Privacy Policy

1. Who we are

CareerDoc ("we", "us", "our") is an AI-powered job application assistant. Our service helps you build a profile, generate tailored CVs and cover letters, autofill application forms, and track your job search. Questions about this policy can be sent to support@careerdoc.app.

2. What data we collect

We collect only what is necessary to provide the service:

• Account data — your name and email address when you register.
• Profile data — work history, education, skills, and any other information you enter or upload (e.g. your CV).
• Job application data — job posts you scan, companies you apply to, application status, and fit scores.
• Generated documents — CVs and cover letters we create for you, stored so you can download them again.
• Usage data — which features you use and how often, to enforce plan limits and improve the service.
• Integration data — if you connect Gmail or Google Calendar, we store an OAuth token to act on your behalf. We access only the scopes you grant.

3. How we use your data

• To provide and personalise the service — matching your profile to job descriptions and generating documents.
• To process job applications — sending emails or filling forms when you instruct us to.
• To enforce plan limits and prevent abuse.
• To send transactional emails — account confirmation, password reset, and service notices.
• To improve the service — aggregated, anonymised analytics only.

We do not sell your data. We do not use your CV or profile to train AI models without your explicit consent.

4. Third-party services

We use the following sub-processors to deliver the service:

• Supabase — authentication and database hosting (EU region available).
• OpenRouter / Google Gemini — AI processing. Your profile and job data are sent to generate documents. Google's data-use policies apply to Gemini API calls.
• Amazon Web Services (AWS) — server hosting in the US East region.
• Google OAuth — if you connect Gmail or Calendar integrations.

Each sub-processor is bound by data processing agreements and is not permitted to use your data for their own purposes.

5. Data retention

We keep your data for as long as your account is active. Generated documents are stored for 90 days after creation, after which they are deleted from our servers. You can delete your account at any time, which permanently removes all your personal data and documents within 30 days.

6. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data. To exercise any of these rights, email us at support@careerdoc.app. We will respond within 30 days.

7. Cookies and local storage

We use browser local storage to keep you logged in (session tokens). We do not use third-party tracking cookies or advertising pixels.

8. Security

All data is transmitted over HTTPS. Passwords are never stored — authentication is handled by Supabase. Access tokens are short-lived (60 minutes) and refresh tokens are rotated on use.

9. Changes to this policy

We may update this policy from time to time. We will notify you by email and update the "Last updated" date above. Continued use of the service after changes constitutes acceptance.

10. Contact

For any privacy questions or requests, contact us at support@careerdoc.app.