Privacy Policy

CareerStudioAI is operated by [COMPANY LEGAL NAME] (“we”, “us”, or “our”). This policy explains what information we collect when you use careerstudioai.com, the app, and the share links it creates (the “Service”), how we use it, and the choices you have. It should be read with our Terms of Service.

• Account information: your email address, a securely hashed password managed by our authentication provider, and records of when you agreed to our terms.
• Resume and profile information: what you enter or import, such as your name, contact details, headline, work history, education, skills, certifications, links, portfolio items, and any documents you upload (PDF, DOCX, or text). This is personal data and may include anything you choose to put in a resume.
• Photos and videos: a profile photo, portfolio media, or an intro video, if you add them.
• Job and application information: job descriptions and links you add or save, the employers you apply to, application status changes, and the materials generated for each application.
• AI-generated content: the resumes, letters, research, plans, proposals, images, and other outputs the Service creates for you.
• Payment information: your plan, subscription status, credit balance, and transaction records. Card details are collected and stored by Stripe, not by us.
• Usage information: AI usage and cost records, when your share links were last viewed, pages visited and the referring page, and technical data such as IP address, browser type, and device information in server and security logs.

Please do not include government ID numbers, financial account numbers, health information, or other sensitive data that a job application does not need.

• to provide the Service, including generating application materials from your profile and the jobs you choose;
• to run share links you create and show you when they were viewed;
• to process payments, manage plans and credits, and enforce usage limits;
• to secure the Service, prevent abuse, and fix problems;
• to respond to you and send service messages, such as account confirmation and password reset emails;
• to understand how the Service is used so we can improve it;
• to comply with law.

We do not sell your personal information, and we do not use your resume or profile content to train our own AI models. [CONFIRM MARKETING EMAIL PRACTICES AND LEGAL BASES FOR PROCESSING.]

To generate content, the Service sends the relevant parts of your profile, documents, and the job you selected to AI providers: OpenAI for text and images, and Google for video features when they are enabled. These providers process the data to return a result to us under their API terms. [CONFIRM EACH PROVIDER’S DATA RETENTION AND TRAINING TERMS.] AI outputs are reviewed by you, not by us, before you share them.

• Service providers that operate the Service for us: Supabase (database, file storage, and authentication), Vercel (hosting), OpenAI and Google (AI processing), Stripe (payments), and Google Analytics (website analytics).
• Job boards and job APIs: when you search for jobs, your search keywords and location are sent to the job sources that are enabled (for example Adzuna, USAJOBS, JSearch via RapidAPI, Jooble, The Muse, Remotive, RemoteOK, and Arbeitnow). Your profile and resume are not sent to them.
• Employer websites: when you research an employer, the Service fetches the job link and pages of the employer’s public website. Those sites see a request from our servers, not your profile.
• People you share with: anyone with a share link you create can see the package or profile behind it until you revoke the link.
• Legal and safety: when required by law, or to protect the rights, property, or safety of our users, the public, or us.
• Business transfers: as part of a merger, acquisition, or sale of assets, subject to this policy.

• Essential cookies keep you signed in and protect your session. The Service does not work without them.
• Analytics: we use Google Analytics, which sets cookies to measure visits and page usage. We also keep a first-party record of page views (the page path and referring page) in our own database, and use your browser’s session storage to avoid counting the same visit twice.

You can block or delete cookies in your browser settings, and you can opt out of Google Analytics with Google’s browser add-on. Blocking essential cookies will prevent sign-in. [CONFIRM WHETHER A COOKIE CONSENT BANNER IS REQUIRED FOR YOUR AUDIENCE.]

We keep your information while your account is active. When you delete your CareerStudioAI data, we remove it from our active systems; copies in backups are removed on our backup schedule ([BACKUP RETENTION PERIOD]). We keep payment and transaction records as long as tax and accounting law requires.

• Access and export: download a copy of your CareerStudioAI data from the Account page.
• Correction: edit your profile and documents in the app at any time.
• Deletion: permanently delete your CareerStudioAI data from the Account page. This removes your profile, documents and files, jobs, applications, generated content, share links, and usage records. Deleting your data does not cancel a paid subscription, so cancel your plan first. To close your sign-in account itself, email [CONTACT EMAIL].
• Share links: revoke any share link at any time.
• Depending on where you live (for example the EU, the UK, or California), you may have additional rights, such as to object to or restrict processing, to data portability, or to complain to a data protection authority. To make a request, contact [CONTACT EMAIL]. We will not discriminate against you for exercising your rights.

We use encryption in transit, private file storage that is only reachable through the app, per-user access controls in our database, and revocable, unguessable share links. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

We and our service providers may process your information in the United States and other countries. [CONFIRM HOSTING REGIONS AND TRANSFER MECHANISMS, SUCH AS STANDARD CONTRACTUAL CLAUSES.]

The Service is not intended for anyone under [MINIMUM AGE], and we do not knowingly collect information from them.

We may update this policy. If a change is material, we will notify you in the Service or by email before it takes effect.

[COMPANY LEGAL NAME]
[POSTAL ADDRESS]
[CONTACT EMAIL]