Legal · effective 17 July 2026
Privacy Policy
How we collect, use, share, retain, and protect personal information. Written to meet the Australian Privacy Act 1988 (APPs), the EU/UK GDPR, and comparable global regimes.
1. Who we are
SoulSepAI (ABN 19 200 874 062), trading as ViserUp, based in Melbourne, Victoria, Australia, is the data controller responsible for personal information processed through ViserUp. Contact: soulsep.ai@gmail.com.
2. Information we collect
Account data (name, email, password hash, authentication tokens). Profile data (phone, LinkedIn URL, avatar). Resume data (documents, parsed text, skills, experience, location). Usage data (pages visited, feature interactions, device, browser, IP address, timestamps). Job-search data (searches, roles, saved jobs, match scores, notes). Communications you send us. Cookies and similar technologies (see Cookie Policy).
3. How we use it (purposes & legal bases)
We use personal information to provide and secure the service, generate AI outputs you request, personalise recommendations, communicate service updates, prevent fraud/abuse, comply with law, and improve ViserUp in aggregate. Legal bases under GDPR: performance of contract (Art. 6(1)(b)), our legitimate interests in operating and improving the service (Art. 6(1)(f)), consent for marketing and non-essential cookies (Art. 6(1)(a)), and legal obligations (Art. 6(1)(c)). Under the Australian Privacy Principles, we handle personal information for the primary purposes above and for reasonably expected related secondary purposes.
4. Sensitive information
Resumes can contain sensitive information (health, disability accommodations, memberships, political or religious associations, sexual orientation) even when you don't intend to share it. We ask you not to include sensitive information unless necessary. Where you do, you consent to our processing it to deliver the service.
5. Sharing & subprocessors
We share personal information with vetted service providers acting on our instructions: cloud hosting, authentication, database, storage, email, analytics, error monitoring, and AI model providers. We do not sell personal information. We may disclose information to comply with law, enforce our Terms, or protect rights, safety, and property. A current subprocessor list is available on request at soulsep.ai@gmail.com.
6. International transfers
ViserUp is operated from Australia and uses providers in the EU, UK, US, and other regions. Where personal information is transferred outside your jurisdiction, we rely on lawful transfer mechanisms including Standard Contractual Clauses, adequacy decisions, and, for Australian users, taking reasonable steps under APP 8 to ensure overseas recipients handle information consistently with the APPs.
7. Retention
We keep personal information only as long as needed for the purposes above or as required by law. Defaults: account data — for the life of the account plus up to 90 days; resume/job-search data — for the life of the account or until you delete it; logs — up to 12 months; backups — up to 35 days rolling. See Data Retention & Deletion Policy for details.
8. Your rights
Depending on your location, you have rights to access, correct, delete, port, restrict, or object to processing of your personal information, and to withdraw consent at any time. GDPR/UK users may lodge a complaint with their supervisory authority. Australian users may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au. You can exercise most rights directly in-app (Account → Delete profile, resume export, marketing toggles) or by emailing soulsep.ai@gmail.com. We respond within 30 days.
9. Automated decisions & AI
Job match scores, ATS scores, and resume suggestions are produced by automated systems. They are advisory; they do not, on their own, produce legal or similarly significant effects for you. You can request a human review of any automated output that materially affects you by emailing soulsep.ai@gmail.com.
10. Security
We use TLS in transit, encryption at rest for stored files and databases, role-based access control, row-level security, audit logging, and least-privilege operational practices. No system is perfectly secure — see our Security Statement for our full posture and how to report vulnerabilities.
11. Children
ViserUp is not intended for children under 16. See Children's Privacy Policy.
12. Changes
We will notify you of material changes to this Policy by email or in-app before they take effect.
13. Contact
Questions, complaints, requests, or notices under this document can be sent to soulsep.ai@gmail.com or by post to SoulSepAI (ViserUp), Melbourne, Victoria, Australia. ABN 19 200 874 062.