to protect the rights, safety, and security of Kyora IQ, our users, and the public.
Email and Marketing Consent
When you provide your email to use the Service, you consent to receive the emails necessary to deliver your report and support your use of the Service (transactional emails). Separately, you may opt in to receive marketing and promotional emails. Every marketing email includes an unsubscribe link, and you may opt out at any time. If you opt out of marketing, we may still send you non-promotional messages about your purchase or your report.
Data Retention
We keep the raw text of your uploaded resume only as long as needed to generate your report, after which we delete it. We retain your report, email, and transaction records for as long as needed to provide the Service, allow you to retrieve your report, comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion as described below.
Your Rights and Choices
Depending on where you live, you may have rights to access, delete, correct, or receive a copy of your personal information, and to opt out of the sale or sharing of personal information or of targeted advertising. You may also opt out of marketing at any time. If you visit us with a Global Privacy Control signal enabled, we treat it as an opt-out request for that browser where applicable. To exercise any right, contact us using the details below. We will not discriminate against you for exercising your rights, and we may need to verify your identity first.
If you are in the UK or EEA: you may also object to or ask us to restrict certain processing, and where we rely on consent, you may withdraw it at any time without affecting prior processing. You may lodge a complaint with your local data protection authority.
You can also exercise data-sharing opt-out choices here.
Children's Data
The Service is not intended for children, and we do not knowingly collect personal information from children under the age of majority in your jurisdiction. If you believe a child has provided us information, contact us and we will delete it.
Security
We use technical and organizational safeguards to protect your information, including transport encryption, access controls, and data minimization. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security. Please avoid sending sensitive information through unsecure channels.
Changes to This Policy
We may update this policy to reflect changes in our practices or for legal or operational reasons. We will post the updated policy here and revise the "Last updated" date, and provide additional notice where required by law.
Contact Us
For privacy questions or to exercise your rights, email training@kyoraiq.com or support@kyoraiq.com, or write to us at 626 North Alafaya Trail, Suite 206 PMB 1001, Orlando, FL 32828, US. For purposes of applicable data protection laws, Kyora IQ is the data controller of your personal information.