Legal & consumer information
Privacy Notice
Last updated: 17 August 2026. This notice explains how personal data may be processed when you use AI Career OS.
1. Controller
Data controller: Tayyebialashti Yaser e.v., trading as AI Career OS. Registered address: 1143 Budapest, Gizella út 35, Hungary. EVNY registration number: 58642889. Hungarian tax number: 48332376-1-42. Privacy contact: career-legal@rythm-os.com.
2. Data we may process
- Account and identity data, such as name, email address, authentication identifiers and account settings.
- Career-profile and product-use data, including selected careers, progress, projects, preferences and saved activity.
- Transaction and billing metadata when paid services are activated. Full payment-card details should be handled by the payment provider rather than stored by AI Career OS.
- Support, complaint and withdrawal-request communications.
- Security and technical data such as IP address, device/browser information, logs and fraud-prevention signals.
- Optional analytics data only where the required consent has been given.
3. Purposes and legal bases
- Contract: create accounts, provide the service, preserve progress, process purchases and provide customer support.
- Legal obligation: accounting, tax, consumer-rights, complaint-handling and other statutory recordkeeping.
- Legitimate interests: service security, abuse prevention, reliability and limited operational analytics where permitted and balanced against user rights.
- Consent: non-essential cookies/analytics and any marketing activity that legally requires consent. Consent may be withdrawn without affecting prior lawful processing.
4. Processors and recipients
Personal data may be processed by service providers required to operate the platform, such as hosting/infrastructure providers, authentication and database providers, email providers, payment processors once enabled, analytics providers where consented to, and AI/service providers where a feature requires them. Access should be limited to what is necessary for the relevant service.
5. International transfers
Where personal data is transferred outside the EEA, the transfer must rely on a valid legal mechanism such as an adequacy decision, Standard Contractual Clauses, or another mechanism permitted by applicable data-protection law, together with supplementary safeguards where required.
6. Retention
Data is retained only for as long as necessary for the purpose for which it was collected, including the lifetime of an account, applicable limitation periods, security needs, and statutory tax/accounting or consumer-protection retention duties. Retention periods should be documented internally and reviewed when paid sales are activated.
7. Your rights
Depending on the circumstances, you may have rights of access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. Requests can be sent to career-legal@rythm-os.com. Identity verification may be requested where reasonably necessary to protect account data.
8. Supervisory authority
You may lodge a complaint with the Hungarian supervisory authority: Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH), 1055 Budapest, Falk Miksa utca 9-11; postal address 1363 Budapest, Pf. 9; email ugyfelszolgalat@naih.hu; telephone +36 1 391 1400.
9. Automated processing and AI
AI Career OS may use automation to generate recommendations, summaries or career guidance. Unless explicitly stated otherwise for a specific feature, the service is not intended to make solely automated decisions producing legal or similarly significant effects about a user.
10. Children
The paid consumer service is not intended to be marketed to children without an appropriate age and consent framework. Before intentionally offering services to minors, age-assurance, parental-consent and child-privacy requirements must be separately implemented.
11. Security and breaches
Reasonable technical and organisational safeguards are used to protect personal data. No internet service can guarantee absolute security. Personal-data breaches are assessed and, where required, reported to the competent authority and affected individuals within the deadlines set by applicable law.