Privacy Policy

3.1 Personal Information You Provide

• Name and email address (via account registration)
• Professional history, skills, and experience
• Resume and career-related documents
• Goals, milestones, and career development notes
• Internship and work experience details

3.2 Information Collected Automatically

• Device information and browser type
• Usage patterns and feature interaction data
• Performance and error data, including privacy-masked session replays captured around errors (via Sentry) — see §6 and §7. Whether these are on by default depends on your region (opt-in in the EEA, UK, and Switzerland; on by default and opt-out in the US and most other regions). Session replay only captures around an error, and all on-screen text and images are masked
• Analytics data (via PostHog, routed through our first-party domain)

3.3 AI-Generated Data

• Career insights and recommendations
• Resume optimization suggestions
• Skills analysis and competency assessments
• Interview preparation content

We process your personal data under the following legal bases:

• Contract performance (Art. 6(1)(b)) — to provide the Service, manage your account, deliver career development features, and provide AI-powered career insights (AI is a core component of the service as described in our Terms of Service)
• Consent (Art. 6(1)(a)) — for analytics, performance monitoring, and session replay. Managed via the cookie consent banner on web and via in-app privacy settings (onboarding and Settings → Privacy & Data) on mobile. You may withdraw consent at any time; on mobile, replay changes take effect on the next app launch
• Legitimate interest (Art. 6(1)(f)) — for security monitoring, fraud prevention, and service improvement
• Legal obligation (Art. 6(1)(c)) — to comply with applicable laws and regulations

CareerCard uses artificial intelligence as a core component of the service to provide personalized career insights. We process your career data (professional history, skills, goals, and documents) through AI models to generate recommendations, optimize resumes, and provide career guidance.

AI Data Safeguards

• We send only the content needed for the feature you are using. For resume features, sensitive categories — compensation, private notes, and performance-review feedback — are excluded from AI processing entirely
• Where the provider supports it (for example, OpenAI), AI API calls are sent with store: false so your data is not persisted by the provider as conversation state or used to train or evaluate their models. Across all of our AI providers, the API terms we operate under do not permit using your submitted data to train their models. Providers may retain transient abuse-monitoring logs for a limited period under their own terms
• Your content is passed to the model as labeled data (not as instructions), and prompt-injection attempts are screened via Azure Content Safety
• AI-generated content is clearly distinguishable from user-created content

Consent and Preference Controls

CareerCard uses two separate frameworks for managing data processing preferences:

Cookie & Tracking Preferences (Consent-based, ePrivacy)

How these optional categories default depends on your region. In the EEA, UK, and Switzerland they are off until you opt in — we ask for your consent (via the cookie banner on the web, or during onboarding and in Settings → Privacy & Data in the mobile app) before enabling them, and you can withdraw it at any time in the same place. In the United States and most other regions they are on by default and you can turn them off at any time using the same controls. The categories are:

• Analytics — usage analytics for service improvement (PostHog)
• Functional — enhanced features and personalization
• Performance — error reporting, performance monitoring, and privacy-masked session replay around errors (Sentry). Defaults follow the regional rule above (off until opt-in in the EEA/UK/Switzerland; on by default and opt-out elsewhere). Session replay only captures around an error, with all text and images masked. (On mobile, the same Sentry diagnostics ride on the “Share Usage Analytics” setting rather than a separate Performance toggle.)

You may withdraw consent for any cookie category at any time via the cookie banner or your account privacy settings. Withdrawal of consent does not affect the lawfulness of processing performed before withdrawal (GDPR Art. 7(3)).

AI Processing (Contractual, with opt-out)

AI processing is a core component of the CareerCard service, performed under contractual necessity (GDPR Art. 6(1)(b)) as described in our Terms of Service. AI features are enabled by default when you use the service. You may opt out of AI processing at any time in your account settings or on the mobile app. Opting out will disable AI-powered features such as career suggestions, performance review generation, and resume optimization.

The AI opt-out is a contractual preference, not a withdrawal of consent. It takes effect immediately and does not affect other aspects of the service.

We use the following third-party services to operate CareerCard. Each processes data only as necessary for its stated purpose:

We require every third-party service provider and sub-processor that handles your personal data to be bound by a written data processing agreement obligating them to provide at least the same level of protection for your data as set out in this Privacy Policy, and to process it only on our instructions for the purpose stated.

• User content (career cards, notes, documents) — retained until you delete your account
• Error reports & session replays (Sentry) — retained for 90 days, then automatically deleted
• Audit logs — retained for 90 days, then automatically deleted
• Notifications — retained for 90 days, then archived and deleted
• Consent records — retained indefinitely as required for GDPR compliance
• AI processing logs — contain metadata only (no user content); retained for compliance

When you delete your account, your personal data is deleted across our systems. A limited set of records is retained where required by law or for legitimate compliance needs — consent audit logs and data-subject-request records (as proof of compliance), and anonymized billing records (retained by our payment processor to meet financial-reporting obligations).

• All data encrypted in transit (TLS 1.2+) and at rest
• Authentication via WorkOS with multi-factor authentication (MFA) support
• Content Security Policy with per-request cryptographic nonces
• Rate limiting throughout the Service, brute-force protection on sign-in (via WorkOS), and progressive account lockout on sensitive account operations
• Automated dependency vulnerability scanning
• Regular security assessments

If a data breach affects your personal data, we will notify you and the relevant supervisory authorities without undue delay, as required by applicable law.

Under GDPR and other applicable data protection laws, you have the right to:

• Access (Art. 15) — request a copy of your personal data
• Rectification (Art. 16) — correct inaccurate personal data
• Erasure (Art. 17) — request deletion of your personal data
• Portability (Art. 20) — receive your data in a machine-readable format
• Restriction (Art. 18) — restrict processing of your data
• Object (Art. 21) — object to processing based on legitimate interest (e.g., security monitoring, service improvement)
• Withdraw consent (Art. 7(3)) — withdraw consent for analytics, functional, and performance tracking at any time via the cookie banner or privacy settings. This applies to consent-based processing categories only
• AI opt-out — disable AI processing at any time via your account settings. This is a contractual preference (see Section 6), not a consent withdrawal or Art. 21 objection

Automated decision-making (Art. 22): CareerCard's AI features are assistive tools that generate suggestions and drafts for your review. No decision with legal or similarly significant effect is made solely by automated means. All AI outputs are advisory and require your review before use.

California residents (CCPA/CPRA): You have the right to know what personal information we collect and how we use it, to access and delete it, to correct inaccurate information, and to not be discriminated against for exercising these rights. We do not sell your personal information, and we do not share it for cross-context behavioral advertising (as “sell” and “share” are defined under California law). You can still manage optional analytics and diagnostics at any time using the “Your Privacy Choices” control, the cookie banner, or your account privacy settings, and on the web we honor Global Privacy Control (GPC) signals automatically. Because we do not use sensitive personal information to infer characteristics about you, the right to limit the use of sensitive personal information does not apply.

To exercise any of these rights, use the in-app settings or contact us at support@careercard.ai. We will respond within 30 days (or sooner if required by law).

We use a deliberately small set of first-party cookies. We do not use third-party advertising or cross-site tracking cookies, we do not track you across other companies' apps or websites, and we do not use advertising identifiers. The cookies we set on the web app are:

Essential cookies cannot be disabled because the Service cannot function without them (they store your consent choice and keep you signed in); they set no analytics or advertising identifiers.

Our analytics and error-monitoring tools deliberately avoid cookies: PostHog (analytics) stores its state in localStorage, routed through our first-party domain at /ph, and Sentry (error monitoring / opt-in session replay) sets no cookies at all. Both run only with your consent (Analytics / Performance categories). If a cookie write is blocked, your consent choice falls back to localStorage instead.

You can review or change these choices at any time: signed-in users in your account privacy settings (Settings → Privacy), and visitors via the “Your Privacy Choices” / “Cookie Preferences” control on this page. If your browser sends a Global Privacy Control (GPC) signal, we honor it automatically and keep the optional categories off.