GDPR Compliance
Last updated: June 2026
AquariusAI is committed to protecting the personal data of all users, including those located in the European Union and European Economic Area. This page explains how we comply with the General Data Protection Regulation (GDPR) (EU) 2016/679, outlines your rights as a data subject, and explains how to exercise those rights.
Who Is the Data Controller?
The data controller for personal data collected through AquariusAI is HireMyStudios, an Australian registered company operating aquariusai.space. As the data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring your rights are protected under applicable data protection laws.
Personal Data We Collect
Account Data
Full name, email address, hashed password, and professional profile information including headline, skills, experience, and education.
Usage Data
Chat conversation history, resume analysis results, job application records, automation settings, and interaction logs.
Payment Data
Processed by Stripe. We do not store card numbers. We retain transaction IDs, plan status, and billing history for tax compliance.
Technical Data
IP address, browser type, device information, and session data processed through our Google Firebase infrastructure.
Legal Basis for Processing
- Contractual Necessity: We process your data to provide the AquariusAI service you signed up for, including account management, AI chat, resume analysis, and job matching.
- Legitimate Interests: We use data for analytics to improve the platform, fraud prevention, and security monitoring to protect our users and infrastructure.
- Consent: For marketing communications and optional functional cookies. You may withdraw this consent at any time via your dashboard.
- Legal Obligation: Where we are required to retain data for tax, legal, or regulatory compliance in Australia or international jurisdictions.
Your Rights Under GDPR
As an EU data subject, you have the following rights under Articles 15-21 of the GDPR:
Right of Access (Art. 15)
Request a full copy of all personal data we hold about you and information on how it is processed.
Right to Rectification (Art. 16)
Request the correction of inaccurate or incomplete personal data in your profile.
Right to Erasure (Art. 17)
The 'right to be forgotten'—request deletion of your data where no legal basis exists for continued processing.
Right to Restriction (Art. 18)
Request that we limit the processing of your data in specific circumstances (e.g., while disputing accuracy).
Right to Portability (Art. 20)
Receive your data in a structured, machine-readable format to transfer to another service.
Right to Object (Art. 21)
Object to processing based on legitimate interests, such as direct marketing or analytics.
Data Retention & Transfers
We retain your personal data for as long as your account is active or as needed to provide services. Account data is typically deleted within 30 days of account closure unless retention is required for legal or tax purposes. Chat history and analysis results are retained for 12 months after your last activity to provide context for your career journey.
AquariusAI uses Google Firebase and Anthropic for core functions. Data transfers to these providers are protected by Standard Contractual Clauses (SCCs) and adequacy decisions where applicable. By using AquariusAI, you acknowledge that your data may be processed in countries outside the EU, including Australia and the USA.
Contact Our Privacy Team
To exercise any of your GDPR rights or for any privacy-related enquiry, contact us at [email protected]. We respond to all verified requests within 30 days as required by law.