Privacy policy

1. Who we are and what this covers

Careeratus provides career planning and job-search tools at careeratus.com and its linked application workspace. This policy explains how information is handled when you visit our website, create an account, or use our features. For privacy questions or requests, contact help@careeratus.com.

2. Information we handle

The information involved depends on the features you choose to use:

• Account information: name, email address, authentication information, and account preferences. If you sign in through Google, we receive the identity information needed to authenticate you.
• Career information: resumes, employment and education history, skills, locations, career goals, work-authorization preferences, and information you enter in your candidate profile.
• Job-search activity: saved jobs, applications, generated documents, notes, contacts, application answers, and submission or status records.
• Connected services: if you authorize an Outlook inbox connection, access tokens and email content or metadata retrieved to identify job-related messages and update application records. You can disconnect supported inbox connections and revoke access through your email provider.
• Technical and support information: IP address, device and browser information, service logs, errors, and messages you send to us.
• Billing information: payment status and transaction references when paid features are used. Payment providers process payment details under their own privacy terms.

Only provide information you are entitled to share. Avoid including unnecessary sensitive information or identity documents in resumes and support messages.

3. How information is used

We use information to operate accounts, personalize job discovery, compare profiles with job requirements, prepare documents, manage application workflows you request, provide support, process payments where applicable, prevent misuse, and diagnose service problems. Where data-protection law requires a legal basis, processing may be necessary to provide the service you request, meet legal obligations, or act on your consent where required. You can withdraw consent for optional connections without affecting processing that occurred before withdrawal.

The Google data restrictions below take precedence over all general descriptions of use, sharing, AI processing, and retention in this policy.

4. Google user data and Limited Use

Careeratus uses information received from Google APIs, including raw data and data derived from it, in accordance with the Google API Services User Data Policy and the Google Workspace API User Data and Developer Policy, including the Limited Use requirements.

• Google sign-in: we use your Google account identifier, name, email address, and available profile information to authenticate you and display your account. Google sign-in does not grant Gmail access.
• Gmail reading removed: Careeratus no longer requests Gmail permissions or retrieves Gmail messages. You enter employer verification codes yourself or complete email-link verification on the employer site. Employer credentials and codes you enter in the workspace are encrypted for a temporary, single-use handoff and are not added to your profile. When you approve creation of an employer account, Careeratus generates and stores its password encrypted, scoped to your candidate email and that employer portal, for future applications.
• Reply assistance: if you choose Draft reply, the selected message subject and excerpt, together with relevant candidate profile, job, and application context, may be sent to the configured AI provider described below to generate that reply. The result is a private draft for you to review and send yourself.
• Limits: Google user data is used only to provide or improve these user-facing features. We do not sell Google user data, use it for advertising, credit scoring or lending, or use it to train or improve generalized AI or machine-learning models. We do not authorize service providers to use it for those purposes, including in aggregated, anonymized, or derived form.

We transfer Google user data only with your consent as necessary for these user-facing features, for security purposes, to comply with applicable law, or as part of a merger, acquisition, or sale of assets after obtaining your explicit prior consent. General business-transfer language elsewhere in this policy does not override this restriction.

Human access to Google user data is limited to specific data you explicitly agree we may view, necessary security investigations, legal requirements, or aggregated and anonymized data used for internal operations as allowed by Google’s Limited Use requirements.

Legacy Gmail reading is disabled. To remove an old connection, open Pipeline, select an application, open Inbox, and choose Disconnect. You can also revoke Careeratus access in your Google Account connections. Disconnecting does not delete previously imported application records. To request deletion of imported Gmail data or your account, email help@careeratus.com. Google data is retained only as needed for the features you request or applicable legal and security obligations; the same use restrictions apply to retained data.

5. AI features and your choices

Careeratus uses OpenAI and Alibaba Cloud Model Studio (DashScope) APIs, depending on the configured feature. When you use AI features, relevant profile information, resume content, job descriptions, and your instructions may be sent to these providers to generate recommendations or documents. Draft reply may also send the selected email subject and excerpt with its application context. Pasting or viewing an email alone does not request an AI reply. Google user data remains subject to the restrictions in section 4; providers are not authorized to use it for generalized model training or unrelated purposes.

AI output may be incomplete or inaccurate. You should review it before using or submitting it. Careeratus provides candidate assistance; employers make their own hiring decisions. Do not submit information to an AI feature that you do not want processed for that feature.

6. When information is shared

Information is processed by providers that support hosting, database and file storage, authentication, AI generation, email, and payment services, as needed for the features you use. When you direct an application or use submission features, relevant information and documents are shared with the employer or its recruitment platform. We may also disclose information to comply with legal requirements, protect people and the service, or support a business transfer subject to applicable protections. Employer sites and other linked services operate under their own policies. Providers may process information in countries different from yours.

For Google user data, every transfer is limited by section 4, including its requirement for explicit prior consent before any business transfer. General descriptions of service providers or business purposes do not permit additional uses of Google user data.

7. Cookies, browser storage, and security

The application uses browser storage for authentication tokens and preferences, and cookies for functions such as role-based navigation. Hosting and connected services may process technical request data needed to deliver their functions. You can clear local storage and cookies in your browser, although this may sign you out or reset preferences. We use technical and organizational measures intended to protect information, but no online service can guarantee absolute security.

8. Retention and deletion

Information is retained for the purposes described above, including maintaining your account, supporting your requested workflows, resolving disputes, and meeting legal or security requirements. The appropriate period depends on the information and purpose. You may remove supported records in the application or contact help@careeratus.com to request account deletion. Some records may need to be retained for legal or security reasons, and backup copies may persist until their normal replacement cycle. Disconnecting an external service does not by itself delete records already imported.

9. Your privacy choices

Depending on where you live and the law that applies, you may have rights to access, correct, delete, or receive a copy of your information, restrict or object to certain processing, and withdraw consent. Send requests to help@careeratus.com. We may need to verify your identity and will handle requests within applicable legal time limits. You may also raise a concern with your local data-protection regulator. You can update available profile fields and manage supported service connections in your account.

10. Age requirements

Careeratus is intended for people aged 18 and over. If you believe a child has provided personal information to us, contact help@careeratus.com so we can investigate and take appropriate action.

11. Updates and contact

We may update this policy as the service changes. The date above identifies the latest revision. Where required, material changes will be communicated separately and consent requested when applicable. Contact Careeratus at help@careeratus.com. The placeholder phone number shown in the website footer is not an active support channel; please use email.