Privacy and your data.
Hello Nelli is operated by Amir Ramzan, who is responsible for the personal information described here. For privacy questions, an export or an account deletion request, email ramzan_amir@hotmail.com. This is the working contact address until a Hello Nelli mailbox is ready.
Information we use and why
Your email address, password credentials and confirmation status let us create and secure your account. The legal basis is providing the account service you request. Supabase handles authentication; Hello Nelli does not receive your password in readable form.
The profile answers, CV content, saved CV versions, uploaded CV files, job preferences and application notes you choose to save let the app show your work across sessions and devices. The legal basis is providing the features you request. These questions are optional, and you can edit or remove their content. Uploaded CV files are kept in a private Supabase Storage bucket with account-specific access and a 5 MB per-file limit.
Sensitive details such as health, disability, ethnicity, religion or sexual orientation are not needed to use Hello Nelli. If you choose to include them, you can separately give explicit consent for us to store them to provide your saved career tools. The choice is optional and recorded with its date. Without it, please leave sensitive details out. You can withdraw from My profile; because we cannot reliably separate sensitive passages from other writing, withdrawal removes all saved career content and revokes sign-in sessions across devices. A session already active elsewhere may continue until its current access expires.
Technical and security records may be processed to run the site, deliver messages, prevent abuse and investigate failures. The legal basis is our legitimate interest in keeping the service reliable and secure. We do not use your CV to decide whether an employer should hire you, submit applications for you or sell your profile to recruiters.
Job finding and CV help
Your job preferences are saved to your account. A CV supplied only to the role helper is read in your browser and is not saved by that helper. Separately, when you choose Upload CV in My profile, the original file is saved privately to your account until you delete it or withdraw sensitive-data consent; it is not automatically analysed or sent to AI. The current CV review gives browser-based writing prompts, not an AI score. Employer-board matching is currently disabled. If you open a UK Find a job link, its search phrase is sent to that external site and its own privacy terms apply.
Optional AI role ideas require a separate choice each time before the CV text and answers you review are sent to Cloudflare Workers AI. We do not save that text or the AI response in the role-ideas service. We count requests against a three-per-day limit using your account identifier and the date; those counters are removed when your account is deleted. Browser-only suggestions remain available without sending text to AI. AI ideas are search terms to check, not a judgment of your suitability or eligibility.
Who handles the information
Supabase hosts the account and saved career data. Cloudflare hosts the website and handles web traffic. Resend delivers account confirmation and password-reset emails. The site loads its Supabase client and, when you read PDF or Word files, document-reading libraries from jsDelivr. These providers process the information needed for their services. We do not share saved CVs with job engines automatically.
These providers may process information outside the UK. Their published data-processing terms describe the safeguards they use for international transfers. Contact us if you want details of a particular transfer. Supabase legal information, Cloudflare data processing terms and Resend data processing terms are available from the providers.
How long information stays
Your active account, saved profile, CVs, preferences and application notes remain until you remove them or ask us to delete your account. After a verified account-deletion request, we delete the account and linked live database records. Browser copies on your own devices remain until you sign out or clear this site's storage. Service providers may retain temporary recovery copies and operational logs under their own schedules. Resend says email and log data on its Free plan is retained for 30 days. We keep only the minimum information needed to resolve a support or rights request and any record we must retain for a specific legal reason.
Your choices and rights
In My profile → Your data you can download your current CV and saved jobs, clear that current work, delete individual named CV versions and uploaded CV files, and withdraw sensitive-data consent while removing all saved career content. The backup does not include named CV versions, uploaded files or every account record. Download uploaded files individually from Saved CVs if you need a copy. For a complete export, correction, objection, restriction or account deletion, email the address above. We will verify the request without asking for your password. You may also ask for access to the data we hold and complain to the UK Information Commissioner's Office.
The current site does not send job alerts by email. You can use the alert option on the external UK Find a job service. If you use an optional AI feature in the future, you can stop choosing it at any time and request deletion of saved information through the same contact route.