Welcome to Custro.com. The company treats the privacy of its users with great respect and considers the protection of their information to be of the highest professional and ethical importance.
This document is intended to explain to you in full transparency what personal data we collect when you use the site, how we use it, to whom we may transfer it (including payment processing services and AI model development interfaces), and what your legal rights are. By browsing the site, creating an account, purchasing services, and entering data into our resume builder system, you expressly, actively, and freely consent to the collection, processing, and storage of information in the company's databases as stated in this document. It is hereby clarified that you are not legally required to provide us with this information, but without providing the necessary data, the system will not be able to provide you with the site's services and resume building.
Basic identity details such as first and last name, email address, phone number, and system access passwords.
Any data, information, or text you choose to enter into the system to build and edit your resume. This information may include detailed employment history, educational institutions, grades, certificates, skills, competencies, areas of interest, and profile photos.
We strongly recommend avoiding entering data that may be considered 'particularly sensitive information' under the law (such as affiliation with organizations of a sensitive nature, medical data, or exact salary expectations from previous workplaces), unless this information is absolutely necessary for building your professional profile. The responsibility for the quality of the content entered rests with the user.
Information collected on our servers during your visit to the site, including your device's IP address, browser type, operating system version, login and logout times, pages viewed, and time spent on them. This information is typically collected through cookies and analytics tools.
The Custro.com platform integrates cutting-edge technologies and development interfaces of large language models (LLMs) based on artificial intelligence (Generative AI) to generate, edit, and improve the wording and design of your resumes. The information you enter undergoes automatic algorithmic processing and is transmitted through confidential and secure API interfaces to external language model providers authorized by us. This is solely for the purpose of analyzing the text and returning formatted, ready-made resume output for you in real time.
The company unequivocally declares that it does not use your personal information or resume content to train, improve, or fine-tune internal and/or public AI models. Furthermore, the company operates through legal and technological channels to ensure that its external AI providers (Zero Data Retention Policies) are not permitted to store or use information transferred to them through us to train their commercial algorithms, thereby maintaining maximum privacy protection for our customers.
Operating the platform, providing resume creation services, and enabling you to download and manage the documents you've created.
Routine operation of your user account, providing quality technical support, and handling inquiries with customer service.
Managing billing processes, collecting payments for subscriptions or one-time transactions, and fraud prevention.
Internal research and development, performing analyses based on aggregated and statistical data (that do not personally identify you), to improve and optimize user experience and add advanced technological features to the site.
Sending direct mail, marketing offers, promotions, system update information, and professional newsletters – only if your explicit and separate consent was given during the registration process. You may withdraw your consent and remove yourself from the mailing list at any time (Opt-out) via a dedicated link at the bottom of each mailing.
Enforcing the Terms of Use, complying with regulatory and legal requirements, and protecting the company's legal and proprietary rights.
The company employs the strictest and most advanced measures available on the market to secure information on its servers, in accordance with privacy protection regulations. We use encryption protocols (SSL/TLS) and firewalls to prevent unauthorized access.
In accordance with the regulatory requirements of payment processing bodies in Israel and credit card company guidelines, the company declares that it does not collect, receive, process, or store any customer credit card details on its servers at any stage of the purchase process.
Payment processing for our services is carried out exclusively by redirecting to an external, secure payment page (Hosted Gateway) of an authorized third-party payment service provider (PSP). This payment provider meets the highest and most rigorous international security standard in the credit card industry – PCI-DSS Level 1.
The company respects your privacy and does not trade, sell, or rent your personal information to any commercial entities for profit.
However, to provide services and maintain its business operations, the company may transfer some information to the following parties, subject to strict security measures and confidentiality agreements:
Cloud infrastructure and server hosting providers, AI interface providers (LLM APIs) used for the platform's engine, email delivery service providers (for subscribers only), and companies providing technological payment processing solutions for transaction approvals.
The company will transfer identifying information if it receives a court order directing it to do so, or in cases where there is reasonable suspicion that the user has committed an act or omission that harms the company, its customers, or third parties, or has violated the terms of use and acted contrary to the law.
If the company undergoes a merger, acquisition by another entity, or transfer of its activities to a third party, it may transfer its information database to the acquiring entity, provided that entity fully accepts the provisions of this privacy policy and acts in accordance with the law.
Some of our service providers may be located outside of Israel (including in the US or EU countries). Transfer of information beyond Israel's borders is carried out in accordance with the Privacy Protection Regulations (Transfer of Information to Databases Outside the State's Borders), 5761-2001, and with legal assurance that the level of information protection in those countries meets Israeli and European standards.
The company operates in full transparency and gives its users control over their personal information, as required by the Privacy Protection Law and its amendments (with emphasis on Amendment 13 provisions):
Every person is entitled to view, personally or through their representative, the identifying information held about them in the company's databases.
A user who has viewed the information about them and found it to be inaccurate, incomplete, unclear, or not up to date, is entitled to contact us with a request to correct or completely delete it from our databases. This right also applies in cases where the system's algorithm created an incorrect inference.
Upon receiving a lawful request for account deletion, the company commits to deleting or anonymizing personally identifiable information from all its active systems within a reasonable timeframe, except for records the company is legally required to retain (such as tax invoices, receipts, and billing data, which must be kept for specified periods under applicable tax and consumer protection laws).
To exercise these rights, a formal request may be sent to the email address listed in the contact section below.
The core service of Custro.com is based on advanced technologies and deep statistical models of generative artificial intelligence. To provide the service, we are committed to being fully transparent about the technology's limitations and their implications for your responsibility as end users:
AI models do not 'understand' factual meaning but rather compute and produce texts based on mathematical probabilities. As a result, there is a recognized technological likelihood that the system will generate content that appears fluent and accurate but actually contains factual errors, logical inconsistencies, fabricated additions of skills and experience not entered by you, or invented details with no basis in reality. This phenomenon is known as 'AI Hallucinations'.
The outputs produced by the system do not constitute a verified factual document and are not reviewed by a human editor on behalf of the company. The outputs are provided to you 'AS IS'. By using the site, the user (customer) assumes full and exclusive responsibility to carefully read, thoroughly proofread, positively verify, and correct any error, inaccuracy, or fabrication in the resumes produced by the algorithm, before downloading them from the system and before any public, commercial use, or presentation to potential employers or any third parties.
The company (including its directors, operators, developers, employees, and external providers) fully disclaims, and the user proactively exempts it from, any tortious, business, contractual, or other legal liability for any damage of any kind whatsoever (including direct, indirect, consequential damage, loss of income, loss of position, emotional distress, or exposure to misrepresentation claims from employers) that may be caused to the user or to a third party as a result of reliance on information that was created, omitted, distorted, or fabricated by the AI models on the site. Agreement to and approval of this section constitutes a fundamental and threshold condition for the company's ability to provide its services to the user.
Since the regulatory and technological environment (such as updates to AI legislation and information security regulations in Israel) changes frequently, the company reserves the right to update, change, and amend this privacy policy from time to time at its sole discretion. Material changes affecting the use of your personal information will be published on the site and reflected in an updated manner at the top of this page (under 'Last updated'). Your continued use of the site after publication of the updated policy will constitute your consent to these changes.
This section describes data handling that is specific to the Custro Chrome Extension ("the Extension"). It supplements, and where there is a conflict overrides, the general Privacy Policy above for the use of the Extension.
Custro is a productivity Chrome extension that lives entirely in Chrome's side panel. It helps you (a) draft outreach messages to recruiters, (b) draft LinkedIn posts and comments, (c) get AI feedback on your LinkedIn profile, and (d) keep a private log of jobs you've applied to. The Extension does not modify, click, type into, or scrape LinkedIn in the background. Every interaction with LinkedIn page content is started by you.
We deliberately collect as little as possible. The exhaustive list:
Your LinkedIn profile slug (e.g. linkedin.com/in/your-name)
Sign-in session (auth token)
Application-tracker entries you save manually
Job details of a single LinkedIn job posting
Profile PDF you upload yourself
Prompts you type into the message / post / comment generator
activeTab
storage
tabs
identity
sidePanel
Host: https://www.linkedin.com/*
Host: https://custro.com/*
Host: https://*.supabase.co/*
We do not request the broad <all_urls> host permission, the scripting permission, or the webRequest permission.
The Extension communicates only with:
The Extension does not load any third-party fonts, analytics scripts, or remote code. The packaged Extension contains only code that has been reviewed by you on the Chrome Web Store.
You can:
The Extension is designed to comply with LinkedIn's User Agreement, in particular Section 8.2:
The Extension is not directed to children under 16 and we do not knowingly collect data from children.
We will update the "Last updated" date at the top of this section whenever this addendum changes. Material changes will also be announced inside the Extension's side panel on next launch.
We are available for any question. For any clarification regarding this privacy policy, for reporting information security incidents, or for submitting formal requests regarding the exercise of your legal rights (including requests to view, correct, or completely delete your account from databases), please contact us or the company's Data Protection Officer using the following contact details:
*** (End of Privacy Policy Document) ***