Privacy Policy

Last updated: 26 April 2026

Iris ("we", "us", "our") operates the Iris platform, which automates job applications on behalf of users. This Privacy Policy explains how we collect, use, store, and protect your personal information.

1. Information We Collect

When you use Iris, we may collect the following information:

• Account information: name, email address, phone number (WhatsApp)
• CV and profile data: work experience, education, skills, and other information you provide in your CV or during onboarding
• Job preferences: target roles, salary range, location preferences, visa status
• Application data: records of applications submitted on your behalf, including answers to screening questions and cover letters generated by our AI
• Email data: if you connect your Gmail, we scan for interview invites, assessment requests, and offer letters to update your application pipeline. We do not read or store unrelated emails.
• Usage data: interactions with our platform, WhatsApp messages sent to our bot, and dashboard activity

2. How We Use Your Information

We use your information to:

• Submit job applications on your behalf to employer career portals
• Generate personalised cover letters and screening question answers
• Track application statuses and detect interview invitations
• Communicate with you via WhatsApp about application progress
• Improve and develop our service

3. How We Share Your Information

We share your information only in the following circumstances:

• With employers: when submitting applications on your behalf, your profile information is entered into their application forms — exactly as it would be if you applied manually
• Service providers: we use third-party services for hosting, analytics, and communication (e.g., WhatsApp Business API). These providers are bound by data processing agreements.
• Legal requirements: we may disclose information if required by law or to protect our rights

We never sell your personal data to third parties.

4. Data Storage and Security

Your data is encrypted in transit (TLS) and at rest. We store data on secure cloud infrastructure. Access to personal data is restricted to authorised personnel only. We retain your data for as long as your account is active, plus 30 days after deletion to allow for account recovery.

5. Your Rights

You have the right to:

• Access your personal data at any time via your dashboard
• Correct any inaccurate information in your profile
• Delete your account and all associated data at any time
• Export your data in a portable format
• Withdraw consent for email scanning or application submission at any time

If you are in the UK or EEA, you have additional rights under GDPR including the right to lodge a complaint with your local data protection authority.

6. Cookies

We use essential cookies to keep you logged in and maintain your session. We do not use advertising or tracking cookies.

7. Third-Party Services

Our service interacts with third-party job platforms (LinkedIn, Workday, Greenhouse, Lever, Ashby) to submit applications. These platforms have their own privacy policies. We also use the WhatsApp Business API (provided by Meta) for communication.

8. Children's Privacy

Iris is not intended for individuals under the age of 18. We do not knowingly collect data from minors.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via WhatsApp or email. Continued use of Iris after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or your data, contact us at hello@iris.app.