Koru Smart CV — AI Transparency Notice
Last updated: 12 September 2026
Legal Entity: Credaro Technology PVT LTD (Company No. AC228866)
Registered Address: 3 Emerald Park, Trianon, Quatre Bornes 72257, Mauritius
1. PURPOSE OF THIS NOTICE
This AI Transparency Notice explains how Koru Smart CV ("Koru") uses artificial intelligence (AI) to help you build and optimize your CV. It's designed to give you a clear, honest understanding of what our AI does, how it works, what data it uses, and what choices you have.
We've written this notice because we believe you have the right to know when and how AI is involved in processing your personal data. This notice supplements our Privacy Policy; it doesn't replace it. Where this notice and the Privacy Policy overlap, the Privacy Policy takes precedence on data protection matters.
This notice also reflects our commitment to the Credaro Technology Ethical AI Development Policy, which requires transparency, fairness, human oversight, and accountability in all our AI systems.
2. HOW KORU USES AI
Koru uses AI in several ways to help you create a stronger CV:
2.1 CV Content Analysis
When you enter your employment history, education, skills, and other details, the AI analyses your content and identifies areas for improvement, such as missing information, unclear language, or weak phrasing.
2.2 Content Suggestions
The AI generates specific suggestions to improve your CV, including:
- Rewritten bullet points that use stronger action verbs.
- Summary statements tailored to your experience and target role.
- Suggested skills to add based on your described experience.
- Tone and language improvements.
2.3 ATS Compatibility
The AI checks your CV against common Applicant Tracking System (ATS) requirements and suggests formatting or keyword changes to improve your CV's chances of passing through automated screening.
2.4 Template Recommendations
Based on your industry and experience level, the AI may recommend templates that are most suitable for your needs.
2.5 Keyword Matching
For Pro plan users, the AI can match your CV content against specific job descriptions and suggest keywords or phrases to include.
2.6 Learning from Anonymised Patterns
Anonymised CV patterns are used to improve recommendations — patterns are stored without your name, employer or institution, and never as a copy of your CV.
3. WHAT DATA THE AI PROCESSES
The AI processes the following types of data from your CV:
- Personal information: Your name, contact details, and location (as entered in your CV).
- Professional information: Your work history, job titles, responsibilities, achievements, education, qualifications, and skills.
- Preferences: Your selected template, target role, and industry.
- Usage data: Which features you use, which suggestions you accept or reject, and how you interact with the platform.
The AI doesn't access:
- Your payment details (those are handled separately by Dodo).
- Data from other Koru users — your identifiable CV content is never shared with or shown to another user; only anonymised patterns (no names, employers, institutions or CV text) are reused to improve suggestions.
- External data sources — the AI doesn't scrape the internet or access your social media profiles.
4. HOW AI DECISIONS ARE MADE
4.1 Pattern-Based, Not Judgment-Based
Koru's AI works by recognizing patterns in effective CVs. It's trained on large datasets of professionally written CV content, job descriptions, and ATS requirements. When it analyses your CV, it compares your content against these patterns and suggests improvements.
4.2 No Automated Decision-Making
The AI doesn't make decisions about you. It doesn't decide whether you'll get a job, whether your CV is "good enough," or whether you should be shortlisted by an employer. It provides suggestions, you decide whether to use them.
There is no automated decision-making that produces legal or similarly significant effects on you, as prohibited by Article 22 of the GDPR and equivalent provisions in other data protection laws.
4.3 Transparency in Suggestions
When the AI makes a suggestion, it indicates which part of your CV it's referencing and why the change is recommended (for example, "This bullet point could be stronger with an action verb" or "This section may be too long for ATS parsing").
5. HUMAN OVERSIGHT AND CONTROL
5.1 You're in Control
Every AI suggestion in Koru requires your action to take effect. You can:
- Accept a suggestion as-is.
- Modify a suggestion before accepting it.
- Reject a suggestion entirely.
- Undo any accepted suggestion.
The AI never automatically changes your CV without your approval.
5.2 Human-in-the-Loop Design
In line with the Credaro Ethical AI Development Policy, Koru's AI is designed with human-centricity as a core principle. The AI augments your ability to write a strong CV, it doesn't replace your judgment about what to include or how to present yourself.
5.3 No AI-Only Output
Koru doesn't generate a complete CV from scratch based solely on AI. You provide the content; the AI helps you refine it. This ensures that your CV reflects your actual experience and voice, not a machine-generated template.
6. BIAS MITIGATION AND FAIRNESS
6.1 Training Data Audits
We regularly audit our training datasets to identify and remove demographic bias. This includes checking for patterns that might disadvantage certain groups based on gender, ethnicity, age, or other protected characteristics.
6.2 Fairness Testing
Before deploying any AI model update, we conduct fairness testing to check whether suggestions are equally effective across different demographic groups. If we identify disparities, we adjust the model before release.
6.3 No Profiling
Koru's AI doesn't profile you based on your personal characteristics. It doesn't infer your gender, ethnicity, age, or other protected attributes from your CV content. Suggestions are based on the quality and structure of your content, not who you are.
6.4 Known Limitations
Despite our best efforts, AI systems can reflect biases present in their training data. If you believe Koru's AI has produced a biased or inappropriate suggestion, please report it to us at contact@credarotechnology.mu. We take all reports seriously and investigate them as part of our continuous improvement process.
7. LIMITATIONS OF AI OUTPUT
7.1 AI Can Be Wrong
AI suggestions are based on patterns, not facts. The AI may recommend changes that aren't appropriate for your specific industry, role, or jurisdiction. For example:
- CV conventions vary by country — what works in the US may not work in the UK, Mauritius, or Singapore.
- Industry-specific terminology may be misunderstood or incorrectly suggested.
- The AI may not recognize the nuance of certain roles or achievements.
7.2 No Guarantee of Outcomes
Using AI suggestions doesn't guarantee that your CV will pass ATS screening, secure an interview, or lead to a job offer. Many factors influence hiring decisions that are outside the scope of any CV tool.
7.3 Not Professional Advice
AI suggestions aren't a substitute for professional career counselling, recruitment advice, or industry-specific guidance. If you're unsure about your CV, consider consulting a qualified career professional.
8. YOUR RIGHTS REGARDING AI PROCESSING
8.1 Right to Know
You have the right to know when AI is being used and what data it's processing. This notice fulfils that obligation. If you want more details about a specific AI feature, contact us.
8.2 Right to Opt Out of AI Features
You can choose not to use Koru's AI features. You can still create and format your CV using the platform's non-AI tools (templates, manual editing, export). Opting out of AI features doesn't affect your other rights under your subscription.
To opt out contact us at support@credarotechnology.mu.
8.3 Right to Human Review
If you believe an AI suggestion has negatively affected your CV in a way you didn't intend, you can request a manual review by contacting us. While we don't provide individual CV consulting, we'll investigate whether the AI is functioning as intended and address any technical issues.
8.4 Right to Object to AI Training
As described in our Privacy Policy, you can opt out of having your anonymized data used for AI model training. This doesn't affect your ability to use AI features — it only means your data won't be included in model improvement.
8.5 Data Subject Rights
All your standard data protection rights (access, rectification, erasure, portability, objection) apply to data processed by our AI. See Section 12 of our Privacy Policy for full details.
9. DATA RETENTION FOR AI TRAINING
9.1 Anonymized Training Data
When we use CV data for AI training, we first anonymize it, removing names, contact details, addresses, and other personally identifiable information. This anonymized data may be retained indefinitely for model improvement.
9.2 Identifiable Data
If we use identifiable data for AI processing (for example, to generate real-time suggestions), that data is deleted or anonymized within 12 months of collection, unless you have an active account (in which case it's retained as described in our Privacy Policy).
9.3 Third-Party AI Providers
When we send data to third-party AI providers (such as language model APIs) for processing, those providers don't retain your data beyond the processing period. They don't use your data to train their own models; our data processing agreements prohibit this.
10. THIRD-PARTY AI SERVICES
Koru may use AI services provided by established technology companies. Here's what that means for you:
10.1 Which Services We Use
We use language model APIs to power content generation and analysis features. These providers may include companies like OpenAI or Anthropic. We select providers based on their data protection commitments, security standards, and AI safety practices.
10.2 How Your Data Is Handled
When your CV content is sent to a third-party AI provider:
- It's transmitted securely (encrypted in transit).
- It's processed in real time and returned to Koru.
- The provider doesn't retain your data after processing.
- The provider doesn't use your data to train their own models.
10.3 Data Processing Agreements
We have data processing agreements (DPAs) in place with all AI providers. These agreements contractually require them to:
- Process data only as instructed by Credaro Technology.
- Not use data for their own purposes.
- Delete data after processing.
- Maintain appropriate security measures.
- Comply with applicable data protection laws.
11. ETHICAL AI FRAMEWORK
Koru's AI is developed and operated in alignment with the Credaro Technology Ethical AI Development Policy, which is built on five pillars:
11.1 Human-Centricity
AI augments human capability, it doesn't replace human judgment. You're always in control of your CV content and must approve every AI suggestion.
11.2 Transparency and Explainability
We're committed to being open about how our AI works. This notice is part of that commitment. We avoid black box approaches where possible and provide context for AI suggestions.
11.3 Fairness and Non-Discrimination
We test our AI for bias and work to eliminate discrimination. See Section 6 for our bias mitigation approach.
11.4 Privacy and Data Stewardship
We collect only the data needed to provide the service, process it securely, and give you control over how it's used. See our Privacy Policy for full details.
11.5 Accountability
Credaro Technology is accountable for how Koru's AI behaves. The Head of Legal oversees AI compliance, and the CTO oversees technical implementation. If something goes wrong, we have defined remediation paths, including the ability to roll back AI changes, investigate incidents, and notify affected users.
11.6 AI Impact Assessment
Before launching Koru, we conducted an AI Impact Assessment (AIIA) to evaluate potential risks to users. The assessment covered data protection, bias, transparency, and user autonomy. Mitigations identified in the assessment have been incorporated into the product.
11.7 Continuous Monitoring
AI models can degrade over time ("model drift"). We monitor performance continuously and retrain models periodically to maintain quality and fairness.
12. CONTACT US
If you have questions about how Koru uses AI, your rights regarding AI processing, or any concerns about AI fairness or transparency, please contact:
Credaro Technology
3 Emerald Park, Trianon, Quatre Bornes 72257, Mauritius
Email: contact@credarotechnology.mu
We're committed to responding to AI-related concerns within 14 days.
This AI Transparency Notice is drafted in alignment with the Credaro Technology Ethical AI Development Policy (5 pillars: Human-Centricity, Transparency, Fairness, Privacy, Accountability) and is designed to comply with:
- EU GDPR Article 22 (automated decision-making) and Article 13-14 transparency obligations
- Mauritius Data Protection Act 2017
- Singapore PDPA provisions on automated decision-making
- South Africa POPIA (automated decision-making, Section 71)
- Philippines Data Privacy Act of 2012
- Kenya Data Protection Act 2019
- Rwanda Law N°058/2021 on the Protection of Personal Data and Privacy
- Uganda Data Protection and Privacy Act 2019
- California CCPA/CPRA (automated decision-making technology)
- EU AI Act principles (transparency obligations for AI systems)
Credaro Technology Ltd is registered in Mauritius under the Companies Act 2001.