Last updated: 10 July 2026
Caddie AI (“the Service”) is operated by Viewery Ltd, a company registered in England and Wales (company number 16837989) (“Viewery”, “we”, “us”). Viewery is the data controller for the personal data described in this policy. This policy covers the hosted Service at app.caddie.careers and the caddie.careers website. You can reach us about anything in this policy at dmitry@viewery.ai.
| Data | Why |
|---|---|
| Email address, and a hashed password (or your Google account ID, name and email if you sign in with Google) | Create and secure your account |
| Your base CV and cover letter, job descriptions you paste or fetch, and the drafts, edits and scoring criteria you create in the app | The core of the Service — matching, scoring and drafting only work by processing this content |
| Application status, notes, and the edits you make to drafts | To track your pipeline and let the app learn your preferences over time |
| Billing status and a Stripe customer/subscription ID | To run the free trial and paid plan. We never see or store your card details — Stripe handles those directly |
| Basic technical data (IP address, timestamps, error logs) | Security, abuse prevention, and debugging |
We don't run any advertising or analytics trackers on the Service. The only cookie we set is a signed, HTTP-only session cookie used to keep you logged in.
To score a role and draft a CV, cover letter or screening answers, the relevant text (your CV, the job description, your stated preferences) is sent to our LLM routing provider, OpenRouter, which forwards it to an underlying model provider to generate a response. This is the only way the AI features work. We don't use your data to train models, ours or anyone else's.
Fetching a job posting you paste a link to means we (or a headless browser we run) request that page from the job board or employer's site, the same as if you'd opened it yourself.
The data you give us as a user — your account details, base CV and cover letter, the job descriptions you add, and the drafts, edits and scoring criteria you generate — is processed so that we can perform the service you signed up for. Our legal basis for this processing is the performance of our contract with you (UK GDPR Article 6(1)(b)). You can request access to, or erasure of, your personal data at any time by emailing dmitry@viewery.ai, and we will action your request.
To help you find and evaluate roles, Caddie indexes publicly available job listings. These listings concern roles and companies, not individuals, and we do not use them to build profiles of people. Where a listing incidentally contains an individual's personal contact details — for example a named recruiter's direct email address or phone number — we remove them when the listing is ingested.
Any residual personal data that remains within a public listing is processed under our legitimate interests (UK GDPR Article 6(1)(f)) in operating a job-search service that connects candidates with relevant openings, having weighed those interests against the rights and freedoms of the individuals concerned. We retain such data for no longer than 28 days. If you are an individual named in a listing we index, you may object to this processing or request erasure at any time by emailing dmitry@viewery.ai, and we will action your request.
We don't sell your data. We share it only with the vendors that run parts of the Service on our behalf, each bound to use it only to provide their service to us:
We may also disclose data if required by law, or to protect the security of the Service.
We keep your account data, documents and drafts for as long as your account is active, so the Service can keep working the way you left it. If you'd like your account and data deleted, email us (below) and we'll delete it, other than what we're required to keep for legal, tax or fraud-prevention reasons.
Passwords are hashed (bcrypt) and never stored in plain text. Data is stored per-account in an isolated Postgres database, transferred over HTTPS, and the session cookie is signed and, in production, marked Secure. No system is 100% secure, but we don't do anything by half — if you find an issue, please tell us.
Depending on where you live, you may have the right to access, correct, export or delete your personal data, or to object to or restrict its processing. Email us at dmitry@viewery.ai and we'll act on it. If you're in the UK or EU and think we've mishandled your data, you also have the right to complain to a supervisory authority — in the UK, the Information Commissioner's Office (ico.org.uk) — though we'd appreciate the chance to put things right first.
Our infrastructure and the vendors listed above may process data outside your country of residence. Where required, we rely on the vendor's own safeguards (e.g. standard contractual clauses) for cross-border transfers.
The Service is intended for people applying to jobs and isn't directed at children. We don't knowingly collect data from anyone under 16.
If this policy changes materially, we'll update the date above and, for significant changes, let existing account holders know by email.
Questions, data requests, or anything else: dmitry@viewery.ai.