Privacy Notice

1. Data controller

Under Turkish Law No. 6698 on the Protection of Personal Data (“KVKK”), your personal data is processed by SoftWorks Yazılım ve Bilgi Teknolojileri Ltd. Şti. (the “Company”) as data controller, as described below. Kariyer Koçum is an AI-assisted interview practice service for university students and recent graduates.

• Name: SoftWorks Yazılım ve Bilgi Teknolojileri Ltd. Şti.
• Address: Workon Ofis, Küçükbakkalköy Mah. Selvili Sok. No: 4/20, Ataşehir / İstanbul
• Tax office / Tax no. / MERSIS: Kozyatağı Vergi Dairesi / 0631200530 / 0631200530400001
• Contact and data-protection requests: info@softworkstr.com

2. Categories of personal data we process

When you use the service, we process the following:

• Identity and contact: full name, email address.
• Profile and education: whether you are a student, graduate or working, university, major, year or graduation year, target role.
• CV content: the CV file you upload (PDF or DOCX), text you paste, and the education, experience, project, skill and tool details extracted from them.
• Interview content: company and position names, job posting text and requirements, interview settings (mode, duration, difficulty, language), the question-and-answer transcript, hidden evaluation notes, scores and the feedback report.
• Voice: in a voice interview your recording is processed in real time to be transcribed and is NOT stored. What is stored is only the transcribed text and speech measurements (word count, speaking pace, long pauses and filler-word counts).
• Preferences and consent records: interface and interview language, Kochi appearance preferences (character, outfit, theme and sound choices), and the time of your consents (privacy notice, AI processing, voice processing and commercial electronic messages).
• Usage and security records: session information, AI call logs (type, model used, token/second/character counts, success status, time), daily-usage-limit counters; in voice interviews, diagnostic events (step name, duration, error code, browser and operating-system type; no text and no audio); during the closed test, demo sign-in records (email, IP address, browser information).

3. Purposes of processing

• Creating your account, authenticating you (one-time code sent by email) and managing your session,
• Reading your CV and preparing interview questions that fit you,
• Running the written or spoken interview simulation and producing your feedback report, scores and progress line,
• Transcribing your speech in voice interviews and computing speech measurements,
• Presenting your report and data to you and enabling your rights such as download and deletion,
• Keeping the service secure and preventing abuse and excessive use (daily limits),
• Meeting legal obligations and establishing, exercising or defending legal claims,
• If you consent, sending you electronic messages about news and updates.

4. Legal bases

Your data is processed on the following grounds under Article 5(2) of KVKK:

• It is directly related to the formation or performance of a contract (providing the account, interview and report service) — Art. 5/2-c,
• Compliance with a legal obligation — Art. 5/2-ç,
• Establishment, exercise or protection of a right — Art. 5/2-e,
• Our legitimate interests, provided they do not harm your fundamental rights and freedoms (service security, abuse prevention) — Art. 5/2-f.
• Processing your CV and interview content with AI, transferring it to service providers abroad for that purpose, voice processing and commercial electronic messages are based on your explicit consent; details are in the Consent Notice.

5. Recipients and transfers abroad

The service is delivered through the providers below. Because all of them are located abroad, your data is transferred abroad on the basis of your explicit consent and in line with the conditions of Article 9 of KVKK:

• AI processing (CV parsing, interview questions, hidden notes, report): Anthropic — your CV, job posting and interview answers are sent for this purpose.
• Voice processing: Fish Audio for speech recognition; ElevenLabs for generating the coach's voice (backup: Fish Audio; OpenAI only if enabled) — your spoken answers are sent to be transcribed and the coach's sentences (including your name, if used) to be spoken aloud.
• Database, authentication and file storage: Supabase — data is kept on infrastructure in the European Union (Frankfurt) region.
• Hosting and content delivery: Vercel.
• Delivering the sign-in code by email: an email delivery service (through the authentication infrastructure).

Your data is not sold or shared for advertising, profiling or training AI models. Your evaluation reports are shown only to you and are not shared with third parties, employers included.

How service providers process and retain the data sent to them, and whether they use it for model training, is governed by each provider's own terms and privacy policy.

5/A. Processing of subscription data

If you purchase a paid plan, your user ID and purchase status (plan, period, renewal and cancellation status) are shared with our subscription infrastructure provider RevenueCat and the relevant store (Apple App Store / Google Play) so that your subscription can be managed. We do not receive or store your card or payment details; payment is processed by the store.

This processing relies on the legal grounds of establishing and performing a contract and complying with legal obligations; subscription records are kept until your account is deleted, subject to any retention obligations required by law.

6. How we collect data

Your data is collected through the forms you fill in the app, the CV you upload, the written or spoken answers you give during an interview, and automatically through your device and browser.

7. Retention periods

• Account details, profile, CV (file and parsed content), interviews, transcripts, reports, AI call logs and consent records: kept until you delete your account.
• Voice recordings: not stored; processed in memory only while being transcribed. The synthesized audio of the coach's fixed template sentences (which contain no personal data and are the same for everyone) may be cached to play faster.
• Voice-interview diagnostic events (step name, duration, error code; no text and no audio): deleted automatically after 30 days.
• You can delete your account at any time under Settings > Account; at that moment all your data in the app (CV files included) is permanently deleted. Copies in the hosting provider's backups disappear after a limited period under the provider's backup retention policy.
• Copies held by service providers and hosting logs are kept for a limited period under each provider's own retention policy.
• Demo sign-in records from the closed test (email, IP address, browser information): deleted automatically after 30 days, and immediately if you delete your account.

8. Data security

Your data is encrypted in transit; row-level access control is applied in the database so you can reach only your own data. Necessary technical and organizational measures are in place against unauthorized access.

9. Your rights under Article 11 of KVKK

As a data subject you have the right to:

• Learn whether your personal data is processed,
• Request information if it has been processed,
• Learn the purpose of processing and whether it is used accordingly,
• Know the third parties to whom it is transferred in Türkiye or abroad,
• Request correction if it is incomplete or inaccurate,
• Request deletion or destruction under the conditions of Article 7 of KVKK and request that these actions be notified to the third parties to whom the data was transferred,
• Object to a result against you arising from analysis of your data exclusively by automated systems,
• Claim compensation if you suffer damage due to unlawful processing.

You can exercise some rights directly in the app: under Settings > Account you can download your data as a single file, delete your account and data, and withdraw your consents; you can correct your CV details on the CV screen.

10. How to apply

You can send requests about your rights, together with information that verifies your identity, by email to info@softworkstr.com or in writing to Workon Ofis, Küçükbakkalköy Mah. Selvili Sok. No: 4/20, Ataşehir / İstanbul. Your application is concluded free of charge within 30 days at the latest, depending on the nature of the request; if the process requires a separate cost, a fee at the tariff set by the Personal Data Protection Board may be charged.

If you find the response inadequate or no response is given in time, you may file a complaint with the Personal Data Protection Board under Article 14 of KVKK.

11. Minors and changes

The service is intended for people aged 18 or over. This notice is updated when necessary; the current version is published on this page and the “Last updated” date at the top changes.