Data controls
Your data, your controls
Alynd is built around data you own. This page is a plain-language summary of what data we hold, what we use it for, and — most importantly — what you can do with it directly from the product without needing to contact us.
Last updated: May 7, 2026
What data we hold about you
We hold the following categories of data while your Account is active:
- Account details — your name, email address, encrypted password, profile picture (if uploaded), and subscription status.
- Career records — work history, education, skills, certifications, publications, awards, memberships, professional training, conference presentations, and any files you attach to those records.
- CV documents — templates you have created, formatting choices, the records you have selected for each CV, and export settings.
- AI interaction history — prompts sent to Lyra, pasted job descriptions, Lyra conversation history, and Auron coaching session transcripts.
- Technical data — session information, IP address, browser type, and error logs needed to run and secure the Service.
What we use it for
Your data is used only to provide the Service to you. Specifically:
- Maintaining your account workspace and keeping your career records saved and accessible.
- Running Lyra to help you populate, edit, and organise your career data through natural language instructions.
- Building CV documents tailored to specific job applications and exporting them as PDFs.
- Running Auron to help you prepare for interviews, including voice transcription if you use the microphone feature.
- Parsing CV files you upload so their content can be reviewed and selectively imported into your records.
- Processing your Subscription payment through Stripe and sending billing-related emails.
- Diagnosing errors and maintaining the reliability and security of the Service.
We do not use your data for advertising. We do not sell your data to third parties.
Who can see your data
Internally. A small number of authorised Alynd team members can access production systems for operational and security purposes. Access is role-based and logged.
Third-party processors. The following categories of company receive data as necessary to provide specific parts of the Service. Each operates under a data processing agreement with us.
- OpenAI — receives text and selected career context when you use Lyra, Auron, or CV import. Does not train on API-submitted data by default.
- Deepgram — receives audio if you use Auron voice input to transcribe your speech.
- Amazon S3 (London) — stores your uploaded files in a private, encrypted bucket.
- Railway — hosts the application and database.
- Stripe — processes Subscription payments.
- Email provider — delivers transactional account emails on our behalf.
Nobody else has access to your data. No advertisers, data brokers, or unrelated third parties.
How we protect it
The full detail is on the Security page. In summary:
- All data in transit is encrypted with TLS. Passwords are one-way hashed.
- Uploaded files are stored in a private S3 bucket — no public access. Downloads use links that expire after one hour.
- The database has no public endpoint.
- AI-generated changes are proposals — nothing is written to your account without your explicit confirmation.
How to access and edit your data
All career records are editable in real time from the Nexus section of your account. Your profile, email address, and password are in Settings. Changes take effect immediately and are saved to your account. You can delete individual records at any time without needing to delete your entire account.
How to export your data
Go to Settings → Export Data to download a full JSON export. The export includes your account profile, subscription status, all career records, CV templates, job analyses, assistant settings, and Lyra conversation history. File metadata is included; file binaries are not embedded in the export.
CV documents can also be downloaded as PDFs individually from the CV editor. A PDF export contains only the CV document content — it is not a full account export.
How to delete your account
Go to Settings → Delete Account. You will be asked to enter your current password and type a confirmation phrase. Once confirmed, deletion is immediate and cannot be undone from the product.
Deletion removes your account and career data from the primary database and revokes all active sessions. If you have an active paid Subscription, you should manage or cancel it before deleting your account. Payment records are retained for 7 years as required by financial regulations. All other data is permanently deleted within 30 days.
Your rights under data protection law
Under UK GDPR and EU GDPR you have the right to access, correct, delete, restrict, port, and object to the processing of your personal data. Most of these are available directly from the product. For requests you cannot complete yourself, email privacy@alynd.net. We respond within one month.
If you believe we have not handled your data lawfully, you can complain to the UK Information Commissioner's Office at ico.org.uk, or to your local EU supervisory authority. The full rights list and how to exercise each one is in our Privacy Policy.
Contact
Data and privacy queries: privacy@alynd.net
General enquiries: info@alynd.net