General
This is a privacy policy for users of Rodeo (“Rodeo”), a personal career agent built and operated by Lightning Riders Ltd (‘Lightning Riders/We/Us/Our’), a company registered in England and Wales under company number 13514853, with its registered office at 1 Lyric Square, London W6 0NB. This policy provides users (‘User/You/Your’) of Rodeo with information about who we are, how we process your personal data and for what purposes. It also explains your rights in relation to your personal data. Rodeo is a personal career agent that helps you understand your skills and experience, build a career profile, find relevant job opportunities, and prepare and submit applications. To do this, Rodeo lets you upload your CV, take part in a voice-based onboarding conversation with our AI agent, and receive job matches and application support. Lightning Riders is the controller of the personal data processed by Rodeo and we are responsible for overseeing this policy and any queries which arise from it. We respect your privacy and take the protection of your personal data very seriously. If you have any questions about this policy, or wish to exercise your data protection rights, please contact hello@gorodeo.app. You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), which is the supervisory authority in the UK for data protection issues. We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance. It is important that the data we hold about you is accurate and current. Please keep us informed if your personal data changes during your use of Rodeo. By creating an account and using Rodeo, the personal data described below will be processed by us.Personal data we collect
Personal data means any information relating to an identified or identifiable living individual. We collect, use, and store data about you which we have grouped together as follows: Identity data — including your name and date of birth. Contact data — including your email address and telephone number. Technical data — including your IP address, login data, device details, browser type and version, time zone setting and location, operating system and platform, and other technology on the device you use to access Rodeo. Profile data — including your username and the details that make up your career profile. CV and career-history data — the content of any CV you upload and any career, education, qualification, and work-history information you provide. CVs frequently contain additional information, including details about other people (for example, referees or former colleagues) and information that may be sensitive. Please see Special category data below. Voice data — audio recordings and/or transcripts of your onboarding conversation with our AI voice agent, and the information you provide during that conversation. Profiling and derived data — information we generate about you, including your mapped skills (using the ESCO skills framework), your career plan, and the match scores and recommendations we produce when comparing your profile to job opportunities. See How job matching works below. Usage data — information about how you interact with Rodeo, including features you use and actions you take. We collect most of this data directly from you when you create an account, upload a CV, take part in the voice onboarding, and use the app.How we use your data
We process your personal data for the following purposes:- to create and manage your account;
- to manage our relationship with you, including notifying you about changes to our terms or this policy and asking you for feedback;
- to parse and structure the CV you upload;
- to conduct the AI voice onboarding conversation and build your career profile from it;
- to map your experience to a recognised skills framework and generate your career plan;
- to match you to relevant job opportunities;
- to help you prepare job applications;
- to administer and protect our application (including troubleshooting, data analysis, testing, system maintenance, support, reporting, and hosting of data);
- to measure and understand the effectiveness of the service we provide and to improve our products and services;
- to send you marketing communications about Rodeo, where you have not opted out;
- to protect Lightning Riders and our users, and to comply with our legal obligations.
How job matching works (automated processing)
Rodeo uses automated processing, including profiling, to map your skills, generate your career plan, and produce job recommendations and match scores. This processing is carried out solely by automated means. These outputs are recommendations presented to you. You decide whether to act on them, including whether to apply for any role. Rodeo does not make decisions on behalf of employers, does not screen or rank you for employers, and does not make automated decisions that produce legal effects concerning you or similarly significantly affect you. The decision to apply for a job, and the decision whether to hire you, rest with you and with employers — not with Rodeo. You can contact us at hello@gorodeo.app if you have questions about how your recommendations are generated.Special category data
Some information you provide — particularly in your CV or during the voice conversation — may reveal special category data under Article 9 UK GDPR. For example, a CV might mention voluntary work for a religious organisation (revealing religious belief), a health condition or a workplace adjustment (revealing health data), or a role held at a trade union (revealing trade union membership); you might also mention something similar in conversation with the voice agent. We do not ask for this information and we ask that you do not provide it unless you choose to. Where it is included in your CV or conversation, we process it only as part of providing the service to you, and we rely on your explicit consent, which you give when you choose to upload your CV / proceed with onboarding. You can withdraw that consent at any time and ask us to delete the relevant data by contacting us.Legal bases for processing data
We rely on a number of legal bases to process data relating to you. We process personal data:- To perform our contract with you under our Terms of Use — for example, to create your account, parse your CV, run the voice onboarding, generate your profile and career plan, and provide job matches and application support.
- For our legitimate interests (or those of third parties), where your interests and fundamental rights do not override those interests — for example, to understand how Rodeo is used, to make improvements, to keep our service secure, and to send you marketing communications about Rodeo (which you can opt out of at any time).
- On the basis of your consent — in particular, your explicit consent to process any special category data contained in your CV or onboarding conversation (see Special category data). Where we rely on consent, you have the right to withdraw it at any time by contacting us.
- To comply with a legal or regulatory obligation.
Recipients of your data
We do not sell your personal data and we do not share it with employers. We share personal data with the categories of recipient below:- AI processing providers — to deliver core features of the service. Because these handle the content of your CV and voice conversation, we name them: Google (Gemini), which parses and analyses the content of uploaded CVs, and ElevenLabs, which provides the AI voice onboarding conversation (processing voice audio and transcripts).
- Hosting and storage providers — who host the Rodeo application and store your data.
- Product monitoring and analytics providers — who help us keep the service running, diagnose errors, and understand how Rodeo is used.
- Communications providers — who send our account and marketing emails on our behalf.
- Professional advisers — including our legal advisers.
Data transfers
Some of our service providers are based, or process data, outside the UK — including in the United States (for example, our AI processing providers Google and ElevenLabs, and certain of our hosting, monitoring, and communications providers). Some of these countries do not have the same standards of data protection law as the UK. Where required by UK data protection law, we implement appropriate safeguards (such as the UK International Data Transfer Addendum to the EU Standard Contractual Clauses) to protect your personal data. Please contact us if you would like more information about these safeguards.Cookies and similar technologies
Rodeo uses cookies and similar technologies to operate the service, remember your preferences, and understand how Rodeo is used. Some are strictly necessary for the service to function; others, such as analytics, are only set with your consent, which you can give or withdraw at any time through our cookie banner or your browser settings.Data retention
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including to satisfy any legal, accounting, or reporting requirements.- Account, profile, CV, and career-history data — retained for as long as your account is active. If your account is inactive for 24 months, we will contact you and then delete it if you do not respond. When your account is closed, we delete this data within 30 days.
- Voice data — we retain both the audio recording and the transcript of your onboarding conversation for up to 12 months, after which they are deleted. If you close your account before then, we delete them within 30 days of account closure. The structured career profile we derive from your conversation is retained separately for as long as your account is active.
- Usage and product analytics data — retained for up to 14 months.
- Diagnostic and security logs — retained for up to 90 days.
Your legal rights
Under data protection law you have rights in relation to your personal data:- Request access to your personal data (a “data subject access request”).
- Request correction of incomplete or inaccurate data we hold about you.
- Request erasure of your personal data where there is no good reason for us to continue processing it. We may not always be able to comply for specific legal reasons, which we will notify you of where applicable.
- Object to processing where we rely on a legitimate interest and something about your situation makes you want to object, and at any time where we process your data for direct marketing.
- Request restriction of processing of your personal data in certain circumstances.
- Request transfer of your personal data to you or a third party in a structured, commonly used, machine-readable format, where this applies.
- Withdraw consent at any time where we rely on consent. This will not affect the lawfulness of processing before withdrawal.
- Rights in relation to profiling — you can ask us how your recommendations are generated. As explained in How job matching works, Rodeo does not make automated decisions that produce legal or similarly significant effects on you, so the Article 22 right to contest such a decision does not arise; but you can always raise questions or concerns with us.