Privacy Policy

Last Updated: January 3, 2026

1. Information We Collect

  • Account Data: Name, email, password (hashed), and profile picture (via OAuth).
  • Usage Data: Resume uploads, generated audio content, and usage logs (timestamps, features used).
  • Payment Data: Processed heavily by Stripe; we only store transaction IDs and subscription status.
  • Technical Data: IP address, browser type, and device information for security and analytics.

2. How We Use Your Data

We use your data to:

  • Provide and personalize the AI interview and podcast service.
  • Process payments and manage subscriptions.
  • Comply with legal obligations and prevent fraud.
  • Improve our AI models (only on an aggregate, non-personally identifiable basis, unless explicit consent is given).

3. Data Sharing & Processors

We trust the following third-party service providers to help us run our business:

  • Stripe: Payment processing (PCI-DSS compliant).
  • Supabase: Database and Authentication hosting.
  • Google Cloud / OpenAI: Large Language Models for content generation (Zero-data retention policies applied where available).
  • Vercel: Web hosting and analytics.

4. International Data Transfers

Your data may be processed in the United States. For users in the EEA/UK, we rely on Standard Contractual Clauses (SCCs)and adequacy decisions to ensure your data is protected during transfer.

5. Your Rights (GDPR, CCPA, UK DPA)

Depending on your location, you have the right to:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Correct inaccurate data.
  • Erasure ("Right to be Forgotten"): Request deletion of your data (via Dashboard Settings).
  • Portability: Receive your data in a structured, machine-readable format.
  • Withdraw Consent: Where processing is based on consent.

6. CCPA/CPRA Notice (California)

We do not "sell" or "share" your personal information for cross-context behavioral advertising as defined by the CCPA. You have the right to limit the use of sensitive personal information.

7. India Digital Personal Data Protection

For users in India, you may contact our Grievance Officer regarding any data privacy concerns at:grievance@careertwin.ai.

8. Data Retention

We retain personal data only as long as necessary to provide the Service or as required by law (e.g., tax records). Upon account deletion, data is removed from active databases within 30 days.