Privacy policy

This policy explains what Tolta collects when you use it, why, who helps us process it, and how you can see, correct or delete your information. Tolta is operated by Catnap LLC, a Wyoming limited liability company (“Tolta”, “we”, “us”). Catnap LLC is the controller of the personal information described here.

This policy covers the Tolta app at app.tolta.ai and this website, tolta.ai.

What we collect

• Your account. Your name, email address and password (stored only as a secure hash), or, if you sign in with Google or LinkedIn, the identity that provider shares with us. We do not keep your Google or LinkedIn access tokens.
• Your CV and profile. The CV you upload and the profile we read from it: your experience, education, skills, languages, links and contact details. You can edit the profile at any time.
• Your job preferences. The roles, seniority, locations, remote preference, minimum salary and start date you tell us, and the matches you save, dismiss or give feedback on.
• Your work authorization. Whether you are authorized to work where you apply and whether you need sponsorship. We ask you to confirm this every 90 days so an outdated answer is never used.
• Optional self-identification. Gender, race or ethnicity, veteran status and disability status, only if you choose to answer. These answers are stored encrypted, are never used to match you to jobs, are never shown to employers outside the voluntary self-identification section of an application form that asks for it, and “Prefer not to say” is always an option.
• Your applications. The answers, cover letters and documents prepared for each application, the answers you give when Tolta asks you a question, and each application’s timeline (prepared, sent, replies and status changes).
• Your application inbox. If you turn on the inbox, you get a personal application email address. We store the emails employers send to it, their attachments, and the replies you send from Tolta.
• Payments. Payments are handled by our payment processor. We receive your subscription status, plan and the last four digits and type of your card. We never see or store your full card number.
• How you use Tolta. Pages you view on this website and in the app, what you click, browser errors and, when enabled, recordings of how you use the app. This helps us find and fix problems and improve the product. These records use an internal ID, not your name or CV.

If you start onboarding at /start before creating an account, we keep your answers and CV for 24 hours. If you don’t create an account in that time, or you leave, we delete them.

How we use it

• To read your CV, match you with job postings and explain why each one fits.
• To prepare applications and submit them to employers on your behalf, only when you choose to send one.
• To receive employer replies in your inbox and send the replies you write.
• To charge for your subscription and manage your plan.
• To send you emails about your account and your applications.
• To keep Tolta secure, prevent abuse and fraud, and understand how it is used so we can improve it.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

Legal bases (EEA and UK). We process your information to perform our contract with you (running your account, matching and applications), with your consent (optional self-identification, which you can withdraw at any time), for our legitimate interests (security, fraud prevention, product analytics and improvement), and to meet legal obligations (tax and accounting records).

Who we share it with

• Employers. When an application is sent, the employer and its hiring system receive the application: your answers, CV and cover letter. From then on the employer handles it under its own privacy policy.
• Service providers that process information only on our instructions and under contract:
  • payment processing and billing
  • email delivery
  • AI processing
  • cloud hosting, infrastructure and security
  • product analytics and error tracking
• Sign-in providers. If you sign in with Google or LinkedIn, that provider knows you signed in to Tolta.
• Legal reasons. When required by law, or to protect the rights, safety and security of our users, Tolta or others.
• Business transfers. If Catnap LLC is involved in a merger, acquisition or sale of assets, your information may be transferred as part of it, under this policy.

International transfers

Catnap LLC is based in the United States, and our providers process information in the United States and other countries. Where the law requires it, transfers from the EEA, the UK or Switzerland rely on safeguards such as the European Commission’s standard contractual clauses.

How long we keep it

We keep your information while you have an account.

When you delete your account, we cancel your subscription and delete your profile, CV and documents, preferences, matches, applications, self-identification answers, work authorization, connected sign-ins and inbox mail. We keep a minimal record: your email address, account dates, whether you ever had a paid plan, and your application address so it is never given to anyone else. This prevents repeated free trials and lets you restore your account if you sign up again with the same email. Copies in backups are deleted as those backups expire. We also keep billing records for as long as tax and accounting law requires.

Applications already sent to an employer are held by that employer under its own policy.

Your choices and rights

You can see and edit your profile, preferences and self-identification answers in the app, decline any self-identification question, turn the inbox on or off, and delete your account from your settings.

Depending on where you live, you may also have the right to access a copy of your information, correct it, delete it, receive it in a portable format, restrict or object to some processing, and withdraw consent. To use any of these rights, email [email protected]. We will answer within the time the law requires and won’t treat you differently for using them. If you are in the EEA or the UK, you can also complain to your local data protection authority.

Cookies

The app uses cookies to keep you signed in, secure your session and remember settings such as light or dark mode, and our analytics provider uses cookies to recognize your browser. This website uses the same analytics provider to understand which pages visitors read and which links they follow; if you then sign up, those visits are connected to your account.

Security

Passwords are stored as secure hashes, self-identification answers are encrypted, and all traffic uses HTTPS. No system is perfectly secure; if a breach affects your information, we will tell you as the law requires.

Children

Tolta is for people 18 and older. We do not knowingly collect information from anyone under 18; if we learn we have, we delete it.

Changes

If we change this policy, we will update the date at the top of this page, and tell you by email before significant changes take effect.

Contact

Catnap LLC, operating Tolta · [email protected]