Privacy Policy
for CareerOS-AI
This Privacy Policy explains what information CareerOS-AI collects, how we use it, who we share it with, and the rights you have. We aim to be plain-spoken — if any section is unclear, tell us.
By using CareerOS-AI you consent to the practices described in this policy and to our Terms and Conditions.
01Who we are
CareerOS-AI ("CareerOS", "we", "our", or "us") operates the CareerOS-AI website, mobile apps, and AI-powered career tools available at careeros-ai.com.
CareerOS-AI is headquartered in Ontario, Canada. This policy is written to reflect Canadian federal privacy law (PIPEDA) and Ontario privacy principles, and to be transparent to users in every country we serve.
02What we collect
We collect only what we need to provide, secure, and improve the Service.
Account & profile data — email, name, password (hashed), date of birth (optional), country, region/state, city, timezone, preferred currency, career stage, industry, and any information you enter into your profile, resume, or goals.
Content you create — resumes, cover letters, chat messages with our AI, interview transcripts, financial-plan inputs, portfolios, and any documents you upload.
Usage & technical data — IP address, browser type and version, device type, referrer, timestamps, and interactions with features (used to detect abuse, debug, and improve product decisions).
Payment data — handled by our payment processor (Stripe). We do not store full card numbers on our servers; we retain only a payment reference, plan, and billing status.
Cookies & local storage — see our Cookie Policy.
03How we use your data
- Deliver the Service — generate AI advice, benchmark salaries, match jobs, produce roadmaps, run financial simulations, and personalize your experience.
- Localize responses — every AI prompt uses your country, region, currency, and timezone so guidance is locally accurate (see our AI Usage Policy).
- Communicate with you — transactional emails (password resets, receipts, security alerts) and, where you opted in, product updates.
- Bill and manage subscriptions.
- Protect the Service — detect abuse, fraud, spam, brute-force attempts, and prevent account takeovers.
- Comply with legal obligations and enforce our Terms.
We do not sell your personal information.
04Legal bases (users in the EU / UK / applicable regions)
Where the GDPR or UK GDPR applies, we process your data on the following legal bases:
- Contract — to provide the Service you signed up for.
- Legitimate interests — to secure the Service, prevent abuse, and improve the product.
- Consent — for optional communications, non-essential cookies, and any use we ask you to opt into.
- Legal obligation — where we must retain or disclose data to comply with law.
05AI processing & third-party model providers
To generate AI responses we send prompts and profile context to third-party model providers such as Anthropic (Claude), OpenAI (GPT), and Google (Gemini). These providers process the data strictly to produce the response you requested.
Our provider agreements specifically prohibit them from using your prompts or CareerOS content to train their public models. Where a provider offers zero-data-retention or short-retention API tiers, we use them.
See our AI Usage & Responsible AI Policy for full details.
07International data transfers
Because CareerOS-AI is cloud-based and integrates with global providers, your data may be processed in Canada, the United States, and other countries in which our vendors operate.
Where required by law we rely on Standard Contractual Clauses, adequacy decisions, or equivalent safeguards to protect data in transit.
08Data retention
We keep your data only as long as we need it. See our Data Retention Policy for exact periods per data category.
You can delete your account at any time from Settings, which removes your profile and content from active systems.
09Your rights
Depending on your jurisdiction you may have some or all of the following rights:
- Access — request a copy of the data we hold about you.
- Correction — fix inaccurate data.
- Deletion — request deletion of your account and data.
- Portability — receive your data in a machine-readable format.
- Objection or restriction — object to certain uses of your data.
- Withdraw consent — for anything you consented to.
- Complaint — lodge a complaint with your local data-protection authority (in Canada, the Office of the Privacy Commissioner; in the EU, your national DPA; in the UK, the ICO; in California, the CPPA).
To exercise any right, use the controls in Settings or email support@careeros-ai.com. We respond within 30 days.
10Security
We take reasonable and appropriate measures to protect your data: TLS in transit, encryption of sensitive fields at rest, hashed passwords (bcrypt), least-privilege access controls, rate limiting, and audit logging. See our Security Policy.
No system is 100% secure. If we ever discover a breach that materially affects you, we will notify you and the appropriate regulators without undue delay.
11Children
CareerOS-AI is not directed to children under 16. We do not knowingly collect data from anyone under 16. If you believe a child has provided data to us, contact us and we will delete it.
12Changes to this policy
We may update this Privacy Policy. Material changes will be communicated via the website, in-app notice, or email where required. The "Last Updated" date at the top of this page reflects the current version.
13Contact us
Questions or requests?
CareerOS-AI — Privacy
Email: support@careeros-ai.com
Website: https://www.careeros-ai.com