← Career Best

Privacy Policy

Last updated September 4, 2026.

What we collect

  • Account: email, name, a bcrypt hash of your password.
  • Profile: parsed resume text and skills, structured profile fields, and your answer bank (including any EEO/voluntary answers you choose to store — never inferred, only what you type).
  • Activity: agents you create, jobs matched to them, applications you queue, and an audit log of the actions above.
  • Technical: sign-in events with a hashed IP and coarse location (country/city, from the request, not GPS) for security analytics.

How we use it

Only to run the product for you: rank jobs against your resume, let you queue and track applications, and send the notifications you choose. We do not sell your data or use it for advertising. There is no billing/subscription system live yet — when there is, it will be the only monetization; your data still won’t be for sale.

AI processing & sub-processors

The optional résumé-tailoring feature sends your résumé text and a job description to Google’s Gemini API to generate a rewrite. We don’t have a data-processing agreement or a confirmed zero-retention tier with Google in place for this yet — don’t use that feature with anything you wouldn’t want a cloud AI provider to see. No other feature sends your data to an LLM. Other sub-processors: our cloud host (Vercel), database (Supabase/Postgres), and transactional email provider (Resend, once configured).

Security

HTTPS everywhere, standard at-rest encryption from our managed database provider, and every query scoped to your account (verified: a different account gets a 404, not your data). Full detail, including what isn’t built yet, is on the security page.

Retention

We keep your data while your account exists. Delete your account from Settings and everything — profile, resumes, agents, matches, applications, activity — is removed immediately; this is irreversible.

Your rights

Regardless of where you live: you can export a full copy of your data as JSON or delete your account outright, both self-serve from Settings, no request needed. For anything else, contact us. Job ranking is advisory and shown with its reasoning in-app; no decision about you is made solely by automation.

Contact

Privacy questions: contact us.

Plain-language description of the product as it actually works today, not a legal template. Have counsel review it for GDPR/CCPA and your operating markets before treating it as your compliance program.