Skip to main content
acelro

Privacy Policy

Last updated: May 1, 2026

1. Information We Collect

When you use Acelro, we collect the following types of information:

  • Account information: your email address and authentication credentials.
  • Career data: CV uploads, career goals, current and target job titles, and skills you provide.
  • Learning activity: quiz responses, lesson progress, project submissions, and coach chat messages.
  • Usage analytics: pages visited, features used, and interaction patterns to improve the product.

2. How We Use Your Data

We use your data to:

  • Generate personalized skill gap analyses and career roadmaps.
  • Provide tailored learning recommendations and content.
  • Power coaching conversations and project reviews.
  • Improve the accuracy and relevance of our analysis over time.

Your career data is processed using AI analysis to deliver personalized insights. We do not sell your data to third parties or use it for advertising.

3. Third-Party Services

We use trusted third-party services to operate Acelro:

  • Database and authentication (Supabase): your data is stored in a managed PostgreSQL database hosted in the EU, with encryption at rest. Authentication is handled by the same provider.
  • AI analysis: your career data is sent to AI providers for personalized analysis. Data is transmitted securely via encrypted connections and is not used to train third-party models. See section 8 below for the providers we use and how AI shapes the product.
  • Analytics (PostHog): we use an EU-hosted analytics service to understand how users interact with the product. Analytics only activate after you accept cookies.
  • Payment processing (Stripe): subscription billing is handled by Stripe. We do not store your payment card details.
  • Infrastructure: we use industry-standard cloud providers for hosting, email delivery, error monitoring, and speech processing. All data is transmitted over encrypted connections.

The full list of subprocessors, including each provider's region and the legal mechanism we use for any transfer outside the UK or EEA, is maintained as a formal record under change control. Email privacy@acelro.com for a copy. We notify all account holders by email at least 14 days before adding or replacing a subprocessor.

4. Cookies & Analytics

Acelro uses cookies for authentication and analytics. Our analytics provider sets cookies to track usage patterns such as pages visited, features used, and session duration. These cookies do not track you across other websites.

You can opt out of analytics tracking by enabling "Do Not Track" in your browser settings or by contacting us at privacy@acelro.com.

5. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law.

Anonymized, aggregated data (such as overall usage statistics) may be retained indefinitely to improve the product.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access: request a copy of the data we hold about you.
  • Correction: update or correct inaccurate data.
  • Deletion: request that we delete your data.
  • Export: receive your data in a portable format.
  • Objection: object to certain types of processing.

To exercise any of these rights, contact us at privacy@acelro.com. We will respond within 30 days.

7. How to Make a Complaint

If you believe we've handled your personal data incorrectly, you can make a formal complaint. Use our complaint form at acelro.com/privacy/complaint. We'll acknowledge receipt immediately and respond substantively within 30 days. If the case is complex and we need longer, we'll write to you with the reason and a new timeline, up to a further two months as permitted by UK GDPR.

You also have the right to complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint. The ICO usually expects you to contact us first.

8. AI Systems and Automated Decisions

Acelro is an AI-first product. The value proposition, marketing pages, onboarding flow, and global product chrome all surface that you're using AI. Per EU AI Act Art. 50(1), this means the "AI involvement is obvious" exemption applies to most surfaces. We still anchor compliance on persistent disclosures: the onboarding education step, the global "AI: how we use it" chip, the coach chat badge, and a visible mark on AI-generated images. We'll re-evaluate this position when the EU's final Code of Practice publishes (June 2026).

What AI does and doesn't decide.AI generates suggestions: a roadmap, a gap list, lesson content, a coach reply, a project review. It doesn't make any decision that legally affects you. We don't share Acelro's outputs with employers, recruiters, or institutions. You can edit, ignore, or reject any AI output.

The providers we use.Acelro doesn't train its own AI models. We use models from Google, Anthropic, OpenAI, and Perplexity. For voice lessons we use transcription and text-to-speech services. The set of providers stays the same unless we say otherwise here.

Voice processing in voice-interactive features. Acelro has voice-interactive features (live lessons today; we may add others such as mock interview practice or Professor voice chat in future). The first time you use any of them, we ask for your consent. Your microphone audio is sent to a transcription service to convert it into text, and that text is sent to an AI model to generate the next part of the session. We don't retain the audio. We keep the transcript so you can resume the session later. One agreement covers every voice-interactive feature; you can withdraw consent at any time by contacting us at privacy@acelro.com, and we'll stop voice processing across all of them. If we materially change what voice processing involves, we'll re-prompt every existing user before the next voice session.

Your data and AI training.We don't fine-tune or train any model on your data. We send your inputs to model APIs to generate a response, and the providers' standard terms exclude using API inputs to train their models. If a provider changes that policy, we'll notify users and reconsider the integration.

AI Act and your rights. Under the EU AI Act, you have rights that go beyond GDPR: be told an AI system is involved (this notice plus the in-product disclosures), get a plain-English explanation of how a specific output was generated (contact us), report a problem with any AI output and ask us to re-check it (every output has a report link or you can email us), and request human review of any AI output that you believe is wrong. Email founder@acelro.com. We treat all users the same regardless of jurisdiction.

Limitations.AI gets things wrong. It can be confidently wrong. Roadmaps may miss certifications specific to your country. Coach replies may misremember details. Generated images and quizzes may include errors. Verify anything you'll act on professionally.

Subprocessors.The full list of providers that process personal data on our behalf, including each provider's region and the legal mechanism used for any transfer outside the UK or EEA, is maintained as a formal record under change control. Email privacy@acelro.com for a copy.

How we record processing. We keep Records of Processing Activities (RoPA) and a Data Protection Impact Assessment (DPIA) for the AI parts of the product. Both are reviewed at least annually and on every material change. Email privacy@acelro.com for a copy.

9. Data Security

We protect your data with industry-standard measures including encryption in transit (TLS), encryption at rest, and secure access controls. While no system is 100% secure, we take reasonable steps to safeguard your information.

10. Children's Privacy

Acelro is not directed at children under the age of 16. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this policy from time to time. If we make significant changes, we will notify you by email or through a notice on the platform. Your continued use of Acelro after changes are posted constitutes acceptance of the updated policy.

12. Contact

If you have questions about this privacy policy or your data, contact us at privacy@acelro.com.