Privacy Policy

LEJTECH SOLUTIONS ("we", "us", "our"), operating Cletter, is the data controller responsible for the processing of your personal data. This means we determine the purposes and means of processing your personal information.

Contact Information:
LEJTECH SOLUTIONS
Gaffelseglet 13
136 54 Vega, Stockholm
Sweden
Email: cletterbusiness@gmail.com

If you have questions about how we process your personal data, you can contact us via email or through the contact form.

We collect the following types of information when you use our service:

Account Information

• Name and email address (via Google OAuth)
• Profile picture URL (if provided through Google)
• Username (if provided through Google)
• Unique authentication identifier (managed by Clerk)

Content Data

• Resume files and their extracted text content (PDF or DOCX)
• Example cover letters for style analysis (PDF or DOCX)
• Job descriptions and personal comments
• Generated cover letters and their metadata (word count, length preferences)
• File metadata (file names, sizes, types)

Subscription and Payment Data

• Subscription status and plan type
• Payment method information (last 4 digits and brand only, processed by Stripe)
• Billing period dates and renewal information
• Stripe customer and subscription identifiers

Technical Information

• IP address and device type
• Browser type and language settings
• Usage times and session information

Contact Form Data

• Name and email address (when you contact us)
• Subject and message content from contact form submissions

We use your information for the following purposes:

• Provide and improve our service
• Generate personalized cover letters using AI technology
• Authenticate your identity and manage your account
• Process subscription payments and manage billing
• Store your uploaded documents and generated content
• Communicate with you about the service, subscriptions, and account matters
• Analyze usage patterns to improve user experience
• Ensure security and prevent abuse
• Comply with legal obligations, including tax and accounting requirements

The legal basis for our processing is primarily the performance of our contract with you (providing the service you have subscribed to), our legitimate interests in improving the service and preventing fraud, and compliance with legal requirements under Swedish and EU law.

Cletter uses artificial intelligence technology from OpenAI to generate personalized cover letters. When you use our service:

• Your resume text, job descriptions, example letters, and comments are sent to OpenAI's API for processing
• OpenAI processes this data to generate your personalized cover letter
• According to OpenAI's policies, data sent via their API is not stored for longer than 30 days and is not used to train their models
• All communication with OpenAI occurs over encrypted connections (HTTPS)
• We do not have control over OpenAI's data processing practices beyond their API terms

For more information about how OpenAI handles data, please review OpenAI's privacy policy.

We take data security seriously and implement appropriate technical and organizational measures:

• All data is stored securely in Convex's cloud infrastructure with encryption at rest and in transit
• Authentication is managed by Clerk using industry-standard OAuth 2.0 protocols
• File storage uses Convex's secure file storage with access control
• Payment data is processed and stored by Stripe (PCI DSS compliant) - we never store full card details
• All connections use HTTPS encryption (TLS)
• Access to production systems is restricted to authorized personnel only
• We maintain regular backups to prevent data loss

While we implement industry-standard security measures, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but continuously work to improve our protections.

We never sell or rent your personal information. We only share information with trusted service providers necessary to operate the service:

• Clerk: Authentication and identity management. Processes your Google OAuth login data.
• Convex: Database and file storage. Stores your account information, uploaded documents, and generated content.
• OpenAI: AI processing. Receives your resume text, job descriptions, and example letters to generate cover letters.
• Stripe: Payment processing. Handles subscription payments, billing, and stores payment method information.
• EmailJS: Contact form email delivery. Receives and processes your name, email address, subject, and message content when you submit the contact form to deliver your inquiry to us.
• Hosting Provider: Application hosting and delivery infrastructure.
• Legal Requirements: When required by law, court order, or to protect our rights and the rights of others.

All third-party service providers are carefully selected and required to meet adequate data protection standards. They act as data processors under our instructions and are contractually obligated to protect your data.

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Right to Access: Request a copy of your personal information
• Right to Rectification: Correct inaccurate or incomplete information
• Right to Erasure: Request that we delete your data ("right to be forgotten")
• Right to Data Portability: Get your data in a machine-readable format
• Right to Object: Object to certain types of data processing
• Right to Restriction: Restrict how we process your data
• Right to Withdraw Consent: Where processing is based on consent

To exercise these rights, contact us via the contact form. We will respond to your request within one month.

You also have the right to lodge a complaint with your local data protection authority if you believe we have not handled your personal data appropriately.

Cletter uses cookies for the following purposes:

• Essential cookies: For authentication and session management via Clerk. These are strictly necessary for the service to function and allow you to remain logged in.
• Functional cookies: To remember your preferences and maintain application state

We do not use third-party cookies for advertising, analytics, or behavioral tracking. You can control cookies through your browser settings, but disabling essential cookies will prevent you from using the service as you won't be able to log in or maintain a session.

Cletter is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

If you are a parent or guardian and discover that your child has provided us with personal information without your consent, please contact us. We will take steps to delete such information from our systems.

As a service operating globally with international technology providers, your data may be transferred to and processed in countries outside the EU/EEA, including the United States. Our service providers include:

• OpenAI (USA): AI processing for cover letter generation
• Clerk (USA): Authentication services
• Convex (USA): Database and storage infrastructure
• Stripe (USA/Ireland): Payment processing

When we transfer data internationally, we ensure appropriate safeguards are in place in accordance with GDPR requirements, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions where applicable
• Data Processing Agreements with all processors

Despite these safeguards, data protection standards in countries outside the EU/EEA may differ from those in Sweden and the EU. By using our service, you acknowledge and consent to these international transfers.

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Active subscription: Account information and content data are kept for as long as your subscription is active
• Upon subscription cancellation: When your subscription ends and is not renewed, all user-generated content (resumes, example letters, job descriptions, generated cover letters) is deleted
• Account data after cancellation: Basic account information may be retained for legal and accounting purposes as required by Swedish law (typically up to 7 years for financial records)
• Payment records: Transaction history and subscription records are kept for accounting, tax, and legal compliance purposes
• Technical logs: Security and access logs are typically kept for 90 days

Important: We do not provide data export functionality. Once your subscription ends, you will lose access to all generated content. We strongly recommend manually saving or copying any important cover letters before canceling your subscription. You can easily copy the text of your generated letters and save them locally on your device while your subscription is active.

When personal data is no longer needed for legal purposes, it is securely deleted or anonymized.

We may update this privacy policy from time to time to reflect changes in our practices or applicable law. When we make significant changes, we will notify you via:

• Email to the address associated with your account
• A prominent notice within the service
• Updating the "Effective from" date at the top of this page

We encourage you to review this privacy policy periodically to stay informed about how we protect your information.

For questions about this privacy policy, how we handle your data, or to exercise your GDPR rights, you can contact us:

Email: cletterbusiness@gmail.com
Contact form: www.cletter.com/contact
Postal address:
LEJTECH SOLUTIONS
Gaffelseglet 13
136 54 Vega, Stockholm
Sweden

We aim to respond to general inquiries within 48 hours during business days. For GDPR-related requests (access, deletion, etc.), we will respond within one month as required by law, or inform you if an extension is needed.