Privacy Policy.

Who We Are

Pearable is operated by CherryWave LLC, a limited liability company operating the website and platform at pearable.me and all of its subdomains.

Pearable provides agentic artificial intelligence services that automatically apply for jobs on behalf of users, using personal data and resumes provided by the user. For the purposes of applicable data protection law, CherryWave LLC is the data controller in respect of personal data collected through the Services.

For privacy and legal matters: legal@pearable.me

Scope of This Policy

This Privacy Policy applies to all personal data collected, processed, and stored by Pearable in connection with your use of our website, platform, and Services available at pearable.me and any of its subdomains (collectively, the "Services").

By creating an account or using our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, you should not use the Services.

Data We Collect & Why

We collect the following categories of personal data directly from you when you create an account and use our Services. We cannot provide our Services without most of this data. Fields noted as optional are not strictly required but may improve the relevance and quality of applications submitted on your behalf.

Legal Bases for Processing (GDPR)

For users in the European Economic Area (EEA) or the United Kingdom, we process your personal data on the following legal bases:

• Performance of a contract: The majority of processing is necessary to deliver the Services you have signed up for. Without this data, our AI cannot operate on your behalf.
• Legitimate interests: We analyze anonymized platform usage data (via Google Analytics) solely for internal platform improvement. Analytics cookies are used exclusively by Pearable — no analytics data is sold or shared for commercial purposes. This processing does not override your rights.
• Consent: We rely on consent for marketing communications only. You may withdraw consent at any time.
• Legal obligation: We may retain or disclose data where required by applicable law.

How We Use Your Data

We use personal data solely for the following purposes:

• To create and manage your Pearable account;
• To operate our agentic AI, including automatically identifying and applying to relevant job opportunities on your behalf;
• To generate tailored resumes and application materials using your profile and uploaded resume;
• To store your profile, documents, and AI-generated outputs securely for the duration of your account;
• To communicate with you about your account, activity, and service-related updates;
• To send marketing communications where you have given your explicit consent;
• To improve our platform using aggregated, anonymized usage analytics;
• To comply with applicable legal obligations.

We do not sell, rent, or trade your personal data to any third party. Your data is never used for any purpose other than those listed above.

AI Processing & Generated Outputs

A core part of our Services involves transmitting your personal data — including your resume and profile information — to third-party AI model providers in order to generate tailored job application materials ("AI Outputs"). These AI Outputs, which may include generated resumes and application responses, are stored within your account on our Google Cloud infrastructure.

By using Pearable, you grant us your explicit consent to process your data through third-party AI systems and to automatically submit application materials on your behalf, without requiring your individual review of each submission prior to it being sent.

While our systems are designed to represent you accurately based on the data you provide, AI-generated content may not always be perfectly accurate. We encourage you to keep your profile up to date, as the quality of AI Outputs depends on the accuracy and completeness of the information you supply to us.

AI Outputs are treated as personal data and are subject to the same retention, security, and deletion policies as all other personal data we hold about you.

Data Sharing & Third Parties

7.1 Who We Share Data With

Pearable does not sell your personal data. We share it only with the following categories of third parties, and only to the minimum extent necessary to deliver our Services:

• Third-party AI model providers: Your profile data and resume are transmitted to AI providers to generate application content. These providers act as data processors on our behalf.
• Google Cloud Platform: Used to host and store your profile, resume, and AI-generated outputs.
• Google Analytics: Used for internal, anonymized usage analysis. See Section 8.
• Payment processors: Used to securely process transactions. Payment processors do not receive your job-related personal data.

7.2 Data Outside Our Control

Once data is transmitted to a third-party provider, it is subject to their own privacy and security practices. While we select providers carefully and use contractual safeguards where possible, Pearable cannot guarantee the security of your data once it leaves our systems. We are not liable for any breach, loss, or misuse of data that occurs on third-party infrastructure.

7.3 No Other Sharing

We do not share your personal data with employers, recruiters, or any other parties beyond those listed above, except where required by law or where you have specifically authorized us to do so.

Google Analytics

We use Google Analytics to collect anonymized, aggregated data about how users interact with our platform — such as pages visited and features used. This information is used solely by Pearable for internal purposes, to understand usage patterns and improve our Services.

We do not use this data to identify you personally, and we do not sell or share it with any third party for advertising or commercial purposes. Analytics cookies are used exclusively for internal platform analysis.

You may opt out at any time by adjusting your browser's cookie settings or using the Google Analytics Opt-Out Browser Add-on available at tools.google.com/dlpage/gaoptout.

Marketing Communications

Pearable will only send you marketing or promotional communications if you have explicitly opted in to receive them. We will never send unsolicited marketing messages.

You may withdraw your marketing consent and opt out at any time by:

• Clicking the unsubscribe link in any marketing email; or
• Contacting us at hello@pearable.me.

We will never sell, share, or rent your email address to any third party for marketing or any other purpose.

Data Retention & Deletion

10.1 Active Accounts

We retain your personal data, including your profile, resume, and AI-generated outputs, for the full duration of your active account. All data is stored on Google Cloud Platform.

10.2 Account Deletion

When you delete your Pearable account, all personal data associated with it — including your profile, uploaded resume, and all AI-generated outputs — is permanently and irreversibly deleted from our systems. We do not retain any copies after deletion.

10.3 Inactive Accounts

Accounts that have shown no activity for a continuous period of 24 months (2 years) will be considered inactive. Pearable reserves the right to permanently delete inactive accounts and all associated data after this period. Where practicable, we will notify you at your registered email address before deletion.

10.4 Legal Exceptions

Notwithstanding the above, we may retain certain limited data for longer periods where required by law, to resolve disputes, or to enforce our Terms of Service.

Data Storage & Security

All personal data collected by Pearable is stored on Google Cloud Platform infrastructure. We implement industry-standard security measures, including:

• Encryption of data in transit (TLS) and at rest;
• Strict access controls limiting who within our organization can access personal data;
• Regular security monitoring and assessments;
• Adherence to current security best practices and protocols.

Despite these measures, no method of transmission or storage over the internet is completely secure. We cannot guarantee absolute security of your personal data. In the event of a data breach likely to result in a risk to your rights and freedoms, we will notify you and relevant regulatory authorities in accordance with applicable law.

International Data Transfers

Pearable is based in the United States. If you access our Services from the EEA, the UK, or any other jurisdiction with restrictions on international data transfers, your personal data will be transferred to, processed in, and stored in the United States and other countries.

Your data may also be transferred to, processed by, and stored by our third-party AI model providers and infrastructure partners in various countries. We take steps to ensure that such transfers are governed by appropriate safeguards, such as Standard Contractual Clauses (SCCs) approved by the European Commission or equivalent protections recognized under applicable law.

By using our Services, you acknowledge and consent to the transfer of your personal data to the United States and other countries for the purposes described in this Policy.

Your Rights — GDPR (EEA & UK Users)

If you are located in the EEA or the United Kingdom, you have the following rights under the GDPR and UK GDPR:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data, subject to certain legal exceptions.
• Right to restriction of processing: Request that we limit processing of your data in certain circumstances.
• Right to data portability: Receive your data in a structured, machine-readable format and transmit it to another controller.
• Right to object: Object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent: Withdraw consent at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint: Lodge a complaint with your local data protection authority if you believe we have not complied with applicable law.

To exercise any of these rights, contact us at legal@pearable.me. We will respond within 30 days. We may verify your identity before processing your request.

Your Rights — CCPA (California Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), grants you the following rights:

• Right to know: Request disclosure of the categories and specific pieces of personal information we have collected, the sources, purposes, and third parties with whom it is shared.
• Right to delete: Request deletion of your personal information, subject to certain exceptions.
• Right to correct: Request correction of inaccurate personal information.
• Right to opt out of sale or sharing: Pearable does not sell or share your personal information for cross-context behavioral advertising. No opt-out action is required.
• Right to limit use of sensitive personal information: Sensitive personal information (such as nationality or visa status) is used only to provide the Services.
• Right to non-discrimination: We will not discriminate against you for exercising any CCPA rights.

To exercise your CCPA rights, contact us at legal@pearable.me. We will respond within 45 days as required, with a possible 45-day extension where reasonably necessary.

Your Rights — Other Regions

Depending on where you are located, you may have additional rights under the laws of your country or region. Pearable respects and will seek to honor applicable privacy rights regardless of where you are based. To make any request relating to your personal data, please contact us at legal@pearable.me.

Children's Privacy

Our Services are not directed at individuals under the age of 18. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected data from a minor, please contact us immediately at legal@pearable.me and we will take prompt steps to delete such data.

Cookies

Pearable uses the following types of cookies:

• Session cookies (strictly necessary): Used to maintain your authenticated login session. These are essential for the platform to function and cannot be disabled.
• Analytics cookies (Google Analytics): Used to collect anonymized usage data for internal platform improvement. These cookies are used solely for internal purposes — no analytics data is sold or shared with third parties for advertising or commercial purposes.

We do not use advertising cookies, behavioral tracking cookies, or any cookies that follow you across unrelated third-party websites. You can manage cookie preferences through your browser settings. To opt out of Google Analytics specifically, you can use the Google Analytics Opt-Out Browser Add-on at tools.google.com/dlpage/gaoptout. Disabling session cookies may prevent you from logging in.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this Policy and, where practicable, notify you by email to your registered address.

Your continued use of the Services after any updated Policy takes effect constitutes your acceptance of the revised terms. We encourage you to review this page periodically.

Contact Us

For questions, concerns, or data requests relating to this Privacy Policy, please contact us. We aim to respond to all privacy-related inquiries within 90 days.