AI processing statement

1. What this is about

Aptora is a tool that works with artificial intelligence (AI): an uploaded CV becomes a structured profile, an advertisement becomes an editable job, and the two become an explainable match. This statement tells you which of your content is transmitted to which provider for this. You consent to it at registration, separately from the Terms.

2. Which content is processed

We process the content you enter, upload or forward in Aptora, insofar as one of the functions listed below needs it:

1. Files you upload — PDFs, images and photos of CVs or job advertisements — with their full content.
2. The personal details they contain: name, contact details, career history, education, skills, projects, languages, certificates and references. This can include details about other people, such as referees.
3. Your profile, your job preferences and search criteria, once you start a match or an adaptation.
4. Jobs and project descriptions, including contact persons named in them.
5. Messages: emails from known job portals to your inbound address, and recruiter emails you want to answer with Aptora.
6. The free text of reviews before they are published.
7. In teams: candidate profiles, when the team expressly starts an AI assessment of a search.

3. What it is transmitted for

Profile import —

the uploaded file (PDF or image) with its full content; it becomes your profile.

Job import —

the text or file of the advertisement; it becomes a job.

Skill detection —

excerpts from profiles and jobs; they become comparable skills.

Matching with jobs —

your profile summary, skills and preferences plus the data of the jobs found; the order is refined from this.

Adapting a profile to a job —

your profile and the chosen job; an adapted version of your profile results, without new facts.

Replying to a recruiter email —

the selected recruiter email and your profile; a draft results that you review before sending.

Reviews —

the review text; it is checked for insults and other people's personal data.

AI assessment of a search (teams) —

the profiles of the candidates found and the team's search criteria; an explained assessment for the team results.

Not every input is transmitted. What is transmitted is what one of these functions needs, when you trigger it or when it directly follows an action of yours, such as skill detection after an import. Emails that do not come from a known job portal are not transmitted for job extraction.

4. Recipient and transfer to the USA

The recipient is Anthropic, PBC, San Francisco, USA, as our processor. The content is processed on its infrastructure in the United States. The transfer is safeguarded by the European Commission's standard contractual clauses and, where applicable, by the provider's certification under the EU-US Data Privacy Framework. The level of protection for personal data in the USA may differ from that in the European Union.

Anthropic processes the content only to deliver the result to us and states that it does not use data transmitted through its API to train its models. We do not use your content to train AI models either. Our other service providers are listed in the privacy policy.

5. What the AI decides — and what it does not

AI results are suggestions that you review and confirm. The AI does not make decisions with legal effect about you or other people (Art. 22 GDPR), and it does not add facts that are not in your content.

6. Other people's data

If you upload content about other people, such as references or candidate profiles, you make sure that you are allowed to do so and that those people are informed (§ 6 (4) and § 7 of the Terms).

7. Prerequisite and ending it

Without this processing we cannot offer you Aptora. Your consent is therefore a prerequisite for any use; without it the registration is not completed. We do not offer any part of Aptora without AI.

You can withdraw your consent at any time: by email to aptora@cloudsurf.digital or by deleting your account yourself (Settings, “Delete account”). With the withdrawal your use of Aptora ends: after a withdrawal by email we delete your account; export your data first if you want to keep it. From the deletion on, no further AI processing starts for your account. Your other rights under the GDPR, for example to access, erasure or objection, remain unaffected.