Privacy Policy
A resume is unusually personal — it names your employers, your education and often your pay. This page says exactly what happens to it, including the parts where it leaves our systems.
Last updated 16 August 2026.
Draft. The operator's legal details have not been filled in yet, so this document does not name a responsible entity and should not be relied on as a binding agreement. It will be completed before payments go live.
The short version
We do not store the resume file or its raw text. We do send that text to an external AI provider so it can be turned into a structured profile, and if you are signed in we store that resulting profile and report. We do not sell your data, and we do not use your resume to train any model of our own.
Who is responsible
[legal entity or sole trader name], registered in [country] at [registered address], is the data controller for CareerWise. For any request about your data, write to [contact@careerwise.me].
What we collect, and why
| Data | Why | Stored? |
|---|---|---|
| Resume file or pasted text | To extract a structured profile to analyse. | No — processed in memory for the request, never written to our database. |
| Extracted profile — job title, seniority, years, skills, employers, education, achievements, and salary if you entered one | To produce the report and, if you are signed in, your history. | Only if signed in, in your account. Not stored at all if you use the service without an account. |
| The report itself | So you can reopen past analyses and track change over time. | Only if signed in. |
| Email address | To sign you in and to reach you about your account. | Yes, while your account exists. |
| Anonymous usage analytics | Page views and traffic sources, to see what people actually use. | Aggregated — no cookies, no cross-site tracking, not tied to your identity. |
Optional context you type in — hobbies, circumstances, anything in the free-text field — is treated exactly like the rest of your submission. Please don't put health details, government identifiers or other sensitive information there; the service has no need for them.
Who else sees your data
We use a small number of providers to run the service. Each one only receives what its job requires, and this is the complete list.
| Provider | What it does | What it receives |
|---|---|---|
| Vercel | Hosting and anonymous analytics | Requests to the site, including IP address at the network level |
| Supabase | Database and sign-in | Your email address and, if signed in, your saved analyses |
| The AI provider (currently DeepSeek; Anthropic as an alternative) | Turns resume text into a structured profile, and phrases three paragraphs | The text of your resume and the computed figures |
| Paddle | Merchant of record for payments, once billing is live | Your payment and billing details — we never see or store card data |
The AI provider row is the one worth pausing on. To read your resume, its text is sent to a third-party model provider and processed on their infrastructure, which may be outside your country. We choose providers that state they do not train on API data, but once text leaves our systems we cannot verify what happens to it. If a section of your resume is confidential, remove it before uploading.
Cookies
We use as few as possible, and none for advertising.
| Cookie | Purpose |
|---|---|
| Sign-in session | Keeps you logged in. Set only when you sign in. |
| Plan preview | Remembers that you opened the Pro view while payments are not yet live. Expires after 30 days. |
There are no advertising cookies, no third-party trackers and no cross-site profiling. Our analytics work without cookies at all.
How long we keep things
| Data | Kept for |
|---|---|
| Resume file / raw text | The duration of the request only. |
| Saved analyses | Until you delete them, or until you delete your account. |
| Account and email | Until you ask us to delete the account. |
| Payment records | Held by the merchant of record for as long as tax law requires them to keep it. |
Deleting your account removes your analyses with it — the database enforces that, so there is no orphaned copy left behind.
Your rights
You can ask us to show you what we hold, correct it, delete it, or send you a copy in a portable format. You can withdraw consent and stop using the service at any time. If you are in the UK, EU or another region with equivalent law, you also have the right to complain to your data protection authority.
Most of this you can do yourself: your history page lists your analyses and lets you remove them. For anything else, write to [contact@careerwise.me] and we will act within 30 days.
Security
Data is encrypted in transit. Saved analyses are protected at the database level by row-level security, meaning a user can only ever read their own rows — that rule is enforced by the database itself rather than by application code that might have a bug in it. No system is perfectly secure, and we do not claim otherwise; if we discover a breach affecting your data, we will tell you.
Children
CareerWise is not intended for anyone under 16. We do not knowingly collect their data, and we delete it if we learn we have.
Changes
If we change what we collect or who receives it, we will update this page and change the date at the top. Material changes — a new category of data, or a new provider receiving your resume — will be flagged on the site rather than made quietly.
Contact
Questions about this document go to [contact@careerwise.me]. We answer from the same address, so replies come from a person rather than a no-reply mailbox.