Privacy Policy
Last updated: June 2026 · Applies to all users globally
1. Who We Are
CareerAI Architect ("Platform", "we", "us") is an AI-powered career management service. This policy explains how we collect, use, and protect your personal data in compliance with the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act / California Privacy Rights Act (CCPA/CPRA).
Contact: privacy@careeraiarchitect.com
2. Data We Collect
| Category | Examples | Legal Basis (GDPR) |
|---|---|---|
| Identity | Full name, email address | Contract (Art. 6.1.b) |
| Professional | CV, work history, skills, job applications | Contract (Art. 6.1.b) |
| Technical | IP address, session token, browser type | Legitimate interest (Art. 6.1.f) |
| Behavioural | Platform activity, feature usage | Consent (Art. 6.1.a) |
| Financial | Payment method (processed by Stripe, not stored by us) | Contract (Art. 6.1.b) |
| Video / Biometric (optional) | Interview video analysis is currently DISABLED. If enabled in the future, video frames would be processed by our AI provider (OpenAI) with your separate explicit consent, and deleted immediately after analysis — we will update this policy and ask for your consent before activating it | Explicit consent (Art. 9.2.a) — feature inactive |
3. How We Use Your Data
- Providing and improving the Platform services
- AI-powered analysis of your CV and job applications
- Sending transactional emails (account verification, password reset)
- Marketing emails — only with your explicit consent, which you may withdraw at any time
- B2B reporting for company administrators (aggregate, anonymised where possible)
4. Third-Party Processors
We share data with the following sub-processors. Each has signed Standard Contractual Clauses (SCCs) for transfers outside the EEA:
Your CV/job text is sent; name & email are not included
We do not store card details; Stripe is PCI-DSS compliant
Only if you connect your Google Calendar
5. Data Retention
- Profile and job data: retained while your account is active
- Activity logs: deleted after 12 months
- Messages: deleted after 24 months
- On account deletion: data anonymised within 30 days
6. Your Rights
Access
Request a copy of all data we hold about you
Deletion
Delete your account and all associated data
Portability
Download your data in machine-readable format
Rectification
Correct inaccurate personal data
Objection
Object to automated AI decisions
Withdraw Consent
Opt out of any consent-based processing at any time
To exercise any right: Settings → Account → Delete Account or Download My Data, or email privacy@careeraiarchitect.com.
7. California Residents (CCPA/CPRA)
- We have not sold your personal information in the past 12 months.
- We do not share sensitive personal information for cross-context behavioural advertising.
- You have the right to know, delete, correct, and opt-out of sale/sharing.
- We will not discriminate against you for exercising your CCPA rights.
8. Changes to This Policy
We will notify you by email and update the date at the top of this page if we make material changes. Continued use of the Platform after changes constitutes acceptance.