Privacy Policy

1. What we collect

We collect only what the Service needs to work:

• —Account data — email address, name, and profile image from your sign-in provider
• —Work content — files you upload and pages we read from tools you connect, plus the career records and achievements generated from them
• —Usage data — product events such as sign-up, source connected, results viewed, and purchases, used to understand whether the Service works
• —Payment records — a record that a purchase happened and how many credits were granted. Card details never reach our servers

2. How we use it

To operate the Service: parse your material, generate results, keep track of your credit balance, and show you your account.

To improve the Service: aggregate usage patterns and AI cost measurements.

To communicate with you about your account or a support request.

We do not sell your data, and we do not use your content to train AI models.

3. Processors we use

We share data with a small number of service providers, only as needed to run the Service:

• —Supabase — database, authentication, and file storage
• —Anthropic — AI processing of your work content to produce results. Content sent to the model is not used for training
• —Paddle — payment processing as Merchant of Record
• —PostHog — product analytics
• —Vercel and Cloudflare — hosting and network delivery

4. Connected tools

When you connect a tool such as Notion, we request read access to the pages you select. We store an access token securely and use it only to read the material you approved and to detect changes when you ask for a re-sync.

You can disconnect a source at any time, which revokes our access.

5. Retention and deletion

We keep your data while your account is active. When you delete your account, your profile, connected sources, career records, achievements, and resumes are deleted.

Two exceptions are kept for legal and operational reasons, with your identifier removed so the records are no longer linked to you: payment ledger entries (needed for tax and dispute handling) and AI usage measurements (used only to calculate operating costs in aggregate).

6. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to certain processing.

To exercise any of these, contact support@careercollector.com.

7. Security

Data is encrypted in transit and at rest. Access to your records is enforced at the database level so that one account cannot read another. Access tokens for connected tools are stored in a dedicated secrets store rather than alongside application data.

8. International transfers

Our providers may process data outside your country. Where required, transfers rely on appropriate safeguards such as standard contractual clauses.

9. Changes and contact

We may update this policy; material changes will be announced in the Service. Questions: support@careercollector.com