Privacy Policy

This Privacy Policy explains how careers.ai (“we”, “our”) collects, uses, stores, and shares your personal data when you use our platform at careers.ai.

1. Data we collect

We collect and process the following categories of data:

• Account data — email address, display name, authentication identifiers from Google when used to sign in.
• CV content — the raw CV file you upload (PDF or DOCX) and the structured Career Profile we derive from it.
• AI run outputs — results of CV Analysis, Feedback, Role Match, and Salary Insights runs.
• Billing data — handled by Stripe. We store Stripe customer and subscription identifiers; we never see your card number.
• Usage data — basic server logs (IP address, user agent, timestamps) for security, abuse prevention, and debugging.

2. How we use your data

We use your data to:

• Provide the core service — parsing your CV, running AI engines, storing your Career Profile, and rendering your public profile when you choose to publish.
• Process payments through Stripe.
• Send transactional emails (account verification, receipts).
• Detect and prevent abuse, fraud, and policy violations.
• Comply with legal obligations.

3. Third-party processors

We use a small set of trusted service providers to run careers.ai. Your data may pass through or be stored with these processors, and they are bound by data-processing agreements:

• Hetzner — application hosting, our self-hosted database and authentication services, file storage, and backups.
• Google — authentication when you choose Google sign-in.
• Anthropic — AI processing of your CV content to generate analysis, feedback, role match, and salary insights. API usage is excluded from provider training per Anthropic's terms.
• Stripe — payment processing, customer and subscription management, tax handling.
• Resend — transactional email delivery.

4. How we share your data

We do not sell your data. We share data only with the processors above, only as needed to provide the service, and only under data processing agreements.

Your public Career Profile (when you publish it) is visible to anyone with the URL and may be indexed by search engines unless you enable the “noindex” toggle. You can unpublish at any time.

5. Data retention

• Active accounts — data is retained while your account exists.
• Deleted accounts — account data, Career Profiles, registered uploads and AI run history are removed from the active service when account deletion completes. Earlier anonymous uploads follow the anonymous-session cleanup schedule below.
• Older file versions — previous versions of deleted or overwritten files become eligible for permanent removal after 7 days. Storage lifecycle processing is asynchronous, so removal is not instantaneous at that deadline.
• Recovery backups — backup copies follow a separate recovery retention schedule and can remain longer than data in the active service. They are not available through your public profile or ordinary application access.
• Anonymous sessions — anonymous upload data (for users who try the tool without registering) expires after 7 days and is removed by scheduled cleanup. If you claim a profile, its imported account data follows the account retention rules. Older file versions and recovery backups follow their separate rules above.
• Billing records — retained for the period required by applicable tax and accounting regulations.

6. Your rights

Depending on your location, you have rights under GDPR (EU/EEA/UK), CCPA (California), and similar regulations. These include:

• The right to access your data.
• The right to correct inaccurate data.
• The right to delete your data (“right to be forgotten”).
• The right to export your data in a machine-readable format.
• The right to restrict or object to processing.
• The right to withdraw consent at any time.

You can exercise most of these rights directly from your account settings. For anything else, contact us at [email protected].

7. Security

We use industry-standard security practices: TLS in transit, encryption at rest, row-level security in our database, principle-of-least-privilege access controls for staff, and audit logs for sensitive operations. No system is perfectly secure — if we learn of a breach that affects you, we'll tell you promptly.

8. Children

careers.ai is not intended for users under 16. We do not knowingly collect data from children.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email and/or an in-app notice at least 14 days before taking effect.

10. Contact

Questions, complaints, or data requests: [email protected].