Privacy Policy

Last updated: August 2026

1. Introduction

This Privacy Policy explains how Corolla IT 021 doo ("Corolla IT", "we", "us" or "our") collects, uses, shares and protects your personal data when you use the Profilis website available at https://profil.is, its subdomains, and the Profilis mobile application (together, the "Service").

We are committed to protecting your privacy and handling your personal data transparently and in accordance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR) where it applies to you.

By creating an account or using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with it, please do not use the Service.

2. Data Controller

The controller responsible for your personal data is:

Corolla IT 021 doo

PIB: 113339068

Registered at: Radoja Domanovića 11, Novi Sad 21000 (Serbia)

E-mail: support@profil.is

3. Personal Data We Collect

We collect only the data we need to provide the Service. Depending on how you use Profilis, this may include:

3.1. Account Data

When you create an account, we collect your name and email address. If you sign in with a third-party login provider (such as Google or Sign in with Apple), we receive basic profile information from that provider (typically your name and email address, or a private relay email if you use Apple's "Hide My Email" feature). If you register with a password, the password is stored in hashed form by our authentication provider and is never accessible to us in plain text.

3.2. Resume and Application Content

To build and manage your resumes, we process the content you provide or upload, such as your personal details, work experience, education, skills, certificates, professional summary, resume files you upload, and information about jobs and applications you track within the Service.

3.3. Voice Input

If you use voice dictation, your device converts your speech to text using your device's built-in speech recognition. The resulting text is treated the same as any other content you enter. We request microphone and speech-recognition permission only for this feature, and only when you use it.

3.4. Payment Data

When you purchase a subscription, payment is processed by our payment provider, which acts as the merchant of record for the transaction. We do not receive or store your full card details. We retain a record of your subscription status, plan, and transactions necessary to provide and account for the Service.

3.5. Usage and Device Data

We automatically collect limited technical and usage information, such as device type, operating system, app version, IP address, and interactions with features, in order to operate, secure, and improve the Service.

4. How We Use Your Data

We use your personal data to:

• Create and manage your account and authenticate you.
• Provide the core Service, including building, editing, tailoring, and storing your resumes and applications.
• Generate AI-assisted resume content based on the information you provide.
• Process subscriptions and payments and provide customer support.
• Secure the Service, prevent abuse, and enforce our Terms of Use.
• Understand how the Service is used so we can maintain and improve it.
• Comply with legal obligations.

5. Legal Bases for Processing

Where the GDPR applies, we rely on the following legal bases: performance of a contract (to provide the Service you request), your consent (for example, for optional features or communications), our legitimate interests (to secure and improve the Service), and compliance with legal obligations.

6. AI Processing

Profilis uses artificial intelligence to help you build and improve your resume. To provide these features, the content you submit for AI assistance is transmitted to third-party AI model providers (such as OpenAI and Google) solely to generate the requested output and return it to you. We instruct these providers to process the data only for that purpose. You should avoid submitting sensitive personal information that is not necessary for your resume.

7. How We Share Your Data

We do not sell your personal data. We share it only with service providers who process it on our behalf and under contract, including:

• Authentication provider — to manage sign-in and accounts.
• AI model providers — to generate AI-assisted content, as described in Section 6.
• Payment provider — to process purchases as merchant of record.
• Cloud hosting and storage providers — to host the Service and store your data (including file storage).
• Analytics providers — to understand aggregate usage and improve the Service.

We may also disclose data where required by law, to protect our rights, or in connection with a corporate transaction such as a merger or acquisition.

8. International Transfers

We and our service providers may process your data in countries outside your own, including outside the European Economic Area. Where we transfer personal data internationally, we take appropriate safeguards as required by applicable law (such as standard contractual clauses).

9. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service, and thereafter only as required to comply with legal obligations, resolve disputes, and enforce our agreements. When you delete your account, we delete or anonymize your personal data as described in Section 10, except where retention is required by law.

10. Your Rights and Choices

10.1. Account Deletion

You can permanently delete your account at any time directly within the Service — in the mobile app, go to Settings → Delete account. Deleting your account permanently removes your account, resumes, and applications from the Service and cannot be undone. You may also request deletion by contacting us at support@profil.is.

10.2. Other Rights

Subject to applicable law, you have the right to access, correct, update, or export your personal data, to restrict or object to certain processing, and to withdraw consent where processing is based on consent. To exercise these rights, use the in-app controls or contact us at support@profil.is. You also have the right to lodge a complaint with your local data protection authority.

11. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Children's Privacy

The Service is not directed to children under the age of 16, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, please contact us so we can delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you through the Service. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at support@profil.is.