Privacy Policy

1. Introduction

Welcome to IMI — the AI-Powered Immigration CV Analyzer operated by CK Orbits. We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use and share it, how we keep it secure, and the rights you have when you use our web and mobile applications (the "Platform"). By using the Platform, you agree to the practices described here.

2. Who We Are

IMI is a CV/resume analysis and immigration eligibility assessment service. It can be used directly by individuals or by immigration consultancies and organizations that manage candidates on the Platform. The entity responsible for your personal data (the data controller) is CK Orbits. If you were invited to the Platform by a consultancy or organization, that organization also acts as a controller of the data it uploads and manages about you.

3. Data We Collect

We collect the following categories of information:

• Account information: first and last name, email address, and encrypted password. For invited users we also record account status and password-change requirements.
• CV / resume documents: the files you upload (e.g. PDF or Word documents), including their original filename, file size, file type, and a cryptographic hash used to detect duplicates.
• Data extracted from your CV: information parsed from your document such as name, date of birth, nationality, phone number, current country of residence, education history, work experience, and language-test scores.
• Profile and eligibility information: details you provide in your profile, including field of study, education level, institutions, graduation years, job titles and companies, years of experience, language tests (e.g. IELTS, TOEFL, PTE), desired destination countries, job-offer status, state/provincial nomination, family ties in a region, marital status and partner information, available settlement funds, and similar immigration-related answers.
• Analysis results: the structured candidate data and eligibility assessments generated from your inputs, together with any reports produced.
• Technical and usage data: log data such as request identifiers, timestamps, your user and organization identifiers, and diagnostic information used to operate and secure the service.

4. How We Use Your Data

We use your data to provide and improve our immigration-intelligence services, specifically to:

• parse your uploaded CV and convert it into structured candidate data;
• evaluate your profile against immigration programs (for example in Canada, Australia, and New Zealand, among others) and produce eligibility results and recommendations;
• generate reports and AI-driven explanations to help you understand your results;
• create and secure your account, verify your email address, and enable password reset;
• allow authorized organizational users (such as consultancies) to manage and track your candidacy, where you are affiliated with an organization;
• enforce usage quotas and prevent abuse; and
• maintain, troubleshoot, secure, and improve the Platform.

5. Automated Processing & Artificial Intelligence

The Platform uses automated processing and third-party artificial intelligence services to read your CV and assess your eligibility. Text extracted from your CV is sent to AI parsing providers to identify structured fields, and your profile data is processed by our rules engine to score you against program criteria. These assessments are advisory estimates — they are not decisions made by any government authority and do not guarantee any immigration outcome. You may contact us if you would like a human to review a result that affects you.

6. Third-Party Service Providers

We share limited data with trusted service providers who process it on our behalf under contractual safeguards:

• AI parsing providers (e.g. OpenAI and ApyHub): we send the text or file contents of your CV so they can extract structured candidate information. These providers process the data to return parsing results.
• Email delivery (Resend): we send your email address and name to deliver transactional emails such as email verification, password reset, and account notifications.
• Cloud hosting and storage (Microsoft Azure): uploaded documents and application data are hosted on Azure infrastructure (including Azure Blob Storage and managed PostgreSQL databases).
• Geocoding services: location and country information may be sent to a geocoding provider to standardize location data.

We do not sell your personal data, and we do not share it with advertisers.

7. Sharing With Organizations

If you access IMI through an immigration consultancy or organization, that organization's authorized administrators and staff can view the submissions, profiles, and analysis results associated with their organization. Access is governed by role-based controls, and organizations can only see candidates within their own organization — they cannot access candidates belonging to other organizations. If you have questions about how a particular organization uses your data, please contact that organization directly.

8. Data Storage & Security

We take the security of your data seriously. Data is encrypted in transit (HTTPS/TLS) and stored on managed, access-controlled infrastructure. We apply the following safeguards:

• Passwords are never stored in plain text — they are hashed and salted using industry-standard algorithms.
• Access to the Platform is authenticated using short-lived JSON Web Tokens (JWT), with automatic session expiry.
• Role-based access control ensures users only see the records they are authorized to view.
• Uploaded CVs are stored in access-controlled cloud storage, organized so that each user's and organization's files are logically separated.

No method of transmission or storage is completely secure, but we work to protect your information using appropriate technical and organizational measures.

9. International Data Transfers

Because we rely on cloud hosting and third-party AI and email providers, your data may be processed in countries other than your own. Where data is transferred internationally, we take steps to ensure it remains protected by appropriate safeguards consistent with this Policy.

10. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the service. When you request account deletion, we permanently delete your uploaded CV files and associated submissions and analysis results from our active systems, and your account is deactivated so it can no longer be used to log in. Limited records may be retained where required for security, audit, legal, or accounting purposes, in which case identifying details are minimized where practicable.

11. Your Rights

Depending on your location, you may have the right to:

• access the personal data we hold about you;
• correct or update inaccurate information (you can edit much of your profile directly on the Platform);
• request deletion of your personal data and delete your account, which permanently removes your CVs and submissions from our active servers;
• object to or restrict certain processing; and
• request a copy of your data in a portable format.

To exercise these rights, use the in-app controls or contact us using the details below.

12. Cookies & Local Storage

We use a small number of strictly necessary cookies and browser storage to keep you signed in and to remember your session and draft profile information while you use the Platform. We do not use third-party advertising cookies, and we do not run Google Analytics, marketing pixels, or similar cross-site tracking. Disabling essential cookies may prevent parts of the Platform from working.

13. Children's Privacy

The Platform is not intended for children under 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take steps to remove it.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. Material changes may be communicated through the Platform. Your continued use of the Platform after changes take effect constitutes acceptance of the updated Policy.

15. Contact Us

If you have questions about this Privacy Policy or how your data is handled, contact us at info@ckorbits.com.