Privacy Policy

1. Controller

Crosswise Consulting

84072 Freising

Deutschland

Phone: +49 176 45765374

Email: de.crosswise.consulting@gmail.com

If you have questions about data protection, you can reach us at the above email.

2. What data we process and why

ReviewPilot AI is an AI-powered document review platform. We process personal data only to the extent necessary to provide our service.

• Account data: Email address, name (via Google OAuth login). Purpose: authentication and account management. Legal basis: Art. 6 (1) (b) GDPR (contract performance).
• Uploaded documents: CVs, cover letters, certificates, and other files you upload for AI review. Purpose: generating AI feedback. Legal basis: Art. 6 (1) (b) GDPR.
• AI review results: Scores, feedback text, and improvement suggestions generated by our AI. Purpose: delivering the service you requested. Legal basis: Art. 6 (1) (b) GDPR.
• Usage analytics: Page views, session data (anonymised where possible). Purpose: improving the platform. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest).

3. How we use AI and third-party providers

We use Google's Gemini AI models (via Lovable AI Gateway) to analyse your documents. Your uploaded documents are sent to Google's AI services for processing.

Our hosting and database infrastructure is provided by Lovable Cloud (EU-based). All data is stored within the European Economic Area (EEA).

We do not sell your data. We do not use your documents to train AI models without explicit consent.

4. Cookies and tracking

We use essential cookies for authentication and session management. We may use analytics cookies to understand platform usage. You can manage your cookie preferences at any time. For non-essential tracking, we rely on your consent (Art. 6 (1) (a) GDPR).

5. Data retention

We retain your personal data only as long as necessary for the purposes stated above:

• Account data: retained until you delete your account.
• Uploaded documents and AI reviews: retained until you delete the respective review instance, or until account deletion.
• Analytics data: retained for up to 26 months, then anonymised or deleted.

6. Your rights under GDPR

You have the following rights:

• Right of access (Art. 15 GDPR) — request a copy of your personal data.
• Right to rectification (Art. 16 GDPR) — correct inaccurate data.
• Right to erasure ("right to be forgotten") (Art. 17 GDPR) — request deletion of your data.
• Right to restrict processing (Art. 18 GDPR).
• Right to data portability (Art. 20 GDPR) — receive your data in a structured format.
• Right to object (Art. 21 GDPR) — object to processing based on legitimate interests.
• Right to withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.

To exercise your rights, contact us at de.crosswise.consulting@gmail.com. You also have the right to lodge a complaint with a supervisory authority (e.g., your national Data Protection Authority).

7. Data security

We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit (TLS/HTTPS), access controls, and regular security reviews. Our infrastructure is hosted in the EU.

8. Children's privacy

ReviewPilot AI is not intended for use by children under 16. We do not knowingly collect personal data from children under 16. If you believe we have collected such data, please contact us immediately.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a notice on the platform. The latest version is always available at this URL.