Privacy Policy

Account & identity data. Name, email address, password (stored as a salted hash, never in plain text), and authentication metadata when you sign up or sign in.

Career & profile data you provide. Resumes, career stories, work history, target roles, dossiers, application tracking data, uploaded documents, and any other content you submit into your workspace ("User Content").

Voice & telephone data. If you use the phone-based or voice advisor feature, we process call audio, call metadata (number, duration, timestamps), and machine-generated transcripts through our voice and telephony providers to deliver that feature.

Payment data. If you purchase a paid plan or one-time credit, our payment processor collects and stores your card and billing details directly. We do not receive or store your full card number.

Usage & device data. IP address, browser and device type, pages viewed, referring URLs, and interaction events, collected automatically via standard web logs and analytics tooling.

Cookies. Session cookies to keep you signed in, and, where enabled, analytics and bot-protection cookies. See Section 7.

• Operate, maintain, and secure your account and workspace.
• Generate AI-assisted career guidance, document drafts, and coaching output based on the information you provide.
• Process payments, subscriptions, and one-time purchases.
• Send transactional email and, where you have not opted out, product updates.
• Detect, investigate, and prevent fraud, abuse, security incidents, and violations of our Terms of Service.
• Comply with legal obligations and enforce our agreements.
• Improve the Service through aggregated or de-identified analysis. We do not use your individually identifiable User Content to train third-party foundation models.

Portions of the Service are powered by third-party infrastructure and AI model providers acting as our processors under contract. Depending on the feature you use, relevant excerpts of your career data may be transmitted to:

• AI language-model providers (which may include Anthropic, OpenAI, and Google, or a self-hosted model) to generate coaching responses, resume drafts, and analysis.
• A voice-AI provider and telephony carrier to power the phone/voice advisor feature, including call transcription.
• A job-listings data provider to surface relevant openings.
• A payment processor to handle subscriptions and purchases.
• An email-delivery provider to send transactional and account email.
• A bot-protection provider to distinguish human sign-ups from automated abuse.
• A privacy-respecting analytics provider to understand aggregate product usage.

Each provider is contractually restricted to using your information only to provide the underlying service to us, and not for its own independent marketing purposes. We do not sell your personal information, and we do not share User Content with unrelated third parties for advertising.

We disclose information only:

• To the service providers described in Section 3;
• If required by law, subpoena, court order, or governmental request;
• To protect the rights, property, or safety of CareerCat, our users, or the public, including enforcing our Terms;
• In connection with a merger, acquisition, financing, or sale of assets, subject to this Policy continuing to govern your data; or
• With your explicit consent.

We retain account and User Content data for as long as your account is active, and for a reasonable period afterward to comply with legal, tax, security, and dispute-resolution obligations. Call recordings and transcripts are retained only as long as needed to deliver and support the voice feature, after which they are deleted or de-identified on a rolling basis. You may request earlier deletion under Section 6.

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, or to object to or restrict certain processing. To exercise any of these rights, email support@careercat.online from your account email address. We will verify your identity and respond within the time required by applicable law. Deleting your account removes your workspace, dossiers, and documents from active systems; residual copies may persist briefly in encrypted backups until they age out of the backup cycle.

We use strictly necessary cookies to maintain your signed-in session. Where enabled, we also use analytics cookies to understand aggregate usage and bot-protection cookies to guard sign-up from automated abuse. You can block cookies in your browser settings, but the Service will not function correctly without the session cookie.

CareerCat runs on infrastructure we operate directly rather than a shared third-party identity vendor. Passwords are hashed, connections use TLS in transit, and access to production systems is restricted to authorized personnel. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you and any required regulator as promptly as applicable law requires.

The Service is not directed to, and we do not knowingly collect personal information from, children under 16. If you believe a child has provided us personal information, contact support@careercat.online and we will delete it.

Our infrastructure and service providers may process data in countries other than your own, including the United States. Where required, we rely on appropriate safeguards for such transfers and require our processors to protect your information consistently with this Policy.

We may update this Policy from time to time. Material changes will be reflected by updating the "Last updated" date above, and, where required by law, we will provide additional notice. Continued use of the Service after a change takes effect constitutes acceptance of the revised Policy.

Questions about this Policy or your data can be sent to support@careercat.online.