Legal
Privacy Policy
Last updated: 7 July 2026
This Privacy Policy explains how Keryx ("we", "us") handles personal data when you use keryx.app and the Keryx web application (the "Service"). By using the Service you agree to the practices described here.
1. Who we are
Keryx is operated by the Keryx team. If you need to reach us about privacy, email privacy@keryx.app.
2. What we collect
- Account data: name, email, avatar and password hash you provide at sign-up or via a social provider (e.g. Google).
- Content data: job posts, brand voices, templates, letters, interview kits, feedback drafts and any other text you create, upload or paste into Keryx.
- Usage data: basic activity logs (feature used, timestamp, result) that power the audit trail and usage counters.
- Technical data: IP address, browser and device metadata collected by our hosting provider for security and abuse prevention.
3. How we use it
- To provide, secure and improve the Service.
- To generate drafts and run Herald Check on content you submit.
- To enforce plan limits and show usage in your dashboard.
- To communicate about your account, product updates and support requests.
We do not sell your personal data, and we do not use your content to train third-party foundation models.
4. Legal bases (GDPR)
Where GDPR applies, we rely on: performance of the contract (delivering the Service), legitimate interests (security, product improvement), consent (optional marketing emails and non-essential cookies), and legal obligations (tax, accounting).
5. Subprocessors
We use a small set of vetted providers to run Keryx. Current subprocessors include our cloud hosting and database provider, our email delivery provider and our AI inference provider. The current list is available on request from privacy@keryx.app.
6. Retention
We keep your account and content for as long as your account is active. You can delete your account at any time from Settings; this permanently removes your posts, brand voices, templates, scans, communications and audit log. Backups are rotated within 30 days.
7. Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to or restrict certain processing. To exercise these rights, email privacy@keryx.app. You can also lodge a complaint with your local data-protection authority.
8. Security
Data is encrypted in transit (TLS) and at rest by our hosting provider. Access to production systems is restricted to authorised team members and audited. No system is perfectly secure; if you discover a vulnerability, please report it to security@keryx.app.
9. Children
Keryx is not directed to children under 16 and we do not knowingly collect personal data from them.
10. Changes
We may update this policy from time to time. Material changes will be announced in-app or by email. Continued use of the Service after an update means you accept the revised policy.