Privacy Policy

CareerMatch ("we", "us") helps job seekers tailor their CV to individual vacancies. This policy explains what personal data we process, why, and how you stay in control of it. We only collect what the product needs to work.

What we collect

• Account data — your email address, your name if you provide it, and authentication data. If you sign in with Google, we receive your email address and basic profile from Google.
• CV content — the text of the CVs you upload or paste, and the tailored CVs generated for you.
• Job applications — job descriptions you paste, match scores, and the status you set.
• Billing data — plan, subscription status and payment history. Card details are handled entirely by Stripe; we never see or store them.
• Security data — limited technical records such as rate-limit and security events, including IP address, kept to protect accounts from abuse.

Cookies and marketing attribution

We use a small number of strictly necessary cookies and browser storage entries to keep you signed in and to remember your theme choice; these are required for the service to work. With your consent, we also store campaign parameters (utm_source, utm_medium, utm_campaign, utm_content and utm_term) from the link you arrived on, together with a random visitor identifier, the page you landed on and the referring website. This tells us which marketing campaigns bring people to CareerMatch, and it is linked to your account if you sign up.

We ask for that consent in the cookie banner the first time you visit. If you decline, no campaign or analytics data is sent to our servers and the values are discarded when you close the tab. You can change your mind at any time by clearing your browser storage for this site, which brings the banner back. We do not use advertising cookies or share this data with third-party ad networks.

How we use it

• To provide the service: analysing your CV against a vacancy, generating and storing tailored CVs.
• To manage your account, subscription and payments.
• To keep the service secure and prevent abuse.
• To send service emails such as account confirmation and password resets.

We do not sell your data, and we do not use your CV content for advertising. Your CV content is not used to train third-party AI models.

AI processing

To produce a match score and a tailored CV, the relevant CV text and job description are sent to our AI provider for processing on our behalf and returned to you. The AI is instructed to use only the information in your CV — it must not invent employers, qualifications, skills or dates.

Who we share it with

• Hosting and database — our cloud infrastructure provider, which stores your account and CV data.
• AI provider — for the analysis and generation steps described above.
• Stripe — for payments, subscriptions and invoices.

We may also disclose data where we are legally required to do so.

Security

All traffic is encrypted in transit over HTTPS. Data is encrypted at rest by our infrastructure provider. Every request is authenticated on the server and access rules ensure you can only read and write your own records. Sensitive credentials are held in server-side environment variables and never exposed to the browser. Rate limiting protects sign-in and expensive operations from abuse.

How long we keep it

We keep your account and CV data for as long as your account exists. You can delete individual CVs and applications at any time. Deleting your account removes your profile, CVs, applications and usage records, and cancels any active subscription. Limited billing records may be retained where required by law.

Your rights

Depending on where you live, you have rights to access, correct, export or delete your personal data, and to object to certain processing. You can exercise most of these directly in Settings, or contact us and we will help.

Children

CareerMatch is not intended for anyone under 16 years old.

Changes

If we make material changes to this policy we will update the date above and, where appropriate, notify you by email.

Contact

For any privacy question or request, email privacy@careermatch.dev.