Content you add
We store the content you add to the Products, such as job preferences, applications you track, resumes, practice answers, questions and reading history, so the Products can work for you and keep your history.
Terms & policies
Privacy Policy
What we collect, why we collect it, how long we keep it and the choices you have.
Scope
This policy explains how Bagala handles personal data when you visit www.bagala.ai or use Job Search, Job Prep and Library (the "Products").
Account data
When you create an account we store:
- your username, display name and email address;
- a one-way hash of your password (we never store the password itself);
- if you turn on two-step sign-in, the data needed to check your one-time codes and your recovery codes, stored in protected form;
- the role that decides which Products your account can use, and a record of security events such as sign-ins and sign-outs.
Page request analytics
To keep the Products reliable and understand how they are used, we record page requests: the site and page address (without query strings), the time, response status and timing, the country reported by our network provider, the browser type and the referring page. Visitor network addresses are converted into hashed identifiers before they are stored. These records are kept in our own ClickHouse database and are not sold or shared for advertising.
We send account emails, such as address confirmation and password reset messages, and replies to your enquiries through a transactional email provider that processes your email address and the message only to deliver it.
AI model providers
To produce matches, feedback and answers, the Products send the relevant parts of your request and content to AI models from established providers, through a controlled gateway. We send only what a feature needs and use providers under terms that govern how they may process that data.
Enquiries
When you use Email Admin we receive your name, email address, message and the page you sent it from, and use them only to respond to you.
How we use data
- to provide, secure and support the Products and your account;
- to prevent abuse, including limiting repeated sign-in attempts;
- to understand usage and improve reliability;
- to communicate with you about your account and your enquiries;
- to meet legal obligations.
We do not sell personal data.
Retention
We keep account data and your content for as long as your account is open. When you ask us to close your account, we delete or anonymise your account data and content within a reasonable period, except where we must keep information to meet legal obligations, resolve disputes or protect security. Security and request records are kept for a limited period and then deleted or aggregated.
Security
Connections are encrypted, passwords are stored as hashes, sign-in attempts are rate limited and access to the Products is controlled by account roles. No system is perfectly secure; tell us through Enquiries if you believe your account is at risk.
Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to or restrict certain processing, and to complain to a data protection authority. To make a request, contact us through Enquiries. We may need to confirm your identity before acting on it.
Changes to this policy
We will update the "Last updated" date above when this policy changes and give notice of material changes on the site or by email.
Contact
Send privacy questions and requests through at the bottom of any page.