Privacy

The short version. kojiex turns a guided conversation into a CV, interview stories, and coaching. To do that, we store what you tell us, in Sydney, in your own account, and we send parts of it to an AI provider to write the drafts. Every generated line traces back to something you said.

If an organisation paid for your access, it cannot see what you wrote and is not told whether or how you used the product. It holds its own record of what it assigned to you. Nothing else.

Your account is yours. You can export everything at any time, and delete your account whenever you want. Deleting it removes your career content, your name and your email address. One small record survives, with no name, no email address and none of your content in it: what you agreed to, what you paid for, and what we delivered. It is described in full under How long we keep things.

Who we are

kojiex is made by kojiex Limited, the data controller for the personal information described here. kojiex Limited took the service over from Neonpale Limited, and holds your information on the same promises.

kojiex Limited · 132 Pupu Valley Road · Tākaka 7183 · New Zealand

NZ Company Number 9449403 · NZBN 9429053866110

Where we operate

kojiex is offered in Aotearoa New Zealand. The Privacy Act 2020 applies, and the New Zealand Information Privacy Principles govern how we handle your information. The service operates under the laws of New Zealand and disputes are resolved under NZ jurisdiction.

We do not represent compliance with the EU or UK GDPR, or with other regional regimes.

What we collect

Your account. Your email address, your name, the interviewer voice you choose, your acceptance of the terms and its date, and, if an organisation invited you, which organisation you belong to.

If an organisation invited you, your name and email came from them. The organisation gave us those details so we could set up your access, and setting up your access is all we use them for. The invitation email says so at the time, names us and our address, and offers to have the set-up account deleted without signing in, in case you would rather not have it. Your rights of access and correction are under Your rights below.

Your career content. The roles, education, qualifications, training, voluntary work, and the software and systems you have used, whether you type them in or we read them from a CV you upload; everything you say in the guided interviews; and everything produced with you: your CVs, interview stories, cover letters, coaching, rehearsal answers, panel questions, and LinkedIn wording. If you upload an existing CV, we keep the extracted text. If you book a session with our consultant, we hold the booking and any note you send with it.

We never take a referee's details from a CV you upload. When we read an uploaded CV we skip the referees on it. A referee is another living person, and their details are recorded only when you type them in yourself and confirm you have told them.

The contact details you put on a document. Separately from the address you sign in with, we hold the phone number, the LinkedIn address and the email address you want an employer to reply to. You type these, they go on your CV and your letters, and you can change or clear them whenever you like.

Other people, when you name them. Two places let you record somebody who is not you. If you add a referee, we hold the name and the description you type, and that is another person's information, given to us by you. If you address a cover letter to a named person, we hold that name with the letter, and it goes to the model that writes the letter so the greeting is right. We never contact a referee, and we never contact the person a letter is addressed to. Telling them their details are recorded here is yours to do, and the terms ask you to. A referee's name stays off your CV unless you turn it on.

Job ads you paste in. To write a cover letter or rehearse for a real interview, you give us the job ad. We read it once, extract what the job is and what it asks for, and discard the text, including any names in it. Paste only publicly advertised ads.

What to leave out. Tell your stories in your own words, and leave out anything you could not share outside your workplace: classified material, security details, commercially sensitive information. What you write here is stored and sent to the AI processors named below, and that is the wrong place for material your workplace protects. Your CV never needs it. What you did, and the difference it made, is yours to tell.

Usage records. An audit trail of account actions: signing in, accepting terms, starting a session, a product being used, an administrator granting access. Actions and metadata only, never career content.

Technical records. Anonymous product telemetry (which step, whether it succeeded, how long it took) and a record of each AI call made for you (stage, model, token counts, duration). Counts only, never a word of what you wrote. Your IP address is hashed with a secret salt before it is stored, and never stored raw.

When something goes wrong. If a step you asked for cannot be completed, we record which step it was, when, and the kind of failure. That is so we can tell a fault on our side from a change of mind on yours, and so you are not the one who has to prove it. We do not keep the text you were working on, or the error's own wording, in that record. It is deleted with your account.

Where your data lives

Your account and all career content are stored in Supabase (Postgres) in the Sydney (ap-southeast-2) region. Access is enforced at the database level: row-level security means your rows are readable only by you. There are no public pages. We never publish a CV to the open web or allow one to be indexed by a search engine.

Your finished PDF is stored in the same Sydney database, tied to the exact document it was made from: editing your CV replaces the old file. It is reachable only through your own account. A letter's PDF is deleted when you delete that letter. A CV's PDF belongs to the interview run that produced it and remains with that run until you delete your account. Deleting your account removes your career content, your name and your email address.

If an organisation invited you

If an organisation bought your access, that relationship is deliberately narrow.

What the organisation's administrator holds. Its own record of you: the name, email, job title and team its administrator typed when assigning your product, never your sign-in address. Which product it assigned and how many. Whether that record has been auto-removed, and when. Your role in its organisation. Plus, about itself: what it bought, what it assigned, and its purchase history.

That is the complete list.

What we do not tell them. Anything about your use of kojiex. Not whether you started, not how far you got, not when you were last here. Nothing you write or say: not your interview answers, not your stories, not your coaching, not your CV, not your cover letters, not your LinkedIn material.

Not on a screen, not in an export, not in a report, not in an email, not in answer to a question, and not by implication from anything else they can see. This is checked automatically on every change we ship, and a check that fails stops the release.

They are never given an identifier for you. Every row on an organisation's records is addressed by an identifier that exists only inside that organisation's own records and means nothing anywhere else. The query that builds their view does not retrieve your account identifier at all.

You can hold products from more than one organisation at once, on one account. Each holds an unrelated identifier, so neither can tell that the other exists, or that you are the same person.

Your identity is yours. If you change your account name or your sign-in email, the organisation is not told and its records do not change.

An assigned product is a one-way gift. Once a product is assigned to you it is yours, and the organisation cannot take it back, move it to somebody else, or have it refunded. That is deliberate, and it is a privacy decision as much as a commercial one: working out whether to refund it would mean telling them whether you had used it, and there is no version of that we are willing to do. Products they bought but never assigned to anyone can be returned to them, because no person is attached.

Your account outlives the arrangement. If you leave the organisation, your account, your products and everything in them remain yours; the organisation's link to you ends. Use a personal email address rather than a work one. And when you can, use your own device: everything on this page is about our side, and it cannot cover a work laptop that carries monitoring your employer installed. On equipment like that, what is on the screen is as visible as the equipment makes it, here and everywhere else.

Artificial intelligence

kojiex uses AI to turn what you said into written drafts. Your words are sent to a provider outside New Zealand.

What is sent. When you upload a CV, your browser extracts the text; the raw file never leaves your device. During and after the interview, the text of what you wrote or said, plus the roles and capabilities you selected, is sent so the interviewer can ask its next question and the writer can draft your CV entries, stories, and coaching.

Who processes it. Anthropic PBC (United States), using the Claude models. Under Anthropic's commercial API terms, your content is never used to train AI models. Anthropic retains what is sent and generated for 30 days as part of its safety monitoring, then deletes it. If their automated safety systems flag content, Anthropic may keep it longer and their staff may review it, with all such access logged. Their retention policy: https://privacy.claude.com/en/articles/7996866-how-long-do-you-store-my-organization-s-data

Your words are sent over an encrypted connection and are never sold or shared with anyone else. As Anthropic operates outside New Zealand, it may not be required to protect your information to the same standards as the Privacy Act; kojiex Limited remains responsible for it under that Act.

The grounding rule. Every generated line must trace back to something you said. The system is instructed never to invent numbers, dates, team sizes, employers, or job titles. This rule ships locked and cannot be turned off, by you or by us. You review everything before it is final, and the documents you download and send are yours to edit, every word.

A human is always in the loop. kojiex drafts. You decide. Nothing is submitted anywhere on your behalf.

Voice

Hearing the interviewer. With voice on, the text of each question is sent to ElevenLabs to be turned into audio. A question can quote or refer to what you just said, so treat this as your words leaving the country too. Turn the voice off in Account and nothing is sent.

Speaking your answers. If you dictate, your audio streams from your browser directly to ElevenLabs (United States) and comes back as text. It is transcription only: no voiceprint, no analysis of how you sound. The audio is not retained (we connect with logging disabled) and never passes through our servers. A "Recording" indicator shows whenever the microphone is live. Typing works everywhere instead.

Every voice request is sent with the provider's logging switched off, so ElevenLabs does not keep the audio or the transcript once the text has been returned. Our account is opted out of ElevenLabs using content to train its models. Their data-processing terms: https://elevenlabs.io/dpa

Both directions of voice, and the drafting itself, run only after you have given the AI processing consent (asked at onboarding, or the first time you start a product). You can withdraw it at any time in Account: the features stop; your account and everything in it stay.

Making your PDF

The finished document is rendered by Cloudflare's Browser Rendering service. Your CV content passes through Cloudflare's network to produce the file; nothing is kept on Cloudflare. The rendered file is stored in the same Sydney database as everything else of yours, is rebuilt after any edit, is keyed to the exact version it was made from, and is reachable only by your own account.

Email

Invitations, sign-in links, and notifications are sent through Resend, which handles the email address and the content of the message.

We email you whenever you receive something or your standing changes: a product added to your account, whoever added it, and gaining or losing organisation-administrator rights.

Payments

kojiex does not currently take card payments. Purchases are arranged directly and invoiced. We hold no card or bank details. When card payment is introduced, it will be handled by Stripe, card data will go directly to them, and this policy will be updated before that happens.

How long we keep things

• Your account and career content: for as long as your account exists. You can delete it at any moment. Nothing in it expires: not your unstarted products, not an unfinished interview, not a finished CV.
• Dormant accounts: if your account is untouched for about five years, we email a reminder, a second one a month later, and a month after that we permanently delete the account and everything in it. Signing in once resets this.
• The organisation's record of you: the name, email, job title and team it typed are erased automatically 90 days after the assignment by default. The organisation can set a different period or turn removal off, and its setting is shown on its team page. What remains after that erasure is the organisation's own tally, that a given product was assigned, with nobody attached to it, so it can reconcile what it handed out. This record is separate from your account: erasing it never touches your content or your access. The organisation's purchase history carries no names.
• After you delete your account: we keep one record, and it contains no name, no email address, and none of your CV or interview content. It holds: which versions of our terms and of our AI-processing consent you had accepted and on what dates, and which version of the terms was in force for each payment; when you first signed in; the payments you made, with what they bought, their amounts, dates, invoice or receipt numbers, and whether each one succeeded, failed or was refunded; the times at which the work we produced was started and delivered, and which payment it came from; if you ever disputed a payment with your bank, our record of that dispute: its reference, what it was about, for how much, when our answer was due, and how it ended; and internal reference codes that let us match those things to each other, including a one-way code made from your account. We keep it for two reasons: New Zealand tax and company law require a business to keep records of what it sold for seven years, and we may need it to answer a payment dispute or a card chargeback. We keep it for seven years, then delete it. Because it holds no name or email address, we cannot look you up in it. If you want to know what it says about you, send us the invoice or receipt number from your own records and we will find it.
• Hashed IP addresses: unlinked after 90 days.
• Anonymous telemetry: deleted after 365 days.
• Your audit trail: retained while your account exists, as the evidence of consent and of what you were given.
• Our cost records (which AI model ran, how many tokens, what it cost): kept as a financial record. On account deletion they are detached from you: what remains says a call on a date cost an amount, and nothing about who made it or what it was about.

If you delete your account, all of it goes.

Who can see your content inside kojiex

Nobody. kojiex Limited's administrators can see your account so they can run and support the service: your name and email, which product you hold, whether it has been used, and a log of actions like signing in. They cannot open your CV, your cover letters, your stories, your coaching, or anything you said in an interview. For every table holding that content, the database policies themselves shut administrators out, including the progress record of a session, which carries a few of your answers.

If something looks wrong with your CV, we cannot pull it up. Send it to us and a person will look at what you send.

We never use your content to improve kojiex. There is no setting for this, because the answer is always no.

Your rights

Under the Privacy Act 2020 you may:

Access your information. It is all visible in the app, and you can download it as a file from Account, "Download my data".

Correct it. Every field of your repository, your CV, and your profile is editable.

Delete it. Account, "Delete my account" permanently erases your account and everything attached to it, including anything you have not started. This cannot be undone. We tell you what you are about to lose before you confirm. If the erasure cannot be completed in full it stops rather than reporting success. Backups may retain a copy for a short period before they expire.

Withdraw consent to the optional voice features at any time. There is nothing to withdraw for product improvement: we never use your content that way.

If you administer an organisation and are its only administrator, we will ask you to hand that role to a colleague before you delete your account, so your colleagues keep access to their own work. You can decline. We will never refuse to delete your account.

For any privacy question, write to privacy@kojiex.com. If you are not satisfied with how we have handled your information, you may complain to the New Zealand Office of the Privacy Commissioner: https://privacy.org.nz

Who processes your information

Several of these operate outside New Zealand and may not be subject to protections equivalent to the Privacy Act. kojiex Limited remains accountable for your information under that Act regardless. Your information travels over encrypted connections, is never sold, and is never shared for advertising.

If you write to us

Feedback sent from inside the app, or through the website contact form, is emailed to our team through Resend so a person can reply.

What we keep on your device

Your browser stores your sign-in, your voice preference, your shopping cart, which introductions and notices you have already seen, and, if you followed an invitation link, the invitation code itself until you have signed in and the product you received is added. Nothing follows you around other websites, and there are no advertising cookies.

Last updated 27 August 2026 · We will tell you in the app before any material change