Executive Privacy Policy

Yukta for you LLP ("we", "us") operates EXEAURA (the "Service"). For the purposes of GDPR and UK GDPR we are the data controller for personal data submitted by users of the service. For customer content processed on behalf of enterprise customers under a signed agreement, we act as a data processor.

Account data: name, email, password hash, workspace and role.

Professional data you provide: résumé content, LinkedIn profile imports, career goals, target roles, references, and any documents uploaded to the Knowledge Vault.

AI interaction data: prompts you submit, generated drafts, feedback signals, and safety metadata.

Billing data: plan, invoice history, and payment metadata (full payment-card details are processed by the payment provider used at checkout and are not stored directly by EXEAURAOS).

Usage telemetry: pages viewed, features used, error diagnostics, device and browser type. Optional and gated by your consent (see §7).

Communications: emails you send to support and responses to in-product surveys.

We process personal data for the following purposes, on the following legal bases:

• Delivering the service — contract performance (GDPR Art. 6(1)(b)).
• Billing and fraud prevention — contract and legal obligation (Art. 6(1)(b),(c)).
• Product security and abuse detection — legitimate interests (Art. 6(1)(f)).
• Product analytics and improvement — consent (Art. 6(1)(a)); off unless you opt in.
• AI-assisted generation — contract performance; relevant inputs may be transmitted to external AI services to provide the functionality you request. See the AI Transparency notice and Subprocessors page for further information.
• Marketing communications — consent, withdrawable at any time.

When you request an AI-assisted feature, EXEAURAOS may send the relevant prompt, professional context, submitted files or other necessary content to external AI services. We store some prompts, generated results and operational records to provide features, support user review and maintain service reliability. Third-party processing, retention and any training restrictions depend on the relevant service terms, agreements and configured controls; zero retention must not be assumed for every request. EXEAURAOS does not train its own general-purpose foundation model on your professional content. See the Subprocessors page, AI Transparency notice and Data Retention Policy for further information.

We share data only with the vetted subprocessors listed on our Subprocessors page and with authorities where legally required. Where data is transferred outside the UK/EEA we rely on adequacy decisions or Standard Contractual Clauses with supplementary safeguards.

We retain personal data only as long as needed for the purposes above. Details, including retention windows per category, are in our Data Retention & Deletion Policy.

We use strictly necessary cookies to keep you signed in. Analytics, functional, marketing and AI-improvement categories are all off by default and only load after you consent through the banner or Account → Privacy. See our Cookie Policy.

Depending on where you live you may have the right to access, rectify, erase, restrict, port or object to processing of your personal data, and to withdraw consent at any time. Under GDPR and UK GDPR you may also complain to a supervisory authority.

Under CCPA/CPRA (California) you may request to know, delete, correct, and limit use of sensitive personal information, and opt out of "sale" or "sharing" — we do not sell or share personal data as those terms are defined.

Under the Australian Privacy Act and India's DPDP Act you have equivalent access, correction and complaint rights.

You can exercise most rights directly in Account → Data (export, deletion) and Account → Privacy (consent, connected providers). For anything else, email grievance@yukta4u.com.

Exeaura OS is intended for professional use and not for children under 16. We do not knowingly collect data from children; if you believe we have, contact grievance@yukta4u.com and we will delete it.

We use HTTPS to protect data in transit, provider-managed encryption at rest for supported storage services, and database row-level security policies to help protect customer information. Operational logs support troubleshooting and security investigations. See our Trust & Security Centre for control details.

Material changes are announced in-product and by email at least 15 days before they take effect, except where a shorter notice is legally required. The version and effective date at the top of this page always reflects the current policy.

Privacy questions: grievance@yukta4u.com. Privacy and grievance contact: grievance@yukta4u.com.