Sign in

Privacy Policy

Last updated: August 2026

This policy explains what BeSuix collects and how it's used, written plainly for a limited early launch. It is not legal advice.

1. Who is responsible

The data controller is Rubén Martín Cordero, Spain. Contact: besuix.app@gmail.com. We process personal data under the EU GDPR.

2. What we collect

  • Account data: name, email, password (stored hashed by our auth provider), and optional profile photo.
  • Profile content: everything you add, experience, education, skills, projects, documents you upload, and the CVs/letters Iris generates.
  • Usage data: basic logs and feature usage needed to run and improve the Service.
  • Billing data: handled by Stripe; we don't store your full card details.
  • Contact messages: your name, your email and whatever you write to us in the contact form, so we can reply. We keep them for up to 12 months after we answer, then delete them. We store a one-way hash of your IP address to block spam, never the address itself.

3. Why we use it (legal bases)

To provide the Service and your account (contract); to generate your documents via AI (contract); to keep the Service secure and working (legitimate interest); to send optional product emails (consent, you can opt out anytime in Settings); to comply with legal obligations.

4. AI processing

To draft your CVs and documents, the relevant profile content is sent to our AI provider (Anthropic) to generate output. Uploaded documents are processed to extract text and are not stored as files after processing. Your content is not used to train third-party models.

5. Service providers (processors)

We rely on trusted providers to operate BeSuix:
  • Supabase, database, authentication, file storage.
  • Anthropic, AI generation (Iris).
  • Stripe, payments.
  • Vercel, hosting and cookieless traffic measurement.
  • Google, optional sign-in with Google.
  • PostHog, product analytics and session replay, EU region.
  • Sentry, error monitoring.
  • Resend, account and product emails.
  • Cloudflare, anti-spam protection on our forms.
  • Meta, advertising measurement on our public pages, only if you accept cookies.
Some providers may process data outside the EU under appropriate safeguards.

6. Cookies and analytics

By default we set no tracking cookies. Our product analytics and traffic measurement run without them, and session recordings mask all text and inputs, so your profile, the offers you paste and your CVs are never recorded. Meta's advertising cookies load only if you accept them in the banner, only on our public pages, and never inside your account. Declining costs you nothing: the Service works exactly the same, and we remember your answer so we don't ask again. If you reach us from one of our ads, we store the campaign details alongside your waitlist signup so we can tell which ads work.

7. Retention

We keep your data while your account is active. When you delete your account, your personal data is removed (some minimal records may persist briefly in backups or where required by law). Contact messages don't depend on an account: they are kept for up to 12 months after we reply and then deleted.

8. Your rights

Under GDPR you can access, correct, export, or delete your data, and object to or restrict certain processing. You can edit or delete most data directly in the app, or email us at besuix.app@gmail.com. You may also complain to the Spanish data protection authority (AEPD).

9. Security

We use reputable providers and reasonable safeguards. No system is perfectly secure; as an early product, please avoid uploading highly sensitive information you wouldn't want processed by AI.

10. Changes

We'll update this page and the date above when things change, and notify you of material changes in the app.