Privacy Policy
Effective date: February 23, 2026
1. Who We Are
CareerAssist (“we,” “our,” or “us”) operates the CareerAssist platform — a resume builder and job-search tool. This Privacy Policy explains what personal data we collect when you use our service, how we use it, and the choices you have.
If you have questions, contact us at privacy@careerassist.ai.
2. Information We Collect
2.1 Information you provide directly
- Account information: email address and password (or OAuth tokens from Google or LinkedIn) when you create an account.
- Profile and resume data: work history, education, skills, certifications, projects, contact information, and any other content you enter into your profile or resumes.
- Uploaded documents: existing resumes or LinkedIn exports you upload for parsing.
- Job applications: job titles, companies, links, notes, and status updates you track in the application tracker.
- Billing information: payment details are collected and processed directly by Stripe. We do not store your raw card numbers.
2.2 Information collected automatically
- Usage data: pages visited, features used, button clicks, and session duration.
- Device and browser information: IP address, browser type and version, operating system, and referring URL.
- Cookies and similar technologies: we use session cookies required for authentication. We do not use advertising or cross-site tracking cookies.
2.3 Information from third parties
- OAuth providers (Google, LinkedIn): if you sign in via OAuth, we receive your name, email address, and profile picture as permitted by your account settings with that provider.
3. How We Use Your Information
We use the information we collect to:
- Create and maintain your account and authenticate you securely.
- Store and display your profile and resume data across sessions and devices.
- Power AI features — such as bullet-point rewrites, skill suggestions, and profile-building conversations — by sending relevant portions of your profile data to large language model (LLM) APIs. This data is used solely to generate responses to your requests and is not used to train third-party models.
- Parse documents you upload to pre-fill your profile.
- Process payments and manage your subscription through Stripe.
- Send transactional emails (e.g., email confirmation, password reset).
- Improve the product by analyzing aggregated, de-identified usage patterns.
- Respond to support inquiries and enforce our Terms of Service.
- Comply with applicable legal obligations.
We do not sell your personal data. We do not use your resume content or professional history for advertising.
4. How We Share Your Information
We share your data only in the following limited circumstances:
- Service providers: we share data with trusted sub-processors that help us operate the platform, including:
- Supabase — database, authentication, and file storage (hosted on AWS).
- Stripe — payment processing.
- AI/LLM providers — we send relevant profile snippets to LLM APIs (such as OpenAI) to power AI features. These providers are contractually prohibited from using your data to train their models.
- Legal requirements: we may disclose your data if required by law, court order, or governmental authority.
- Business transfers: if CareerAssist is acquired or merges with another company, your data may be transferred as part of that transaction. We will notify you in advance.
5. Data Retention
We retain your personal data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law or needed to resolve disputes.
Aggregated, de-identified analytics data may be retained indefinitely.
6. Your Rights and Choices
Depending on your location, you may have the following rights:
- Access and portability: request a copy of the personal data we hold about you.
- Correction: update inaccurate or incomplete data (most data can be edited directly in your profile).
- Deletion: request that we delete your account and associated personal data.
- Restriction: ask us to stop processing your data in certain circumstances.
- Objection: object to processing based on legitimate interests.
To exercise any of these rights, email privacy@careerassist.ai. We will respond within 30 days.
You may also opt out of non-essential communications by clicking the unsubscribe link in any marketing email.
7. Data Security
We implement industry-standard safeguards to protect your data, including:
- Encryption in transit (TLS) and at rest.
- Row-level security policies in our database so users can only access their own data.
- Secure, hashed credential storage via Supabase Auth.
- Periodic security reviews.
No system is completely secure. If we discover a breach that affects your personal data, we will notify you as required by applicable law.
8. Children's Privacy
CareerAssist is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it promptly.
9. International Transfers
CareerAssist is operated from the United States. If you access the service from outside the US, your data will be transferred to and processed in the US (and other countries where our service providers operate). By using CareerAssist, you consent to this transfer. We rely on standard contractual clauses and other appropriate safeguards for international transfers where required.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a prominent notice on the platform at least 14 days before the changes take effect. Your continued use of CareerAssist after that date constitutes acceptance of the updated policy.
11. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy, please reach out:
CareerAssistprivacy@careerassist.ai