EA Limitless LLC ("EA Limitless", "we", "us", or "our") operates Jovea (the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using Jovea you agree to the terms below.
1. Information we collect
Information you provide
- Account data: name, email, password hash, profile photo.
- Career data: resumes, work history, skills, target roles, salary expectations, preferences.
- Content: messages, drafts, notes, and files you upload (e.g., resumes, cover letters).
- Payments: processed by our PCI-compliant payment partner. We never store full card numbers.
- Communications: support tickets, feedback, and survey responses.
Information collected automatically
- Usage data: pages viewed, features used, timestamps, referring URLs, device & browser info.
- Cookies & similar tech: see our Cookie Policy.
- Approximate location: derived from IP for security and localization.
Information from third parties
- SSO providers (Google, LinkedIn, Microsoft) when you sign in.
- Integrations you connect (calendar, email, ATS) — only data you authorize.
2. How we use your information
- Provide, maintain, and improve the Service and its AI features.
- Personalize matches, scores, and recommendations.
- Process payments and prevent fraud.
- Send service-related and (with consent) marketing communications.
- Comply with legal obligations and enforce our Terms.
3. AI processing
Jovea uses AI models to analyze your career data and generate drafts (resumes, outreach, interview prep, etc.). We do not use your private content to train foundation models. All AI-generated outreach requires your explicit human approval before sending. See our AI Ethics policy.
4. Legal bases (GDPR / UK GDPR)
- Contract: to deliver the Service you signed up for.
- Legitimate interests: to secure, improve, and analyze the Service.
- Consent: for marketing, SMS, and certain cookies.
- Legal obligation: tax, accounting, lawful requests.
5. Sharing
We share data only with:
- Service providers (hosting, analytics, email, payments, AI infrastructure) under written DPAs.
- Integrations you authorize (e.g., sending an application to an ATS).
- Authorities when legally required, with notice where permitted.
- Successors in a merger, acquisition, or asset sale — with continued protection of your data.
We do not sell your personal information.
6. International transfers
We are based in the United States and process data globally. Where required, we rely on Standard Contractual Clauses and equivalent safeguards for cross-border transfers.
7. Retention
We keep account and career data while your account is active and for up to 24 months after deletion for backups, fraud prevention, and legal compliance, then we delete or anonymize it.
8. Your rights
Depending on your location (GDPR, UK GDPR, CCPA/CPRA, and similar laws) you may have the right to access, correct, delete, port, restrict, or object to processing of your personal data, and to lodge a complaint with a supervisory authority. To exercise rights, email privacy@lumora.app. California residents may also designate an authorized agent.
9. Children
Jovea is not directed to children under 16. We do not knowingly collect data from children.
10. Security
We use encryption in transit (TLS 1.2+) and at rest, least-privilege access, audit logging, and regular security testing. See our Security page. No system is 100% secure.
11. Changes
We will post material changes here and notify you by email or in-app where appropriate.
12. Contact
EA Limitless LLC · Attn: Privacy · privacy@lumora.app.