Regional Privacy Rights

Your rights

You have the rights set out in section 8 of the Privacy Policy: access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. All of them are implemented in the product rather than handled by request.

You also have the right not to be subject to a decision based solely on automated processing with legal or similarly significant effects (Art. 22). No employer on this platform can auto-reject an application — see the AI Processing Notice.

You may lodge a complaint with your national supervisory authority at any time, without contacting us first.

International transfers

Our servers and database are in Germany. Where a processor is outside the EEA or UK — Stripe, our email provider, Sentry, and the optional analytics providers — transfers rely on the European Commission's Standard Contractual Clauses (and the UK Addendum or IDTA for UK transfers), together with a transfer risk assessment.

Consumer cancellation rights

If you are a consumer in the EU or UK you have a 14-day right to withdraw from a paid subscription. Because a digital service starts immediately, you are asked to acknowledge at checkout that performance begins at once — you may still withdraw within 14 days, and we will refund the unused portion on a pro-rata basis. This overrides the general no-pro-rata-refund position in our Terms.

Mandatory consumer protection law in your country of residence applies regardless of the governing-law clause in our Terms, and you may bring a claim in your local courts.

We do not sell or share your personal information

We do not sell personal information, and we do not share it for cross-context behavioural advertising, as those terms are defined under the CPRA. We have no advertising partners and we use no advertising cookies, so there is nothing for you to opt out of. A "Do Not Sell or Share My Personal Information" link would be misleading here, so we do not display one.

We honour Global Privacy Control (GPC) signals for the optional analytics cookies.

Your state rights

Depending on your state you have the right to know what we collect, to access a copy, to delete, to correct, to portability, to opt out of targeted advertising, sale or profiling with legal effects, and to be free from discrimination for exercising any of them.

• Access and portability: Settings → Privacy → Download my data.
• Deletion: Settings → Privacy → Delete account.
• Correction: edit your profile and CV directly.
• Anything else, or an appeal of a decision we make on a request: privacy@neuralcareernetwork.com. We respond within 45 days and may extend once by a further 45 days, telling you why.

You may use an authorised agent. We will ask for proof of authorisation and verify your identity before acting.

Categories collected and disclosed

Under the CPRA we collect: identifiers, personal records, commercial information, internet activity, geolocation inferred from IP, professional and employment information, education information, and inferences drawn from these. Sources, purposes and retention are in sections 2, 3 and 7 of the Privacy Policy. We disclose for business purposes only, to the processors listed in section 5, and to employers you choose to apply to.

We do not use or disclose sensitive personal information for purposes beyond those permitted under CPRA § 1798.121.

Automated employment decision tools

Some jurisdictions — New York City Local Law 144 is the most developed — regulate automated tools used to substantially assist employment decisions, including bias audit and candidate notice requirements.

Your rights

You may access and correct your personal information, withdraw consent, and complain to the Office of the Privacy Commissioner of Canada or your provincial commissioner. Access and deletion are self-service in Settings.

Under Quebec Law 25 you additionally have the right to data portability in a structured, commonly used technological format — satisfied by the JSON export — and the right to be informed when a decision is based exclusively on automated processing. No such decision is made about you here.

We will inform you of a confidentiality incident presenting a risk of serious injury, and report it to the Commission d'accès à l'information as required.

Storage outside Canada

Your information is stored in Germany and may be processed in the EU and United States by the processors listed in the Privacy Policy. It is therefore subject to lawful access requests in those jurisdictions. We disclose this because Quebec Law 25 and provincial law require it before transfer.

Your rights under the LGPD

You may confirm that processing exists, access your data, correct it, anonymise, block or delete unnecessary or excessive data, port it to another provider, obtain information about who we share it with, be told the consequences of refusing consent, and withdraw consent. Requests: privacy@neuralcareernetwork.com.

Our legal bases under LGPD Art. 7 mirror those in section 3 of the Privacy Policy: performance of a contract, legitimate interests, consent for optional features, and compliance with a legal obligation.

You have the right to request review of decisions made solely by automated processing that affect your interests (Art. 20). As set out in the AI Processing Notice, no hiring decision here is made that way.

You may complain to the Autoridade Nacional de Proteção de Dados (ANPD).

Your rights as a Data Principal

You have the right to access a summary of your personal data and our processing of it, to correction and completion, to erasure, to nominate another person to exercise your rights in the event of death or incapacity, and to a grievance redressal mechanism.

Grievances: privacy@neuralcareernetwork.com. We will respond within the period prescribed by the Act. If unresolved, you may approach the Data Protection Board of India.

The Act also places duties on you as a Data Principal, including not impersonating another person and not furnishing false particulars — which aligns with the account obligations in our Terms.

Age

The DPDP Act requires verifiable parental consent for users under 18 and prohibits tracking or targeted advertising directed at children. We do not offer accounts to under-18s in India, and we serve no targeted advertising to anyone.

Your rights

You may request disclosure of your retained personal data, correction, addition or deletion, and cessation of use or third-party provision. Requests: privacy@neuralcareernetwork.com.

Third-party provision: we provide your data to an employer only when you apply to that employer. We do not otherwise provide personal data to third parties for their own purposes, so no opt-out mechanism for third-party provision is required.

Cross-border transfer: your data is stored in Germany and processed by the providers listed in the Privacy Policy, in the EU and United States. We provide this information so your consent to cross-border transfer is informed, as the APPI requires.

We will report a leak of personal data to the Personal Information Protection Commission and notify affected individuals where the Act requires it.

Your rights

You may request access, correction, deletion and suspension of processing, and withdraw consent at any time. You have the right to be informed of, and to refuse, decisions made entirely by automated systems that significantly affect your rights.

PIPA requires consent to be obtained separately for each distinct purpose, and requires that refusing optional consent must not prevent use of the service. Our sign-up separates required agreement to the Terms and Privacy Policy from optional marketing consent, and the core product is fully usable without the optional item.

You may report a matter to the Personal Information Protection Commission or the Korea Internet & Security Agency.

Local representative

Service availability

If you are in mainland China and have created an account, contact privacy@neuralcareernetwork.com and we will delete it and your data. This annex will be replaced with a full PIPL notice if and when the required mechanism is in place.

Hong Kong SAR, Macau SAR and Taiwan

These are separate regimes. Hong Kong users are covered by the Personal Data (Privacy) Ordinance, and may request access and correction, and complain to the Privacy Commissioner for Personal Data. Taiwan users are covered by the Personal Data Protection Act. Rights requests go through the same routes as elsewhere.

Your rights

Under the Australian Privacy Principles you may access and correct your personal information, and complain to us and then to the Office of the Australian Information Commissioner. New Zealand users may complain to the Office of the Privacy Commissioner.

Overseas disclosure: your information is stored in Germany and processed by the providers listed in the Privacy Policy. We take reasonable steps to ensure they handle it consistently with the APPs, through contractual terms.

We will notify you and the OAIC of an eligible data breach likely to result in serious harm, as the Notifiable Data Breaches scheme requires.

Consumer guarantees

Nothing in our Terms excludes, restricts or modifies the consumer guarantees under the Australian Consumer Law or the NZ Consumer Guarantees Act. Where those guarantees apply, they prevail over the disclaimers and liability limits in our Terms.

Your rights

Under POPIA you may request confirmation of whether we hold your personal information, a record of it, correction or deletion, and you may object to processing. You may complain to the Information Regulator of South Africa.

You have the right not to be subject to a decision based solely on automated processing intended to profile you (POPIA s. 71). As set out in the AI Processing Notice, no hiring decision here is fully automated.

Nigeria, Kenya and Egypt provide comparable access, correction, deletion and objection rights, exercisable through the same routes. Requests: privacy@neuralcareernetwork.com.

Your rights

Across these regimes you generally have rights of access, correction, deletion, objection, portability and withdrawal of consent, and a right to complain to the relevant authority — SDAIA in Saudi Arabia, the UAE Data Office, the DIFC or ADGM Commissioner in those financial free zones, or the Israeli Privacy Protection Authority. All are exercisable through the routes in section 8 of the Privacy Policy.

Saudi Arabia's PDPL restricts transfers outside the Kingdom and, in some cases, requires prior approval. Where local law imposes a data localisation or transfer-approval requirement we cannot currently meet, we will say so rather than transfer regardless.