Privacy Notice

• Account data — name, email, login credentials. Used to create and secure your account (performance of our contract with you).
• Career profile — current and target role, years of experience, education, skills, location, salary expectations, LinkedIn URL. Used to personalise AI analysis (contract).
• Resumes and documents — files you upload and the text extracted from them. Used to run analyses, rewrites and application drafts (contract).
• Application content — jobs, applications, interview answers, offers, chat messages. Used to deliver the features you request (contract).
• Usage and telemetry — feature events, credit usage, device identifiers, IP address, error logs. Used for security, fraud prevention, support and product improvement (legitimate interests).
• Support messages — what you send us. Used to answer you (legitimate interests).
• Marketing emails — only where you have opted in (consent); you can withdraw at any time.

To generate analyses and drafts we send the relevant content — such as your resume text, career profile and job descriptions — to our AI model providers acting as processors on our behalf. We do not sell your data and we do not use your resumes to train third-party public models.

• Service providers and subprocessors: cloud hosting, database and storage, AI model providers, error monitoring and analytics.
• Paddle.com, our Merchant of Record, for the sale of the product, subscription management, payments, tax compliance and invoicing.
• Professional advisers such as legal and accounting, where necessary.
• Authorities where required by law.

Our providers may process data outside your country, including outside the UK/EEA. Where that happens we rely on appropriate safeguards such as adequacy decisions or Standard Contractual Clauses.

We keep your data while your account is active. After you delete your account we remove or anonymise personal data within 90 days, except where we must keep records longer for legal, tax or fraud-prevention reasons. You can delete individual resumes and documents from the app at any time.

Data is encrypted in transit and at rest. Resume files are stored in a private bucket, and every database record is protected by row-level security scoped to your account, so other users cannot read your data. Access by our team is limited and logged.

Subject to local law, you can request access, correction, deletion, restriction, portability, or object to processing, and withdraw consent where processing is based on it. Email support@careerpilot.ai and we will respond within one month. If you are in the UK or EEA you also have the right to complain to your supervisory authority.

We use essential cookies and local storage to keep you signed in and to run the app; these cannot be switched off. Where we use analytics cookies to understand feature usage, you can manage them through your browser settings. We do not use advertising cookies.