Privacy policy

Who we are

CareerBank (“we”, “us”) helps you capture career evidence and create tailored CVs. This policy explains what personal data we process when you use our website and service.

If you have a supported-plan agreement, the legal entity named in that agreement is the controller for that relationship. For other users, CareerBank is the organisation responsible for the personal data described here.

Data we collect

Depending on how you use CareerBank, we may process:

• Account details — name, email address, and profile details from Google or LinkedIn when you sign in.
• Career content — CVs, voice recordings, transcripts, written notes, confirmed evidence, job adverts, match results, and tailored CV drafts.
• Billing details — plan selection, subscription status, and payment records handled by Stripe. We do not store full card numbers.
• Supported-plan information — eligibility answers and the signed agreement text you accept.
• Usage and diagnostics — limited product analytics and error logs needed to run and improve the service.

How we use your data

We use personal data to:

• provide, secure, and improve CareerBank;
• authenticate your account and show your own career content;
• process voice, text, CV, and job information so we can extract evidence and tailor CVs;
• manage free, Plus, and supported plans, including billing and agreements;
• respond to support requests and enforce our terms of service;
• monitor reliability and prevent abuse.

Your CVs, recordings, transcripts, evidence, and job adverts are private to your account. We do not sell your personal data. Raw career content is not sent to product analytics.

Legal bases

• Contract — to provide the service you request, including account access, CV tools, and paid plans.
• Legitimate interests — to keep the service secure, understand product performance, and improve reliability.
• Consent — where required for non-essential cookies or optional analytics, as explained in our cookie policy.
• Legal obligation — where we must keep records for tax, accounting, or other legal requirements.

Processors and sharing

We use trusted providers to operate CareerBank, including:

• authentication providers (Google and LinkedIn);
• database and file storage (Convex);
• AI processing providers used to transcribe, extract, analyse, and tailor content you submit;
• payment processing (Stripe);
• product analytics (PostHog) and error monitoring (Sentry).

These providers process data only as needed to deliver their service to us. We may also disclose information if required by law or to protect users and the service.

Retention

We keep account and career data while your account is active. If you delete your account, we remove associated records and stored files from active systems, subject to any limited records we must retain for billing, legal, or security reasons. Signed supported-plan agreements may be retained as a record of the contract.

Your rights

Depending on where you live, you may have rights to access, correct, delete, or restrict use of your personal data, and to object to certain processing. You can review or delete much of your account data from Account settings.

To make a privacy request. We may need to verify your identity before responding.

Security

We use access controls, encrypted connections, and account authentication to protect your data. No method of transmission or storage is completely secure, so please keep your sign-in methods safe.

Children

CareerBank is intended for adults seeking work. It is not directed at children, and we do not knowingly collect personal data from children.

Changes

We may update this policy from time to time. The “Last updated” date at the top of this page will change when we do. Continued use of CareerBank after an update means you acknowledge the revised policy.

Contact

Questions about this privacy policy can be sent through your CareerBank account or the support email provided in any agreement you have with us.