Keyverta

Privacy policy

Last updated: July 20, 2026

1. Who is the data controller

Keyverta (keyverta.com) is a service operated by OnruTech. For any question about your data you can write to onrutech@gmail.com.

2. What data we process

  • Account data: email, name, and profile picture. Authentication is handled by our provider Clerk; Keyverta does not store passwords.
  • Your resume: the text extracted from the PDF/DOCX files you upload. The original file is not kept; only its text content.
  • Job descriptions: the text of the job postings you paste to analyze.
  • Results: the analyses, tailored resumes, and cover letters generated for you.
  • Resume editor draft: while you write your resume in the editor, a draft is stored only in your browser's local storage (localStorage). It is never transmitted to our servers and is deleted when you save the resume.

3. Purpose and legal basis

We use this data exclusively to provide the service you request: comparing your resume against job descriptions and generating recommendations, tailored versions, and cover letters (performance of a contract, Art. 6.1.b GDPR). We do not use your data for advertising or sell it to third parties, and we do not make automated decisions with legal effects on you.

4. Who else is involved in the processing

  • Clerk (USA, under standard contractual clauses): authentication and session management.
  • Groq, Inc. (USA) — AI processing with no retention for training; the transfer is covered by standard contractual clauses (Art. 46 GDPR). It processes the text of your resume and the job description to generate the analysis.
  • Hetzner (Germany, EU): hosting of the application and the database.
  • Umami (self-hosted in the EU): cookieless web analytics with no individual profiles; only aggregated usage data.

5. How long we keep it

As long as you keep your account. You can delete individual analyses from your history at any time, and when you delete your account all your data (resumes, job descriptions, analyses, and the account itself) is removed immediately from the live database. Backups may retain it for up to 7 more days, after which the deletion is complete and permanent.

6. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction, and portability by writing to the contact email. You can carry out full erasure yourself directly from your account page. You also have the right to lodge a complaint with your data protection authority (in Spain, the AEPD, aepd.es).

7. Changes to this policy

If we change this policy in a material way, we will update the date on this page and, if the change is substantial, notify you when you sign in.