What we hold
What you give us
- Your account: email address and password (stored hashed, never in readable form).
- Your CV, and the dates, titles and specifics extracted from it.
- Your interview: the audio recording, its transcript, and any corrections you made before locking it. If you interview by typing instead, there is no audio.
- Your blocked companies: the list checked before anything else runs.
What we build from it
- A profile for each company you choose, written from your evidence, which you read and approve before anything is sent.
- A pitch and a set of target companies, each claim tied back to a line in your CV or a moment in your interview.
- The approaches you approve, and any replies to them.
- If you joined before 29 September 2026, the earlier profile written for you then, without your name. Nothing new is written; it is kept with your account, included when you export your data, and deleted with it.
Identity verification
When you verify your identity, you photograph an ID document and your face. Those images never reach Overture. They go directly to our verification provider, which checks them and returns only a pass or fail and the name on the document. We keep the result. We never hold the images.
Who sees it
The people you approach see the approach you approved, in your own name: the note, its follow-ups, and anything you chose to add, such as your LinkedIn profile or a link to your CV. The first note asks them to keep your search discreet. What they do with it is theirs, and we cannot control it.
Companies on your blocked list are never researched or approached. The list is checked before research, before anyone is looked up, and before a single message is prepared.
Our processors
Our processors see only what they need to do their job: transcription for your interview audio, identity verification for your documents, email delivery for outreach, payments, product analytics, and hosting for everything. Each is bound by contract to use your data only for that purpose.
Product analytics
Product analytics count the steps of signing up and paying, and when a plan’s quota runs out, so we can see where the service falls short. They are recorded by our own servers under a coded reference that is not your account number, and they carry no name, address, CV or interview content.
One free interview per email address
To keep the free interview free, we keep a one-way code made from your email address once you use it. It holds no address, and it stays after an account is deleted so the free interview cannot be claimed again. Our legitimate interest is preventing abuse of a service we pay for.
We do not sell your data, to recruiters or anyone else. We do not use your material to train models that serve other users. Your career is not a dataset.
Why we’re allowed to
The four processing purposes below are controlled in your consent settings. You can withdraw them separately; core processing is required to run your account. The free-interview abuse-prevention code described above is retained on legitimate-interest grounds, rather than one of these consent switches.
- Core processing. Holding your account and the material you gave us. Required; without it there is no service.
- Career interview recording. Recording and transcribing the interview.
- Finding hiring contacts. Looking up who at a target company would make the decision.
- Reading replies. Reading replies to outreach so we can relay them to you.
Withdrawing a consent stops that processing going forward. It does not unsend an approach already delivered.
How long we keep it
While your account is open, we keep your material so the service can use it. When you close your account, outreach stops immediately and your personal data is deleted within 30 days, except where we are legally required to keep a record of a transaction. The one-way free-interview code described above also remains after deletion so the free interview cannot be claimed again.
If you asked for access or news and have no account
If you asked for access or signed up for news and have no account, we keep your request, your replies to our introduction email and our notes on them until you ask us to delete them. Replies we could not match to a request are deleted after 90 days. When we delete your data, we keep a one-way code made from your email address so we do not write to you or add you again by mistake, and we keep any request you made not to be emailed. Copies of your emails in our mailbox are deleted by hand. If you ask for access again later, we lift the code before we write to you.
Your interview audio and transcript
When you confirm and lock the transcript, we queue the interview audio for deletion. The transcript itself is kept for as long as your account is open, because everything downstream cites it.
What you can ask for
- A copy of everything we hold about you.
- A correction to anything that is wrong.
- Deletion of your account and its data.
- Deletion of a request for access or a newsletter sign-up, if you have no account.
- Withdrawal of any consent, at any time, without giving a reason.
- An explanation of any automated decision that affected you.
Write to privacy@myoverture.xyz and we’ll answer within 30 days. If we get it wrong, you can complain to your national data protection authority.
Changes
If we change what a consent purpose covers, you’ll be asked to re-confirm it rather than being opted in quietly. The date at the top of this page always reflects the current version.
Earlier change: named approaches, 29 September 2026
Changed on 29 September 2026: approaches used to go without your name, and you chose when each company saw it. Approaches now go in your own name and are handled as sensitive.