Hireo App Terms of Use

• Hireo Application (Application, System) – software made available by the Service Provider under the business name "Hireo App", accessible at https://hireoapp.com. The Application enables Users, among other things, to generate recruitment documents (e.g. CVs) using artificial intelligence based on the content supplied by the User.

• Service Provider – Dawid Nawrot conducting business under the name Hireo App Dawid Nawrot, business address: ul. Oliwkowa 4, 05-500 Józefosław, Poland, NIP: 8641662880, REGON: 292898760. The Service Provider renders electronic services in accordance with these Terms and operates the Application.

• User – a natural person who has full legal capacity and has reached 18 years of age at the latest when creating an Account and who uses the Application after the Account has been created. A User may also be a legal person or an organisational unit without legal personality – in such a case, the person creating the Account declares that they are authorised to represent that entity. The Application is dedicated to consumer (B2C) use.

• Account – the User's individual space in the Application created during Registration, secured with a login (e-mail address) and an authentication mechanism (a magic link sent to the e-mail address or OAuth login). The Account enables the User to use the Application's features after logging in.

• User Materials (Materials) – any content entered or uploaded by the User into the Application in order to use the Services. These include, in particular, recruitment-related documents and information such as the text or file of a CV and the content of a job advertisement or job description.

• Generated Result (Result) – the content of a generated document (e.g. an updated CV or another document) delivered to the User through the Application on the basis of the User Materials with the assistance of artificial intelligence algorithms.

• Credits – settlement units in the Application assigned to the User's Account that entitle the User to use the paid functionality of generating a Result. Spending one (1) Credit enables the User to generate one full Result in the Application. Credits are available in packages defined by the Service Provider.

• Payment Operator – an external payment services provider through which the User pays for the purchase of a Credit package. Within the Application, the Payment Operator is Stripe Payments Europe, Ltd., The One Building, 1 Grand Canal Street Lower, Dublin 2, Ireland (or another operator indicated in the Application).

• Terms – these Terms of the Hireo App Application, which set out the conditions and rules for the Services provided by the Service Provider to Users.

• Agreement – the agreement for the provision of electronic services consisting in giving the User access to the Application and its functionality, concluded between the Service Provider and the User for an indefinite period when the Account is successfully registered.

• Registration – a one-time process of creating an Account by the User in the Application, requiring the User to provide their e-mail address and accept these Terms (and the Privacy Policy).

• Privacy Policy – an informational document on how the Service Provider protects the User's personal data, constituting Appendix no. 2 to the Terms.

• GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation).

1. The Terms define the rules for using the Hireo App Application and the rights and obligations of the User and the Service Provider. Every User is required to read and accept the Terms before starting to use the Application. Accepting the Terms is a condition for creating an Account and using the Services provided by the Service Provider.

2. The Service Provider renders electronic services through the Application within the meaning of the Polish Act of 18 July 2002 on electronic services. The Terms are made available to Users free of charge via the Application's website in a form that allows them to be downloaded, stored and printed.

3. Contact with the Service Provider regarding the operation of the Application and the Services is possible via:

• the e-mail address support@hireoapp.com – for technical support and general User assistance,

• the e-mail address privacy@hireoapp.com – for matters relating to privacy and personal-data protection,

• correspondence sent to the Service Provider's business address specified in these Terms.

4. The technical requirements necessary to use the Application include: having a device with Internet access and a modern web browser that supports HTML5/JavaScript standards (e.g. Chrome, Firefox, Safari, Edge). Completing Registration and logging in requires an active e-mail address (to receive the login link) or a Google account (if the User uses Google OAuth). Enabling cookies and JavaScript in the browser is recommended to ensure full functionality of the Application. The User bears the cost of the Internet connection and data transmission needed to use the Application, in accordance with the tariff of their telecommunications provider.

5. The Service Provider endeavours to ensure that the Application operates correctly and is available to Users 24/7. However, the Service Provider reserves the right to technical downtime, in particular for maintenance, repair or upgrades of the Application. Where possible, the Service Provider will inform Users in advance about planned interruptions or difficulties in accessing the Services (e.g. via a message in the Application or on the website).

6. To the maximum extent permitted by law, the Service Provider is not liable for the Application being unavailable due to factors beyond its control, such as Internet failures, cyberattacks, force majeure, etc. In exceptional cases affecting the security or stability of the System, the Service Provider may temporarily stop or limit the Services without prior notice to Users.

7. All intellectual property rights to the Application (including copyrights to the software, source code, graphical interface, databases and content provided by the Service Provider) belong to the Service Provider or to third parties from whom the Service Provider has obtained relevant licences. The Service Provider grants the User a non-exclusive, non-transferable licence limited to the territory of the European Economic Area to use the Application solely within the scope and for the purposes set out in the Terms. The licence is granted for the duration of the Agreement. The User must not use the Application beyond the scope of the licence, in particular must not interfere with the source code, decompile, independently extract any data from the Application's databases or create copies of the Application (except for the copy necessary in the device's RAM to use the Service).

1. Application functionality. The Service Provider gives Users access to a SaaS (software as a service) Application that enables the automatic generation of recruitment content. In particular, the Application allows Users to:

• create and maintain a User Account that stores the history of the generated items and the balance of Credits held;

• enter their own Materials (such as a CV in text or file form and a job description or advertisement) via a form in the Application;

• use an artificial-intelligence tool that, based on the supplied Materials, generates new content – the Result (e.g. an updated CV tailored to the description of a specific position);

• download or copy the generated Result in the available formats (e.g. text, PDF or another format provided) – subject to the provisions about the test version (Trial) in point 7 below;

• change Account settings limited to the User's preferences (e.g. select the interface language) and view basic account information (e-mail address, current Credits, payment history);

• obtain information about the available Credit packages and their prices and then purchase a selected Credit package through the Stripe payment integration (detailed payment rules are set out in Chapter VI of the Terms).

2. Nature of the Service. The Services provided by the Service Provider are digital in nature and are delivered to the User electronically at the User's explicit request (each time the User enters Materials and initiates the generation of a Result). The Results are generated automatically using machine-learning (AI) algorithms. The Service Provider emphasises that the generation process takes place without the involvement of recruiters or career advisers – it is an AI-generated proposal based on the data provided by the User.

3. No manual verification. The Service Provider does not pre-verify or correct the Materials entered by the User nor the content generated automatically. The User is solely responsible for verifying the correctness, reliability and truthfulness of the Result (see Chapter VII). The Service Provider does not guarantee that the generated Result will fully meet the User's expectations, be error-free or perfectly tailored to the User's specific situation. The Results should be treated as suggestions and supporting materials that require critical assessment and possible modification by the User before being used in a recruitment process.

4. Conditions for using the generation feature. Access to the generation functionality may require the Account to hold a sufficient number of Credits. As a rule, each full generation of a single Result reduces the User's Credits balance by 1 (one) Credit. Detailed rules on purchasing and settling Credits are set out in Chapter VI of the Terms. Creating an Account and browsing the basic informational content in the Application (e.g. the price list, legal documents) is free of charge, whereas using the core Service (generating a Result based on the User's Materials) is provided for a fee in a prepaid model (through the purchase of Credits).

5. Technical limitations of the Service. The Application may impose certain technical limitations regarding the User Materials required to generate a Result. In particular:

• a CV file uploaded to the Application may not exceed 2 MB; when entering CV text directly into the text area, a minimum of 100 characters may be required to provide enough data for analysis;

• the job advertisement/description should contain at least 50 characters (when entering text or a link to a job ad) – shorter descriptions may be rejected by the system with a notice about insufficient data;

• the Application may support specific file formats for CVs (e.g. .PDF, .DOCX, .TXT); if an unsupported or corrupted file is uploaded, generating a Result may be impossible or the Result may be incomplete;

• using the Application may require entering data in specific form fields or in a specific order. The User must carefully complete the forms in line with the instructions within the Application (e.g. choosing the generation language, setting the AI creativity level, etc.).

6. Development and changes to the Service. The Service Provider reserves the right to expand, change or limit the scope of the Application's functionality at any time, in particular in connection with development work, AI updates, compliance with evolving legal requirements or improvements to security and quality. A change or extension of the Application's features that does not adversely affect the User's legal situation (e.g. introducing new optional tools, additional document formats or enhancements to existing functions) does not constitute an amendment to the Service Agreement and does not require the User to sign an annex to the Terms. The Service Provider will inform Users about significant changes affecting their rights or obligations in accordance with Chapter XI (Changes to the Terms).

7. Test version of the Service (Trial). The Service Provider may allow newly registered Users to use the generation feature once free of charge for testing purposes. Within such a one-time Trial the User may generate a Result based on the supplied Materials without having Credits, but the Result may be limited – for example, some parts of the text may be hidden or redacted, and the full version will only be made available after Credits are purchased (the Application clearly informs the User about this). Detailed rules for the test version:

• Only a new User who has not yet purchased any Credits on the Account may use the one-time Trial. The mechanism is intended to demonstrate how the Application works before a purchase is made;

• The Result generated in test mode will be marked in the System as "Trial" and may be presented in the Application in a limited form (e.g. only the beginning of paragraphs while the remainder is hidden). The User will receive a message encouraging the purchase of a Credit package to unlock the full Result;

• Once the User purchases a Credit package, 1 (one) Credit from that package will automatically be used to unlock the full version of the Result generated in the Trial. From then on the Result will be fully available on the User's Account (e.g. in the results tab) and the User will be able to download it in full;

• After the Trial is used (one test Result generated) the User will not be able to use the free generation again, even if they create another Account. Creating multiple Accounts by the same person in order to repeatedly use the Trial is prohibited and will be treated as a breach of the Terms;

• The Service Provider reserves the right to change or withdraw the Trial at any time (e.g. introduce another limit of attempts or entirely remove the free test). Such changes do not constitute an amendment to the Terms and may be introduced without prior notice for new Users (existing entitlements for a Trial that has already begun will be honoured).

1. Account Registration and conclusion of the Agreement. The Agreement for the provision of electronic services is concluded once the User successfully completes Registration. Registration requires: (a) providing the User's e-mail address in the registration form (or using the "Sign in with Google" option), (b) reading and accepting these Terms and the Privacy Policy, and (c) clicking the unique activation link (Magic Link) sent automatically to the provided e-mail address or successfully authenticating through an external provider (Google OAuth). Once the User logs in to the newly created Account for the first time, the User gains access to the System and the Agreement between the User and the Service Provider is deemed to have been concluded for an indefinite period.

2. No fee for creating an Account. Creating an Account and concluding the indefinite Agreement referred to above is free of charge. Merely having an Account does not oblige the User to purchase paid services (Credits) – the User may decide to stop using the System at any time by deleting the Account, in line with this Chapter.

3. Withdrawal from the Agreement by a consumer. A User acting as a consumer has the right to withdraw from the Agreement for using the Application (creating an Account) within 14 days of its conclusion without giving any reason. To meet the deadline, it is sufficient to send the Service Provider (before the 14 days elapse) an unequivocal notice of withdrawal – for example by e-mail to support@hireoapp.com or in writing to the Service Provider's correspondence address. The User may (but is not required to) use the withdrawal form that constitutes Appendix no. 1 to the Terms.

4. Right to withdraw from the purchase of digital content. Purchasing a Credit package constitutes a separate agreement for the supply of digital content (Credits) not stored on a tangible medium. The User hereby expressly requests and agrees that such an agreement be fully performed before the withdrawal period expires and acknowledges that, accordingly, they lose the right to withdraw from the Credit purchase once the Credits are delivered to the Account (pursuant to Article 38 point 13 of the Polish Act on Consumer Rights). This means that if the User purchases a Credit package and the Credits are added to their Account (delivered) – the User no longer has the 14-day right to withdraw from that transaction. However, until the Credits have been delivered (assigned) to the Account, the User may withdraw from the purchase under the general provisions (e.g. by cancelling the payment).

5. Termination of the Agreement by the User (resignation from the Service). The User has the right to terminate the Agreement for the use of the Application at any time with immediate effect, without giving any reason. Termination may take place by deleting the Account within the Application settings (if such functionality is available) or by sending a relevant statement (request to delete the Account) to the Service Provider at support@hireoapp.com. The Account will be deleted immediately after receipt of the termination notice (or on the date indicated by the User). Terminating the Agreement at the User's request does not entitle the User to a refund of unused funds or Credits, subject to the cases described in point 4 above (withdrawal within 14 days provided that the Credit package has not been fully performed with the User's consent).

6. Termination of the Agreement by the Service Provider. The Service Provider may terminate the Agreement in the following cases:

• Ordinary termination (without cause) – with at least 30 days' notice if providing the Services becomes permanently impossible or excessively difficult for technical or organisational reasons (e.g. discontinuation of the product, shutting down the Service Provider's business) or if the Service Provider decides to stop providing the Services to all Users. Termination is made in documentary form by sending notice to the e-mail address linked to the Account. After the notice period the Account will be deleted. Where possible, the Service Provider will refund the User for unused funds or Credits (e.g. proportionally to the remaining Credits), unless the User has breached the Terms.

• Immediate termination – in the event of a gross or repeated breach of the Terms or of the law by the User, especially those described in Chapter V points 5–6 (e.g. providing false data, using the Application unlawfully, attempting to circumvent safeguards, submitting Prohibited Content). Termination occurs via e-mail notice to the address assigned to the Account (or by blocking access to the Account while stating the reason). In such a case the Account is blocked and deleted immediately, and unused Credits are forfeited without any right to compensation or refund.

7. Effects of termination. When the Agreement is terminated or expires (regardless of the reason), the User's access to the Application is blocked and the Account is deleted. The Service Provider stops processing the User's data except for information that must be retained for tax, accounting or claims-handling purposes (as described in the Privacy Policy). Termination does not affect rights acquired prior to termination, including the validity of payments made by the User and the Service Provider's entitlement to remuneration for Services already provided (e.g. consumed Credits).

1. Data provided during Registration. During Registration the User must provide the data necessary to create an Account, as marked in the form. In Hireo App the only mandatory data is the User's e-mail address (or authentication via Google, which shares with the Service Provider the e-mail address linked to the User's Google account). The Service Provider does not require the User to provide their name, surname, residential address or other personal data during Registration – any additional information is supplied voluntarily within the Materials or in correspondence with the Service Provider.

2. Accuracy and truthfulness of data. The User declares that all data provided during Registration and while using the Application is true, current and directly relates to the User (or the entity the User represents). The User must keep their data up to date and inform the Service Provider without undue delay about any changes (e.g. by updating the e-mail address if it changes). Supplying false or outdated data may result in limited access to the Application or the inability to use certain Services.

3. Security of login data. The User is obliged to keep their login data confidential (e-mail, magic-link messages, OAuth tokens) and must not share it with third parties. If the User suspects that an unauthorised person has gained access to the Account, the User should immediately inform the Service Provider and follow the instructions provided (e.g. request that the Account be blocked or the e-mail address be changed). The Service Provider is not liable for any damage resulting from the User's failure to secure access to the Account or from sharing access with unauthorised persons.

4. Using the Application in accordance with the law. The User must use the Application in a lawful manner, in accordance with the Terms, good customs and the intended purpose of the Application. In particular, the User must not:

• submit Materials that infringe the rights of third parties, including intellectual property rights, privacy rights or trade secrets, or that contain data obtained unlawfully;

• submit Materials of an unlawful, offensive, discriminatory, pornographic, hateful or otherwise inappropriate nature;

• use the Application to send spam, chain letters or unsolicited commercial communications;

• attempt to bypass technical safeguards, interfere with the Application's operation, inject malicious code, or engage in activities that may overload or destabilise the System;

• use the Application in a manner that could harm the Service Provider or other Users, including by attempting to copy or extract the Application's source code, databases or know-how.

5. Use for own purposes only. The Application is intended exclusively for the User's own recruitment-related needs. The User must not provide the Services to third parties (e.g. sell CV generation as a service) unless they have obtained separate, explicit consent from the Service Provider. The User may not use the Application on behalf of third parties in a way that would violate the Terms, except where it clearly follows from the nature of the Materials (e.g. drafting a CV for a colleague at their request – the User is then responsible for ensuring they have the data subject's consent).

6. Prohibited activities and consequences. If the User violates the Terms or applicable law, the Service Provider may undertake the measures necessary to protect the Application, other Users or third parties, including:

• issuing a warning and requesting that the unlawful activity be ceased;

• temporarily or permanently blocking access to certain features or to the entire Account;

• deleting Materials or Results that violate the Terms or the law (especially Prohibited Content);

• refusing to provide the Services or terminating the Agreement with immediate effect pursuant to Chapter IV point 6;

• notifying the competent authorities if the User's actions may constitute an offence or crime (e.g. fraud, infringement of third-party rights).

The User is responsible for any damage caused to the Service Provider or to third parties as a result of violating the Terms or the law when using the Application.

7. User responsibility for Materials. The User bears full responsibility for the content of the Materials. By uploading Materials, the User declares that they have the necessary rights to use the Materials in the Application and that providing them does not breach the rights of third parties. The User must ensure that the Materials do not contain sensitive data unless the User has a legal basis to process and share such data. The Service Provider is not obliged to monitor the Materials but may respond to credible reports of unlawful content in accordance with the law and the Terms.

8. Retention and deletion of Materials. Materials uploaded by the User may be stored on the Account for as long as the Account is active (e.g. to allow the User to download Results again). The User may delete Materials or saved Results via the Application interface, which will permanently remove them from the active database. Backups may temporarily store deleted data until they are overwritten, solely to ensure the integrity of the System.

1. Paid model. The core functionality of the Application (generating a Result based on the User's Materials) is provided for a fee according to the Credit model. There is no free plan; the Service is available only after purchasing Credits (except for the one-time Trial described in Chapter III point 7).

2. Credit packages. Credits are sold in packages published in the Application. Each package indicates the number of Credits, the price (in the currency available to the User) and any additional information (e.g. promotional bundles). The Service Provider may change the available packages and prices at any time, with the change applying to future purchases only. The current offer is always displayed in the Application prior to purchase.

3. Purchasing Credits. To buy Credits the User must select the preferred package and complete the payment via the Stripe payment gateway. Depending on availability, payment can be made by card, BLIK, Apple Pay, Google Pay or another method supported in Stripe for the User's country. The Service Provider does not issue VAT invoices automatically; if an invoice is required, the User must contact support@hireoapp.com and provide the necessary billing data (issuing invoices to individual entrepreneurs is not available by default).

4. No invoices by default. The Service Provider does not automatically issue VAT invoices for purchases made in the Application. A simplified receipt (Stripe confirmation) is available in the User's payment history. If the Service Provider introduces invoice issuance in the future, Users will be informed via the Application or by e-mail.

5. Delivery of Credits. Credits are delivered immediately after the payment is successfully processed (usually within a few minutes). The User will see the updated Credits balance in the Account. If delivery is delayed (e.g. due to a temporary issue), the User should contact support@hireoapp.com with the payment details.

6. Validity of Credits. Credits remain valid as long as the Account is active. Credits are not subject to periodic settlement; they simply reduce the balance when a Result is generated. Credits cannot be exchanged for cash or transferred to another User without the Service Provider's consent.

7. Price and taxes. Prices displayed in the Application include VAT (if applicable). The User is informed about the total price before confirming the purchase. The User is responsible for paying any additional taxes or duties that may apply in their jurisdiction.

8. Refunds. Because Credits are digital content delivered immediately after purchase, refunds are not available once Credits have been delivered to the Account, unless the Service Provider is obliged to refund under mandatory provisions (e.g. non-conformity of the digital service with the contract). Before Credits are delivered, the User may cancel the purchase (e.g. by cancelling the payment) and receive a refund from Stripe.

9. Failed payments. If a payment fails or is reversed (chargeback), the Service Provider may reduce the Credits balance accordingly or block the Account until the outstanding amount is settled. The User must cooperate with the Service Provider to clarify payment disputes.

10. Currency conversion. Payments are processed in the currency shown in the checkout process. If the User's bank operates in another currency, the final amount may differ due to conversion fees applied by the bank or payment provider, for which the Service Provider is not responsible.

1. Ensuring conformity with the agreement. The Service Provider undertakes to provide the Services with due care and to strive to ensure that they conform to the description in the Terms and the information made available to the User in the Application (in accordance with the requirements of the Act on Consumer Rights of 30 May 2014 and the provisions on the supply of digital content). If the User is a consumer and finds that the supplied digital Service does not conform to the agreement (e.g. a functionality does not work as described), the User has the right to submit a complaint and demand that the Service be brought into conformity with the agreement or to demand a proportionate price reduction or to withdraw from the agreement – in line with the Act on Consumer Rights. The provisions of this Chapter do not limit statutory consumer rights.

2. No liability for User Materials. The Service Provider is not liable for the content entered into the System by Users. User Materials are neither monitored nor modified by the Service Provider – the User bears sole responsibility for their nature and legality. As a hosting/cloud provider, the Service Provider is not obliged under Article 14 of the Act on electronic services to monitor data stored on behalf of Users. Upon receiving credible information about the unlawful nature of stored Materials, the Service Provider will promptly take appropriate action, including removing such data from the System or blocking access to it.

3. Quality and content of generated Results – warranty exclusion. The Service Provider strives to ensure that the algorithms generating Results operate efficiently and correctly; however, the Service Provider does not guarantee that the documents obtained by the User will meet the User's expectations, in particular regarding substantive content, factual accuracy or effectiveness in recruitment. The User acknowledges that:

• The Result is created automatically on the basis of the data supplied by the User and may contain content generated by artificial intelligence that was not directly provided in the Materials. The AI model may in particular add suggested embellishments to the CV (e.g. missing keywords, skills or achievements) to improve alignment with the job advertisement. Although the objective is to enhance the quality of the CV, there is a risk that some added information may not fully reflect the User's actual qualifications or experience;

• The Service Provider does not guarantee the truthfulness or reliability of the information proposed by the AI model. Hireo App assumes no responsibility for any substantive or factual errors in the generated document nor for the document yielding a specific outcome (e.g. receiving a job interview invitation or employment);

• The Application does not verify or validate data; therefore all information contained in the Result must be reviewed and confirmed by the User. In particular, the User should ensure that the final CV used in recruitment is truthful and accurate. The Service Provider recommends that the User carefully read the generated document, correct any stylistic or linguistic errors and remove any elements that are not true (e.g. inaccurate education, experience or skills).

4. Indirect damages and lost profits. To the fullest extent permitted by law, the Service Provider is not liable for indirect, consequential or lost-profit damages suffered by the User or third parties arising from the use of the Application or from the inability to use it. In particular, the Service Provider is not liable for:

• negative consequences of the User's use of a defective or inaccurate document generated by the Application (e.g. damages related to providing a potential employer with false information contained in the CV, even if it was suggested by the AI model);

• lack of results from using a document generated in the Application (e.g. not receiving a job offer, no reply from an employer, rejection of an application), because the Application is only a supporting tool and does not guarantee any professional outcome;

• damages resulting from malfunctions of external mechanisms beyond the Service Provider's control – e.g. technical issues on the Payment Operator's side, unavailability of the User's e-mail inbox preventing receipt of the login link, network infrastructure failures, DDoS attacks, etc.;

• any actions or omissions of third parties for which the Service Provider is not responsible (e.g. unauthorised use of the User's CV content by third parties who obtained it without the Service Provider's involvement).

5. Maximum liability. The Service Provider's liability for damages towards a User who is not a consumer is in every case limited to the actual amount of the loss, not exceeding the total fees actually paid by the User to the Service Provider during the last 12 months of using the Services. The above limitation does not apply to damage caused intentionally by the Service Provider nor to liability that cannot be limited in relation to consumers under mandatory provisions.

6. Force majeure. Neither party shall be liable for non-performance or improper performance of obligations under these Terms if caused by circumstances beyond the party's reasonable control (force majeure), such as natural disasters, war, riots, terrorist attacks, power outages, strikes, failures of global telecommunications networks, etc. In the event of force majeure, the provision of Services may be suspended for the duration of the obstacle, and the parties will strive to minimise potential damage and resume the Services immediately after the obstacle ceases.

7. Reporting risks or infringements. In accordance with Article 14(1) of the Act on electronic services, the Service Provider provides the e-mail address support@hireoapp.com as a contact point for reporting potentially unlawful data stored in the System by Users. Upon receiving a credible notice about unlawful Materials or activities by a User, the Service Provider will promptly take appropriate measures as described in Chapter V point 6 and will inform the notifier about how the matter was handled. Notices that are clearly unfounded or abusive (e.g. mass submissions by competitors reporting non-existent violations) may be disregarded.

8. Suspension of the Services. The Service Provider reserves the right to suspend the Services for a given User or with respect to specific System functionalities if repeated breaches of the Terms or the law by that User are detected, as well as in cases of suspected abuse of the complaint or reporting procedures (e.g. multiple obviously unfounded complaints or reports). Before deciding to suspend the Services, the Service Provider will send the User a warning requesting that the abuse cease. Suspension will last for a reasonable period and will be lifted immediately once the reasons for it cease to exist. The User will be notified by e-mail about the suspension and its reasons.

9. Service Provider's intellectual property. All textual, graphical, interface, database and other creative elements provided in the Application by the Service Provider are legally protected. Copying, publicly playing, modifying or distributing such elements without the explicit consent of the Service Provider is prohibited, except in cases of permitted use provided for by law. This applies in particular to the "Hireo App" trade name, the Application logo, descriptions of functionality and legal documents available in the System.

1. Scope of complaints. The User has the right to submit complaints regarding the operation of the Application and the Services, especially if the Services are not provided or are provided contrary to the Terms. Complaints may concern, for example, technical problems that prevent or hinder the use of the Application, incorrect calculation or settlement of Credits, failure to deliver purchased packages, non-conformity of the Result with the description of the feature, etc.

2. Complaint procedure. A complaint must be submitted to the Service Provider electronically – by sending an e-mail to support@hireoapp.com. It is recommended that the User include in the complaint: a description of the problem forming the basis of the complaint, the date and approximate time of the issue, identification data (e.g. the e-mail address assigned to the Account) and, if possible, screenshots or other materials that may help identify the problem. If the complaint concerns a specific payment transaction, information that allows it to be identified (e.g. order number, Stripe payment ID, date of purchase) should also be provided.

3. Acknowledgement of receipt. The Service Provider will confirm receipt of the complaint, sending an automatic reply (if possible) or responding directly to the User's message. If necessary, the Service Provider may ask the User to provide additional information if the submitted data is insufficient to process the complaint.

4. Response time. Complaints are processed without undue delay, no later than within 14 days from the date on which the Service Provider receives the complaint containing all necessary information. The response will be sent to the User's e-mail address provided in the complaint (or assigned to the Account). In particularly complex cases that prevent the complaint from being resolved within the above period, the Service Provider will inform the User about the expected response time and explain the reasons for the delay.

5. Outcome. When responding to a complaint, the Service Provider will inform the User about the findings. If the complaint is considered justified, the Service Provider will take appropriate corrective action, such as restoring the proper operation of the Application, replenishing Credits, providing an improved Result, refunding the fee paid (in whole or in part) or providing another suitable remedy. If the complaint is deemed unfounded, the Service Provider will explain the reasons for that decision.

6. Disputes and pursuing claims. A consumer User who disagrees with the Service Provider's decision on a complaint has the right to use out-of-court dispute resolution methods. In particular:

• The User may seek help from the municipal or district consumer ombudsman competent for their place of residence (in Poland), who can provide free legal advice or mediate in the dispute with the Service Provider;

• The User may apply for mediation or proceedings before a permanent consumer arbitration court at the competent Provincial Inspectorate of Trade Inspection (e.g. for a Service Provider based in the Mazowieckie province – before the Mazowieckie Provincial Inspector in Warsaw). Information on how to access these procedures is available on the websites of the Polish Office of Competition and Consumer Protection and the relevant Trade Inspection authorities;

• The User may use the European Online Dispute Resolution platform (ODR) available at https://ec.europa.eu/consumers/odr. The ODR platform enables consumers and businesses to resolve online disputes concerning contractual obligations arising from online sales or service contracts. The Service Provider's contact e-mail for ODR purposes is support@hireoapp.com.
  Using out-of-court dispute resolution methods is voluntary and may take place only if both parties agree. This clause does not constitute the Service Provider's consent to submit a dispute to mediation or arbitration; however, the Service Provider will consider in good faith any proposal from a consumer to resolve a dispute amicably.

7. Court proceedings. If a dispute is not resolved through the complaint or alternative dispute resolution process, it will be settled by the common court having jurisdiction under the general rules (subject to the provisions of Chapter XI point 5 regarding the choice of law and jurisdiction).

1. Data controller. The controller of the personal data of Users processed in connection with the Application is Dawid Nawrot conducting business under the name Hireo App Dawid Nawrot (address: ul. Oliwkowa 4, 05-500 Józefosław, Poland). The Service Provider can be contacted on all personal-data matters at privacy@hireoapp.com.

2. Scope of data collected. In connection with providing the Services, the Service Provider processes the following categories of Users' personal data:

• Data provided during Registration: e-mail address (and possibly other basic data shared by the external identity provider, such as the given name from the Google account if the User logs in via Google – although the Application does not require a first or last name to create an Account);

• Account usage data: preferred interface language, selected currency for displaying prices, login history, IP addresses or device identifiers (recorded, for example, in security logs), the identification of Credit packages and transactions made by the User, information on the use of Credits and on generating Results (e.g. number and dates of generated documents, identifiers of generated Results, "trial/paid" status, etc.);

• Data in User Materials: any information, including personal data, that the User decides to place in Materials sent to the Application – this may include data contained in the CV (such as name and surname, contact details, education and work history, skills, achievements, etc.) as well as data included in a job posting (e.g. employer's name, location, job requirements). Note: The Service Provider does not need and does not request special categories of data (Article 9 GDPR). If the User includes such data in the Materials (e.g. information about health or beliefs), they do so voluntarily and at their own risk;

• Payment-related data: The Service Provider receives directly from the User only limited financial information – e.g. the amount and currency of the transaction, the time of payment, status (success/failure), number of Credits purchased and transaction identifiers assigned by the Payment Operator. Data such as card numbers, cardholder name or bank-account number is entered solely in the Stripe payment form and is not provided to the Service Provider (Stripe may, however, share masked data such as "Visa ****1234").

3. Purposes and legal bases of processing. The Service Provider processes Users' personal data for the following purposes:

• Conclusion and performance of the Agreement (provision of the Services) – legal basis: Article 6(1)(b) GDPR (processing necessary to perform a contract with the data subject). This includes handling the User's Account, enabling logins, providing the Application's functionality (including processing Materials and generating Results on demand) and service-related communication (e.g. sending the login link, notifications about completed generation, system messages). Data on transactions that is necessary to record payments and assign purchased Services (Credits) to the User is also processed under this purpose;

• Handling complaints, enquiries and technical support – legal basis: Article 6(1)(b) GDPR (if the matter concerns performance of the Agreement) or Article 6(1)(f) GDPR, i.e. the Service Provider's legitimate interest in ensuring proper customer service and pursuing claims. This purpose includes the data contained in the User's submissions (e.g. e-mail address, content of the submission, attachments, system data needed to reproduce an error);

• Compliance with the Service Provider's legal obligations – legal basis: Article 6(1)(c) GDPR (compliance with a legal obligation). This includes, in particular, processing and storing data necessary for tax and accounting purposes (e.g. information on payment transactions, issued accounting documents) and data required to handle requests under the Act on Consumer Rights (e.g. withdrawals, price-reduction demands due to non-conformity);

• Security and abuse prevention – legal basis: Article 6(1)(f) GDPR (legitimate interest in ensuring the security of the Services and preventing abuse or fraud). This may involve processing system logs, IP addresses, device identifiers and information on unusual activity (e.g. attempts to breach security, repeated account registrations). Such data helps detect and block activities that violate the Terms or the law;

• Service improvement and analytics – legal basis: Article 6(1)(f) GDPR (legitimate interest in developing and improving own products and services). The Service Provider may analyse aggregated and anonymised (or pseudonymised) data on how Users utilise the Application, including statistics on generations, common errors and general user-behaviour trends, to improve functionality and quality. Within this purpose the Service Provider does not process personal data in a way that would allow identification of a specific individual, but only aggregated or de-identified data;

• Direct marketing of the Service Provider's own services – if the User gives separate consent to receive commercial information (e.g. subscribes to the newsletter or ticks the relevant box during registration), the Service Provider may process the User's contact details (e-mail address) to send updates about new features, promotions or blog posts. Legal basis: Article 6(1)(a) GDPR (consent), which can be withdrawn at any time without affecting the lawfulness of past processing.

4. Recipients of data. Personal data may be shared with:

• Processors acting on behalf of the Service Provider – e.g. hosting and IT infrastructure providers (servers, databases), analytics and marketing tool providers, subcontractors responsible for Application maintenance or development, transactional e-mail providers, cloud providers (including AI services that process Materials to generate Results). They process data under a contract, following the Service Provider's instructions and confidentiality obligations;

• Payment Operator (Stripe) – to the extent necessary to process online payments. Stripe receives the data entered directly by the User in the payment form and shares transaction-status information with the Service Provider. Stripe acts as an independent controller of the User's payment data (under its own privacy notice at stripe.com) and, for data transmitted to the Service Provider, as a processor or joint controller for settlement purposes;

• Authorised authorities – law-enforcement bodies, courts, public authorities or other entities entitled by law – only when they request data on a valid legal basis (e.g. in connection with proceedings). The Service Provider always verifies the legal basis of such requests.

5. Transfers of data to third countries. As a rule the Service Provider strives to store and process Users' data within the European Economic Area (EEA). However, some tools or subcontractors may be located or have infrastructure outside the EEA (e.g. cloud or AI providers in the USA). When personal data is transferred to a third country (outside the EEA), the Service Provider ensures the required level of protection, for example by using entities participating in the EU–US Data Privacy Framework (where applicable) or by concluding the European Commission's standard contractual clauses with the recipient.

6. Data retention period. A User's personal data is stored:

• For the duration of the Agreement (while the Account exists) – in principle, the User's data is actively processed and stored throughout the entire period of using the Application.

• After the Account is deleted – the User's data may be stored to the following extent and for the following periods: (i) data related to payment transactions – for the period required by tax and accounting regulations (e.g. accounting evidence for at least 5 years from the end of the fiscal year to which it relates); (ii) data necessary to handle potential claims or complaints – until the statute of limitations for civil-law claims expires (generally 3 years, for consumer claims up to 6 years from the event) or until a dispute ends; (iii) security logs and records – for up to 24 months from their recording, for incident analysis and abuse prevention. After those periods the data is deleted or irreversibly anonymised.

• Data in Materials and Results – the User's Materials and generated documents may be stored on the Account as long as the Account remains active (to allow the User to download the results again or resume interrupted actions). The User may delete their Materials or saved Results via the Application, which results in irreversible removal from the active database. The Service Provider may retain backup copies of such data for a limited time (until the next backup overwrites it) solely to ensure system integrity and allow recovery in the event of a failure.

7. Rights of data subjects. Users whose data is processed by the Service Provider have the following rights:

• Right of access – to obtain from the Service Provider confirmation whether it processes the User's personal data and, if so, to access the data as well as information about the purposes, categories, recipients and planned storage period (Article 15 GDPR);

• Right to rectification – to demand prompt correction of inaccurate personal data or completion of incomplete data (Article 16 GDPR). The User may update some data directly via the Account (e.g. change the e-mail address if the functionality is available) or may ask the Service Provider to correct the data;

• Right to erasure ("right to be forgotten") – to request deletion of the personal data concerning them if the circumstances in Article 17(1) GDPR occur, e.g. the data is no longer necessary for the purposes for which it was collected or the User withdrew consent and there is no other legal basis for processing. This right may be limited in the cases listed in Article 17(3) GDPR (e.g. when processing is necessary to comply with a legal obligation or to establish, exercise or defend claims). Deleting the User's Account (whether initiated by the User or the Service Provider) results in data deletion, subject to data that must be retained for the legal reasons mentioned above;

• Right to restriction of processing – to request that processing be restricted in the situations set out in Article 18 GDPR, e.g. when the User contests the accuracy of the data (for a period enabling verification) or when the data is no longer needed by the Service Provider but the User needs it to establish, exercise or defend claims;

• Right to data portability – to receive in a structured, commonly used format (or to request direct transfer to another controller) the personal data provided to the Service Provider by the User, where the processing is based on consent or a contract and is carried out by automated means (Article 20 GDPR). This applies, for example, to data supplied in the registration form; it does not cover data generated by the Service Provider (e.g. analytics) nor primarily the content of generated documents (which the User can download using the Application);

• Right to object – the User may object at any time to processing based on the Service Provider's legitimate interest (Article 6(1)(f) GDPR) for reasons relating to their particular situation. In such a case the Service Provider will assess whether there are compelling legitimate grounds for the processing that override the User's interests, rights and freedoms or whether the data is necessary to establish, exercise or defend claims. If the objection concerns processing for direct marketing, the Service Provider will stop such processing immediately upon receiving the objection;

• Right to withdraw consent – insofar as processing is based on consent (e.g. for sending newsletters), the User may withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal. Consent may be withdrawn by e-mailing privacy@hireoapp.com or by clicking the relevant link in the e-mail (for marketing consent);

• Right to lodge a complaint with a supervisory authority – if the User believes that the processing of their personal data violates GDPR, they have the right to lodge a complaint with the competent supervisory authority. In Poland this is the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw). Users residing in other EU Member States may submit a complaint to the supervisory authority competent for their habitual residence or workplace.

8. Additional information. Detailed information about the processing of Users' personal data, including possible changes to the purposes or legal bases, is provided in the Privacy Policy (Appendix no. 2) and in the information clauses available on the Application's website. The Service Provider applies appropriate technical and organisational measures to ensure the security of personal data (including encrypted transmission, access control, regular backups). For any questions concerning personal data please contact privacy@hireoapp.com.

1. Important reasons for changing the Terms. The Service Provider may amend these Terms for important reasons, in particular when:

• legal regulations governing electronic services provided by the Service Provider change, including in the area of consumer rights, data protection or digital services, which affect the mutual rights and obligations set out in the Agreement;

• a judgment, decision or other act is issued by a court, administrative body or other competent entity obliging the Service Provider to modify the Terms or its practices;

• new functionalities, services or changes to the operation of the Application are introduced (including technical changes, integrations with new partners, changes to payment models, loyalty programmes, etc.) that require the Terms to be adjusted to the new offer;

• it is necessary to remove interpretative doubts or clarify provisions of the Terms identified during their application (e.g. as a result of Users' questions or divergent interpretations);

• the Service Provider's contact details, name, legal form or other organisational information included in the Terms change;

• it is necessary to counteract abuse or security threats – if, during the provision of the Services, new threats, security gaps or typical User behaviours violating the Terms emerge and amendments are required to protect other Users or the Service Provider's rights.

2. Procedure for implementing changes. The Service Provider will inform Users about any planned change to the Terms at least 15 days before it takes effect. Information about the change will be sent to the e-mail address assigned to the Account and the unified text of the amended Terms will be made available on the Application's website (e.g. in the "Terms" section). The notice will specify the scope of the change, the date it comes into force and the User's right to terminate the Agreement before that date.

3. User objection. If a User does not accept the planned changes to the Terms, they have the right to terminate the Agreement for the use of the Application with immediate effect before the changes take effect (by deleting the Account or by submitting the statement described in Chapter IV point 6). Failure to terminate the Agreement and continued use of the Services after the effective date of the changes will be deemed acceptance of the new Terms.

4. Continuity. Changes to the Terms do not operate retroactively – Services performed before the new wording takes effect remain governed by the previous Terms, unless mandatory legal provisions state otherwise.

5. Governing law and jurisdiction. The law governing the Agreement between the User and the Service Provider concerning the Services provided under the Terms is Polish law. Any disputes arising in connection with the Agreement will be resolved by the competent Polish common courts. This provision does not deprive a consumer of protection granted by provisions that cannot be excluded by agreement between the Service Provider and the consumer under the law of the country of the consumer's habitual residence (i.e. mandatory provisions of that country).

6. Final provisions. The Terms in their current version enter into force on the date specified below. Matters not regulated in the Terms are governed by generally applicable law, including the Civil Code, the Act on electronic services, the Act on Consumer Rights and relevant European Union legislation. If any provision of the Terms proves invalid or ineffective under applicable law, this shall not affect the validity of the remaining provisions – the invalid provision will be replaced, in relations with consumers, by the relevant legal norm, and in relations with entrepreneurs by a provision whose purpose and economic effect are as close as possible to the invalid provision.

7. Annexes. The following form an integral part of these Terms: Appendix no. 1 – Template withdrawal statement, and Appendix no. 2 – Information on personal data processing (Privacy Policy).

8. Contact and language versions. The Terms are drawn up in Polish. Any translations into other languages are for information only – in the event of discrepancies, the Polish version prevails. All comments, questions and suggestions regarding the Terms or the Services may be sent to support@hireoapp.com.

9. Effective date. These Terms apply from 24 November 2025 until revoked or until a new version is published.

Appendix no. 1 to the Hireo App Terms – Template withdrawal statement

(Complete and return this form only if you wish to withdraw from the Service Agreement – do not complete it if you do not intend to withdraw from the agreement.)

Dawid Nawrot (Hireo App)
ul. Oliwkowa 4
05-500 Józefosław
e-mail: support@hireoapp.com

I hereby inform you of my withdrawal from the Hireo App Service Agreement (use of the Hireo App Application).

Consumer's full name: ………………………………………………………………

E-mail address used to register with Hireo App: ………………………………………………………………

Date the Agreement was concluded: ………………………………………………………………

Date of withdrawal: ………………………………………………………………

Signature: ………………………………………………………………

(signature of the consumer, only if this form is sent on paper)

Please complete this form legibly and send it to the above correspondence address or electronically (a scan/photo of the signed statement) to the Service Provider's e-mail address.

Appendix no. 2 to the Hireo App Terms – Information on personal data processing (Privacy Policy)

(This information summarises the rules for processing Users' personal data in accordance with Articles 13 and 14 GDPR. Detailed explanations are provided in Chapter IX of the Terms and in the full Privacy Policy available on the Application's website.)

1. Data controller: The controller of your personal data is Dawid Nawrot conducting business under the name Hireo App Dawid Nawrot, address: ul. Oliwkowa 4, 05-500 Józefosław, contact e-mail: privacy@hireoapp.com.

2. Purposes and legal bases: Personal data will be processed for the following purposes:

• providing electronic services (creating an Account, enabling the use of the Application, generating documents) – based on necessity to perform a contract (Article 6(1)(b) GDPR);

• handling payments for the Services (purchase of Credits) – based on contract performance (Article 6(1)(b) GDPR) and legal obligations (Article 6(1)(c) GDPR, e.g. accounting and tax regulations);

• ensuring the proper functioning of the Application, technical support and complaint handling – based on the contract (Article 6(1)(b) GDPR) or the controller's legitimate interest (Article 6(1)(f) GDPR) in providing high-quality support;

• improving security, detecting abuse and errors – based on the controller's legitimate interest (Article 6(1)(f) GDPR) in protecting the Application and Users against abuse;

• fulfilling legal obligations (e.g. archiving accounting documentation, handling consumer-rights claims) – based on Article 6(1)(c) GDPR;

• potentially for direct marketing of the controller's own services – only on the basis of separately granted consent (Article 6(1)(a) GDPR), which may be withdrawn at any time.

3. Scope of data collected: We primarily process data that the User provides or generates while using the Application, including: e-mail address (to create an Account), data entered into the CV/job posting (to the extent provided by the User, e.g. contact details, professional information), activity history in the Application (e.g. number and dates of generated documents, purchased packages), basic technical information (IP address, device identifiers, operating system). Providing the personal data marked as required is voluntary but necessary to use the Application. Failure to provide such data makes it impossible to create an Account and provide the Services.

4. Recipients of data: Data may be disclosed to entities supporting us in providing the Services, such as IT service providers (hosting, servers, analytics tools), the Payment Operator (Stripe) – for payment processing, AI technology providers (to process CV and job description text), and providers of legal, accounting or postal services. All such entities ensure an adequate level of data protection. Where legally required, data may also be provided to authorised public authorities.

5. Transfers outside the EEA: As a rule we strive to process data within the European Economic Area. However, some subcontractors may operate outside the EEA (e.g. in the USA). In such cases data is transferred in accordance with the law, based on standard contractual clauses or other mechanisms provided for in GDPR that ensure an adequate level of data protection.

6. Retention period: Data related to the Account and the use of the Application is stored for the duration of the contract (while the Account exists). After the Account is deleted, some data may be stored for the period required by law (e.g. transaction documents for 5 years) or until claims expire (up to 6 years). Technical data and backups may be stored for shorter periods in line with the retention policy. Data processed on the basis of consent (e.g. marketing) is stored until the consent is withdrawn.

7. Rights of individuals: Every User has the rights connected with the processing of their data: the right of access to their data, rectification, erasure (where provided by law), restriction of processing, data portability, the right to object to processing based on our legitimate interest and the right to withdraw consent (if it was the legal basis) at any time. These rights can be exercised by contacting us at privacy@hireoapp.com. Users also have the right to lodge a complaint with the data-protection authority (the President of the Personal Data Protection Office in Poland, or another competent authority in the User's EU country).

8. Profiling: Within the Application, Users' personal data is not subject to decisions based solely on automated processing (no profiling that produces legal effects concerning the User). The AI-based CV generation simply processes the supplied information for a defined purpose – the User retains full control over the Result.

9. Privacy contact: If you have questions or doubts about how the Service Provider processes personal data, please contact privacy@hireoapp.com. You can also write to: Dawid Nawrot (Hireo App), ul. Oliwkowa 4, 05-500 Józefosław, Poland.

Last updated: 24 November 2025.