Privacy Policy

What we collect

Information you provide directly: your name, email address, phone number, LinkedIn URL, resume and other uploaded document content, job preferences, and saved job applications (including job descriptions you save). API keys you supply for third-party AI providers are encrypted (AES-256-GCM) at rest and never stored in plaintext. If you use the browser-extension auto-apply feature, your LinkedIn sign-in credentials are stored encrypted the same way, solely so the extension can act on your behalf in your own browser — we do not read them in plaintext, and you can delete them at any time.

How we use it

Your data is used solely to operate the CareerCraft AI platform on your behalf. We run agents using the models and credentials you configure. We do not sell, share, or train on your personal data.

Data storage

Data is stored in a self-hosted PostgreSQL database. Resume and document text is also embedded into a vector index (pgvector), tied to your account, so agents can retrieve relevant context — this embedding is stored alongside your account and is deleted with it. Your resume and agent outputs are stored in your account namespace and accessible only to you.

Third parties we use

Clerk handles sign-in and issues the session cookie described below. Your own configured AI provider (OpenAI, Anthropic, Google, or others you connect) receives the content needed to run the agent you invoke — for example your resume text when tailoring a resume. If you connect Gmail or Google Drive, that access goes through Nango, a credential broker; we never see your Google password. Interview-prep video suggestions link to YouTube thumbnail images only — no video is embedded on the page, and no YouTube cookie is set unless you click through to youtube.com.

Cookies

We use session cookies for authentication only (set by Clerk, our sign-in provider). No advertising or third-party tracking cookies are used. See our Cookie Policy for the full list.

Your rights

You can download every record we hold about you at any time from Settings → Account → Your data — a ZIP of every table tied to your account, generated on demand, no request needed. You may request deletion of your account at any time from Settings → Account → Danger zone. Deletion isn't instant: it starts a 15-day grace period, during which your account stays fully usable and you can cancel from that same page (or it's cancelled automatically the next time you open the app after leaving). Once the grace period passes, your account and all associated data are permanently removed.

If you're in India, under the Digital Personal Data Protection Act, 2023 you have the right to access a summary of your personal data and the processing we do with it (the download above fulfills this immediately), to correct or update it, to have it erased once it's no longer needed for the purpose you gave it for, and to file a grievance with us — and, if unresolved, with the Data Protection Board of India.

If you're in the EEA, UK, or a jurisdiction with similar data-protection law, you also have the right to access, correct, or export your data, and to object to or restrict certain processing. Contact us using the details below for either.

Children

CareerCraft AI is not directed at children under 16, and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will remove it.

Contact

Questions? Email us at privacy@careercraftsai.me.

CareerCraft, Bangalore, Karnataka, India.