This policy explains how MindKraft collects, stores, and processes candidate and client portal data.
Who we are and what this policy covers
This Privacy Policy explains how MindKraft collects, uses, stores, protects, and shares information when you use the MindKraft website, client portal, community features, browser extension, support channels, job-search tools, CV/resume features, application tracking, learning suggestions, interview preparation, and AI-assisted document tools.
MindKraft is designed for job seekers and career support workflows. It is not intended for children, and you should not use the service if you are under 18 or otherwise unable to enter into an account relationship with us.
Information you provide
We collect information you give us directly, including your name, email address, login details, contact preferences, support messages, profile information, target roles, preferred locations, work preferences, salary direction, skills, education, experience, certifications, portfolio links, and other career details you choose to add.
If you upload a CV, resume, cover letter, or related file, we process the file and extracted text so MindKraft can build your profile, assess application readiness, support tailored documents, and help you manage your job-search workspace.
Job-search and application data
MindKraft may store job records, job descriptions, employer names, source links, application dates, statuses, notes, interview dates, interview rounds, preparation notes, learning-plan outputs, and documents generated or edited through the platform.
You are responsible for making sure career information, application records, and uploaded documents are accurate, lawful, and yours to use. Avoid adding unnecessary sensitive information unless it is relevant and you are comfortable processing it through the service.
Community and public content
If you submit tips, comments, success stories, interview experiences, or other community content, we process that content for moderation, publication, safety review, and community interaction features such as likes and comments.
Where anonymous posting is available, public display may hide your name, but MindKraft may still retain account-linked records internally for moderation, abuse prevention, legal compliance, and support.
Information collected automatically
When you use MindKraft, we may collect technical information such as IP-derived prefixes, request metadata, browser or device type, approximate region, pages or features used, timestamps, error details, performance information, security events, and authentication activity.
We use this information to operate the service, protect accounts, investigate misuse, troubleshoot errors, understand product reliability, and keep audit records for sensitive actions.
Cookies, local storage, and similar technologies
MindKraft uses cookies and similar technologies that are necessary for authentication, session management, security, CSRF protection, user preferences, and core site functionality.
We may also use analytics or performance technologies to understand how the service is used. Where legally required, non-essential cookies or similar technologies should be presented with appropriate notice and consent controls. Browser settings may also let you block or delete cookies, but some service features may stop working correctly.
Anonymised and aggregated analytics
MindKraft may collect anonymised, de-identified, or aggregated product analytics, such as page usage, feature activity, broad device class, coarse performance data, and error trends. We use this to improve the service, detect misuse, measure reliability, and decide which workflows need attention.
Creating anonymised or aggregated information may involve processing personal data first. Where information cannot reasonably be treated as anonymous, we treat it as personal data and apply the safeguards described in this policy.
How we use your information
We use your information to create and manage accounts, provide the portal, extract useful career facts from uploaded documents, match roles, generate or prepare application materials, track applications, suggest learning actions, support interview preparation, provide support, send service messages, and maintain product security.
We may also use information to personalize your experience, test and improve features, enforce our Terms, moderate community content, prevent fraud or abuse, comply with legal obligations, and defend MindKraft, users, or others from harm.
Legal bases for processing
Where UK GDPR, EU GDPR, or similar laws apply, we rely on one or more legal bases depending on the context: contract, where processing is needed to provide the service you requested; legitimate interests, where we operate, secure, improve, and protect MindKraft in a balanced way; consent, where required for optional processing; and legal obligation, where we must retain or disclose information by law.
If special category data appears in content you upload or submit, we do not intentionally request it unless a feature clearly asks for it. If you choose to include it, we process it only as needed to provide the service, protect the platform, or comply with law, and you should avoid adding it unless necessary.
AI-supported features
MindKraft may use AI providers or language models to help extract CV/resume text, draft tailored CVs or resumes, draft cover letters, produce support drafts, summarize job descriptions, identify skill gaps, or prepare interview guidance.
Where possible, MindKraft anonymises or minimizes personal details before sending prompts to a model. AI outputs can be incomplete, outdated, biased, inaccurate, or unsuitable for a particular employer or role. You should review and edit any generated material before relying on it or sending it to anyone.
Automated recommendations and human review
MindKraft may use rules, matching logic, AI, or analytics to recommend jobs, skills, documents, next actions, or preparation material. These tools support your job search but do not make hiring decisions and do not guarantee employer outcomes.
Some workflows may include human review or admin support, especially for document generation, support requests, moderation, and sensitive operational actions.
When we share information
We share information with service providers that help us operate MindKraft, such as authentication, database, private storage, hosting, transactional email, observability, analytics, security, and AI providers. These providers process information on our behalf or under their own legal obligations.
We may also share information when you ask us to, when you use a feature that sends or exposes information to another service, when required by law, when necessary to protect rights or safety, or as part of a business transfer such as a merger, acquisition, restructuring, or asset sale.
Third-party sites and job links
MindKraft may link to job boards, employer websites, learning resources, email providers, OAuth providers, or other third-party services. Their privacy practices are separate from ours, and you should review their policies before submitting applications or personal information.
If you leave MindKraft to apply for a job, the employer, job board, or applicant tracking system controls what happens to the information you submit there.
International processing
MindKraft and its providers may process or store information in countries other than your own. Where required, we use appropriate safeguards for international transfers, such as contractual protections, provider data-processing terms, adequacy decisions, or similar mechanisms.
The level of protection in another country may differ from the level available where you live, but we aim to use reputable providers and reasonable safeguards for career and account data.
Security
MindKraft uses technical and organizational safeguards intended to protect information, including private storage, signed file access, authentication controls, rate limits, audit logs, encrypted sensitive records where implemented, and operational monitoring.
No online service can guarantee perfect security. You are responsible for keeping your login credentials secure, using trusted devices, signing out where appropriate, and telling us promptly if you suspect unauthorized access.
Retention
We keep personal information for as long as reasonably necessary to provide MindKraft, maintain your account, support active job-search workflows, comply with legal obligations, resolve disputes, prevent abuse, preserve security logs, and enforce our Terms.
When information is no longer needed, we may delete it, anonymise it, aggregate it, or retain it in backups for a limited period before deletion. Some records may remain where required for security, legal, accounting, or dispute reasons.
Your choices and rights
Depending on where you live, you may have rights to access, correct, delete, export, restrict, or object to processing of your personal information, and to withdraw consent where processing is based on consent.
You can update some account and profile information in the portal. For privacy requests, account deletion, analytics questions, or concerns about AI-supported processing, contact MindKraft through the site contact option. We may need to verify your identity before acting on a request.
Changes to this policy
We may update this Privacy Policy as MindKraft, our providers, our safety practices, analytics practices, or legal requirements change. The Last updated date shows when this policy was most recently revised.
If a change is material, we may provide additional notice through the site, portal, email, or another reasonable method. Continued use of MindKraft after an update means the updated policy applies from that point forward.