Privacy Policy

We use the information we collect to:

• Provide, maintain, and improve our Service
• Create and manage your account
• Process payments and send related information
• Send administrative emails and service updates
• Respond to your inquiries and customer support requests
• Monitor and analyze trends, usage, and activities
• Detect, prevent, and address fraud and security issues
• Personalize and improve user experience
• Send promotional communications (with your consent)
• Comply with legal obligations

We do not sell, trade, or rent your personal information to third parties. We may share your information only in these circumstances:

• Supabase: Our database and authentication provider stores your account data and resume content on servers in the United States
• OpenAI: Resume content, cover letter text, and elevator pitch data submitted through AI features is processed by OpenAI, L.L.C. to generate responses. OpenAI does not use this data to train their models under our API agreement
• Stripe: Payment processing information is shared with Stripe, Inc. to process transactions securely
• Google AdSense: If you consent to cookies, advertising data may be shared with Google LLC for ad personalization
• Legal Requirements: When required by law, court order, or government request
• Business Transfer: In the event of merger, acquisition, or asset sale, your information may be transferred
• With Your Consent: When you explicitly consent to share information

We use a cookie consent banner on your first visit. Analytics and advertising cookies are only loaded after you give explicit consent. Essential cookies (for login sessions and security) are always active.

• Essential cookies: Required for authentication and security - always active
• Analytics cookies: Help us understand how you use our Service - loaded only with consent
• Advertising cookies: Used by Google AdSense to show relevant ads - loaded only with consent

You can withdraw consent at any time by clearing your browser's localStorage for careergraph.co, or by contacting us. You can also control cookies through your browser settings.

We implement robust security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These include:

• SSL/TLS encryption for data in transit
• Secure password hashing and authentication
• Regular security audits and updates
• Access controls and role-based permissions
• Compliance with industry security standards

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request access to your personal data
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your data (right to be forgotten)
• Portability: Request your data in a portable format
• Withdrawal: Withdraw consent for data processing
• Opt-out: Opt-out of marketing communications

To exercise any of these rights, please contact us at support@careergraph.co. Your privacy rights are protected under Canadian privacy legislation, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.

Our Service is intended for users who are at least 14 years of age. We do not knowingly collect personal information from anyone under 14. If we become aware that we have collected personal information from a person under 14, we will take steps to delete such information and terminate the account promptly.

We retain your personal information for as long as your account is active and as needed to provide our Service. Specifically:

• Account data (name, email, resume content) is retained while your account remains active
• Upon account deletion, your personal data is deleted within 30 days, except where retention is required by law
• Payment records are retained for 7 years as required by tax and financial regulations
• Anonymized usage data may be retained indefinitely for analytics purposes

To request account deletion, contact us at support@careergraph.co.

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the applicable regulatory authority as required under PIPEDA and applicable provincial privacy laws. Notification will be provided without undue delay, and in any case within 72 hours of becoming aware of the breach where feasible. Notification will include a description of the breach, the data involved, and steps we are taking to address it.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, and other factors. We will notify you of any material changes by posting the updated policy on our website with an updated "Last updated" date. Your continued use of our Service constitutes your acceptance of the updated Privacy Policy.

If you have any questions about this Privacy Policy or our privacy practices, please contact us at: