Privacy Policy
LOUISE MORRIS LTD (data controller) is committed to processing your data lawfully, transparently, and with the minimum necessary scope. This policy explains what we collect, why, how long we keep it, and your rights under the UK GDPR, EU GDPR, and CCPA.
Data we collect
- Account data: name, email, hashed password, country, role you're chasing.
- Content you upload: resumes (PDF/DOCX), job descriptions, LinkedIn screenshots, free-text answers.
- Generated artifacts: scores, suggested edits, mock reels, cover letters.
- Payment metadata: billing address, plan, last 4 digits of card. We do not store full card numbers — Stripe does.
- Operational telemetry: IP address (truncated after 30 days), browser, error logs, feature usage counts. No third-party advertising trackers.
How we use it
To deliver the service (legal basis: contract). To meet legal obligations like tax and fraud prevention (legal basis: legal obligation). To improve the product through aggregated analytics — never personal-data-driven advertising (legal basis: legitimate interest).
We do not sell your data. We do not license your resume or interview answers to third parties for marketing.
AI model training
Your uploaded resumes, job descriptions, and interview answers are not used to train foundation models, ours or our sub-processors'. AI inference calls run with provider opt-out flags set.
Where data lives
EU-region object storage (encrypted at rest with AES-256) for uploaded files. Database is in the EU. Some sub-processors (e.g. Stripe) process payment data in the US under standard contractual clauses.
Retention
- Resumes & job descriptions: kept until you delete them or close the account, then 30 days in backups.
- Reels: kept 90 days unless you download them.
- Account record: deleted within 30 days of account closure.
- Invoices: retained 7 years for UK tax law.
Your rights
Access, rectification, erasure, restriction, portability, objection — write to support@louisemorrisco.com and we will respond within 30 days. EEA residents may complain to their local data-protection authority; UK residents to the ICO.
CCPA: California residents may request disclosure and deletion. We do not sell personal information as defined by the CCPA.
Sub-processors
- Stripe Payments Europe Ltd — payment processing
- Hosting provider in EU region — application & data storage
- AI inference provider(s) — text and video generation, no-train flag
- Transactional email provider — receipts and security alerts only
Children
LouiseMorris is not intended for users under 16. If we learn we have collected data from a child under 16 without parental consent, we will delete it.
Contact the data controller
LOUISE MORRIS LTD, 9 Mander Farm Road, Silsoe, MK45 4FW, England. support@louisemorrisco.com.