Privacy policy

This covers the information we collect when you use CareerAI (“the Service”), operated by CareerAI Labs, Inc.

Short version: we collect what we need to run the product, nothing more. We don’t sell your data. You can export or delete everything from Settings.

What we collect

When you create an account

• Your email address and a hashed password (via Supabase Auth).
• An optional display name.

When you use the app

• Your resume — the file you upload, a parsed structured representation of it, a numerical embedding of the text used for ranking, and any version you save.
• Job searches — the queries you run. We cache listings from Adzuna for six hours; that cache is shared across users.
• Matches, applications, cover letters, coach messages — the output of the product. Scoped to your account only.
• Usage counters— how many chats, cover letters, and match recomputes you’ve run in the last day or month, so we can enforce free-tier limits.
• Basic telemetry — server logs (URL, status code, response time) and error reports from Sentry. We do not attach personally identifying information beyond your user ID.

When you subscribe

• Square processes your card and sends us a customer ID and subscription ID. We never see your card number, expiry, or CVV.
• We record each payment (amount, date, type) so you can see your billing history.

How we use it

• To run the product you signed up for.
• To improve your matches and drafts. AI calls go to Amazon Bedrock in the US, using Anthropic and Cohere models. These calls are not used by those providers to train future models.
• To enforce plan limits and stop abuse.
• To email you: account confirmation, password reset, payment receipts, and occasional product updates you can opt out of.

We do not sell your data. We do not share it with advertisers. We do not use it to train models.

Who we share it with

We use a small set of service providers, each for a specific job:

• Supabase — database, authentication, file storage.
• AWS (Bedrock, us-east-1)— AI inference. Your prompts include your resume and job descriptions; they’re processed and discarded.
• Adzuna — job listings. We send them search queries.
• Square — payment processing.
• Vercel — hosting and edge/serverless runtime.
• Resend — transactional email.
• Sentry, PostHog, Upstash — error reporting, product analytics, rate limiting. Minimal, non-identifying data.

We will disclose information if we’re legally compelled to. We’ll tell you when that happens unless we’re prohibited from saying so.

How long we keep it

• Active account: as long as your account is open. You can delete any resume, application, match, or cover letter at any time from the app.
• Deleted account: we hard-delete on request. Payment records required for tax or fraud compliance may be retained up to seven years.
• Server logs: 30 days.

Your rights

Wherever you live, you can:

• Access — download a full JSON export of your data from Settings → Export your data.
• Delete — permanently delete your account and everything we hold from Settings → Danger zone.
• Correct — edit your resume, notes, and drafts from within the app.
• Object — email hi@trycareerai.com to ask us to stop processing in any specific way.

GDPR and CCPA residents have the same rights, already built into the app. If you want to exercise them by email rather than in the UI, we respond within 30 days.

Children

The Service is not for anyone under 16. We don’t knowingly collect data from children. If you believe we have, email us and we’ll delete it.

Cookies

We set one essential cookie to keep you signed in (a Supabase session). We use localStorage to remember that you dismissed the onboarding tour. That’s it — no tracking cookies, no third-party analytics cookies.

Changes

If this policy changes in a material way, we’ll email you before it takes effect. Minor edits (typos, clarifications) land without notice.

Contact

Questions or requests: hi@trycareerai.com.