Privacy Policy

1. Who We Are

CareerID operates the careerid.io platform — a career identity service that helps professionals own, structure, and share their professional stories. This Privacy Policy explains how we collect, use, and protect your personal data.

Questions? Contact us at privacy@careerid.io.

2. Data We Collect

We collect the following categories of data:

3. How We Use Your Data

• Provide, operate, and improve the CareerID platform
• Process your stories and profile data through AI to generate structured output (STAR+ format, resumes, cover letters, interview prep)
• Generate vector embeddings of your stories for semantic job matching
• Send transactional emails (account verification, password reset, notifications you opt in to)
• Detect abuse and enforce our Terms of Service
• Comply with legal obligations

We do not sell your personal data. We do not share your stories or profile with employers unless you generate and send a ProfileView link yourself.

4. AI Processing and Third-Party Services

CareerID uses third-party AI services to power its core features. Your story content is sent to these services to generate responses:

Neither AI provider stores your data beyond processing the request. We do not use your data to fine-tune or train any AI model.

5. Data Storage and Security

Your data is stored in PostgreSQL databases hosted on Railway. Passwords are hashed using bcrypt and never stored in plain text. All traffic is encrypted in transit via TLS. Session tokens are stored in Redis and expire automatically.

We implement reasonable security measures but no system is 100% secure. If you suspect a security incident, contact us at security@careerid.io immediately.

6. Data Retention

We retain your data for as long as your account is active. When you delete your account:

• Your profile, stories, and generated documents are permanently deleted within 30 days
• Vector embeddings associated with your account are deleted
• Shared ProfileView links stop resolving immediately
• Anonymised usage analytics may be retained for product improvement

7. ProfileViews and Public Sharing

ProfileViews are accessible to anyone with the link. You control what appears in each ProfileView. Stories marked prep_only are never included in any ProfileView regardless of your settings.

If you share a ProfileView with an employer or a third party, that third party's handling of the information is outside our control.

8. Cookies and Tracking

We use essential cookies and session tokens to keep you logged in. We do not use advertising cookies or cross-site tracking. We may use anonymised analytics to understand aggregate usage patterns.

9. Your Rights

Depending on your location, you may have rights including:

• Access — request a copy of the data we hold about you
• Correction — update inaccurate or incomplete data
• Deletion — request erasure of your personal data
• Portability — export your stories and profile data in a machine-readable format
• Objection — object to certain types of processing

To exercise any of these rights, email privacy@careerid.io. We will respond within 30 days.

10. Children's Privacy

CareerID is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with data, contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or via an in-app notice. The "Last updated" date at the top indicates when the policy was last revised.

12. Contact

For privacy-related queries, contact us at privacy@careerid.io.