Legal

Privacy Policy

Last updated: March 20, 2026

CareerEVATE (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at careerevate.com and related services (collectively, the “Service”).

Please read this policy carefully. If you disagree with its terms, please discontinue use of our Service.

1. Information We Collect

Information You Provide Directly

  • Account information: When you create an account, we collect your name and email address via Clerk, our authentication provider.
  • Resume content: Text you paste or upload for ATS analysis. This is processed in memory and is not permanently stored on our servers.
  • Payment information: Billing details are collected and processed by Stripe. We never store your full credit card number.
  • Communications: If you contact us by email or reply to our emails, we retain those communications to provide support.

Information Collected Automatically

  • Usage data: Pages visited, features used, time spent, and click patterns — collected via standard web analytics.
  • Device data: Browser type, operating system, IP address, and device identifiers.
  • Cookies and similar technologies: Session cookies for authentication; analytics cookies to understand usage patterns. See Section 7 for more.

Information From Third Parties

  • Authentication providers: If you sign in via Google or LinkedIn, we receive your name and email from those providers.
  • Payment processors: Stripe may share transaction status and fraud signals with us.

2. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and improve the Service
  • Process your resume and generate ATS score analysis
  • Create and manage your account
  • Process payments and fulfil orders
  • Send transactional emails (score results, receipts, product updates)
  • Send marketing emails if you opt in — you can unsubscribe at any time
  • Analyze usage patterns to improve features and user experience
  • Detect, prevent, and address fraud or security issues
  • Comply with legal obligations

3. AI Processing Disclosure

CareerEVATE uses artificial intelligence to analyze your resume content and generate scored feedback. Here is what you need to know:

  • Your resume text is processed by third-party large language model (LLM) providers to generate analysis and scoring. This processing occurs on secure third-party infrastructure.
  • Resume content is not used to train AI models. We use API access (not consumer-facing products) that does not contribute your data to model training.
  • Analysis is AI-powered and human-reviewed. CareerEVATE's results are produced by AI with quality review by our team. AI analysis may contain errors or omissions.
  • We do not store your full resume text beyond the duration of your active session. Score summaries and section-level metadata may be retained to power your dashboard history.
  • Third-party AI providers we use are bound by their own data processing agreements and privacy policies.

4. How We Share Your Information

We do not sell your personal information. We may share it with:

  • Service providers: Supabase (database), Clerk (authentication), Stripe (payments), Resend (email), Vercel (hosting), and third-party AI providers (AI processing). These parties are contractually bound to use your data only to provide services to us.
  • Legal compliance: When required by law, regulation, court order, or government authority.
  • Business transfers: In connection with a merger, acquisition, or sale of assets, with notice to affected users.
  • Your consent: With your explicit permission for any other purpose.

5. Data Retention

  • Account data: Retained while your account is active and for 90 days after deletion.
  • Resume text: Not stored beyond your active session. Not retained on our servers after analysis completes.
  • Payment records: Retained for 7 years for legal and tax compliance.
  • Email opt-in leads: Retained until you unsubscribe or request deletion.
  • Analytics data: Retained for up to 26 months in aggregate, anonymized form.

6. Your Rights

For All Users

  • Access: Request a copy of personal data we hold about you.
  • Correction: Request correction of inaccurate data.
  • Deletion: Request deletion of your personal data (subject to legal retention obligations).
  • Unsubscribe: Opt out of marketing emails at any time via the unsubscribe link in any email.

EU/UK Residents (GDPR)

If you are in the European Union or United Kingdom, you additionally have the right to:

  • Restrict or object to processing of your data
  • Data portability (receive your data in a machine-readable format)
  • Withdraw consent where processing is based on consent
  • Lodge a complaint with your local data protection authority

Our legal basis for processing your data is primarily contract performance (to provide the Service you requested) and legitimate interests (improving our product, fraud prevention).

California Residents (CCPA/CPRA)

California residents have the right to:

  • Know what personal information is collected and how it is used
  • Delete personal information we have collected
  • Opt out of the sale of personal information (we do not sell personal information)
  • Non-discrimination for exercising privacy rights

To exercise any of these rights, contact us at privacy@careerevate.com.

7. Cookies

We use the following types of cookies:

  • Essential cookies: Required for authentication and core functionality. Cannot be disabled without breaking the Service.
  • Analytics cookies: Help us understand how visitors use the Service. You may opt out via your browser settings or by using a privacy-focused browser extension.

We do not use advertising or cross-site tracking cookies.

8. Data Security

We implement industry-standard security measures including encrypted data transmission (TLS/HTTPS), row-level security on our database, and restricted access controls. No internet transmission is 100% secure. We cannot guarantee absolute security but take reasonable precautions to protect your information.

9. Children's Privacy

CareerEVATE is not directed at individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, contact us at privacy@careerevate.com and we will promptly delete it.

10. International Data Transfers

CareerEVATE is based in the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the US. By using the Service, you consent to this transfer. Where required by applicable law, we rely on Standard Contractual Clauses or other approved mechanisms for cross-border transfers.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by posting the new policy on this page and updating the “Last updated” date. For significant changes, we may send an email notification. We encourage you to review this page periodically.

12. Contact Us

For privacy-related questions, requests, or concerns:

CareerEVATE

Privacy Inquiries

Email: privacy@careerevate.com

Website: careerevate.com

We will respond to verifiable requests within 30 days.