Sprache juristischer Dokumente
Um größtmögliche rechtliche Sorgfalt zu gewährleisten, sind unsere Allgemeinen Geschäftsbedingungen und Vertraulichkeitsrichtlinien ausschließlich in englischer Sprache verfasst. Die allgemeine Navigation und Nutzung der gesamten Plattform bleibt in der Sprache Ihrer Wahl verfügbar.
Privacy Policy
Transparent, minimal, and fully GDPR compliant. We firmly believe that your career data is your property alone.
Last updated:
1. Zero Tracking & High Privacy
Lyrra is designed with a strict privacy-by-default architecture in accordance with the European GDPR / AVG.
We do not use any third-party marketing trackers, tracking pixels, or invasive analytics cookies. We do not track you across the internet.
To maintain platform security and protect against bots, we utilize Cloudflare Turnstile. This is a functional security tool that does not utilize tracking cookies or process data for marketing purposes.
2. Artificial Intelligence & Your Data
Our application utilises advanced AI models to process resumes and facilitate simulations.
- AI training privacy
Lyrra does not use your resumes, documents, notes, transcripts, prompts, or generated content to train AI models.
- Secure Transit
Your data is transmitted securely to the AI API only when you purposefully initiate an analysis or simulation.
3. Voice features
Voice interview features require your permission to use the microphone. Speech is converted into text by the speech-recognition service provided by your browser or device, and Lyrra receives the resulting transcript when you submit it.
Lyrra does not persist raw microphone recordings in the interview flow. When spoken responses are enabled, AWS Polly converts the generated response text into audio and returns it to your device. Generated audio is not stored as career content.
4. Minimal Data Collection
We subscribe to the principle of data minimisation, collecting only what is strictly necessary:
Account & Auth
We collect your email address for secure authentication. Payment information is securely handled by Stripe. We never touch or store your raw credit card data.
Career Portfolio
Resumes, cover letters, and notes that you explicitly create. You maintain full ownership over this content at all times.
5. Lyrra Capture Chrome Extension
Lyrra Capture receives temporary access to the active browser tab only after you explicitly click the extension. It reads job-listing fields such as the company, position, location, salary, description, source, and URL so that you can review them before saving a tracker entry.
We do not collect unrelated browsing history, monitor tabs in the background, submit applications, sell extension data, or use captured information for advertising. Page content is not sent to Lyrra until you choose to save it. Authentication tokens are revocable and are stored locally by the extension.
The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.
6. Your Privacy Rights
We grant all Lyrra users the highest standard of privacy rights outlined by the GDPR:
Right to Portability
Download your career, practice, canvas, interview, negotiation, and tracker data in a machine-readable ZIP/JSON format via Data Management.
Right to be Forgotten
Permanently delete your account directly through your dashboard. This removes your account data and user-owned avatar and signature files, and cancels or deletes billing data where applicable.
You also maintain the Right to Access, Right to Rectification, and the Right to Withdraw Consent at any time.
7. Data Retention & Lifecycle
We retain your career data only as long as you maintain an active account with us.
Inactivity Rule: To protect your privacy and ensure data hygiene, accounts that remain completely inactive (no logins) for a period of 18 months will be flagged for automatic deletion. We will send a reminder email to your registered address 30 days before any scheduled deletion.
8. Contact Us
Data Protection Inquiries
For any inquiries regarding your data, privacy, or GDPR compliance.