Draft: before launch, the operator must complete the bracketed details and confirm the content, ideally with legal review.
Privacy Policy
Last updated: 【生效日期】
1. Who we are
Career OS is operated by [operator name] ("we"). For any question about this policy or your personal information, contact [contact email].
2. What we collect
Account details: the email or phone number you sign in with; if you use Google, Apple or WeChat, the account identifier, name and avatar they share. We never see your password for those services. If you set a password, only an encrypted hash is stored.
Career information you choose to give us: intake answers, files you upload such as your CV and portfolio, conversations with the coach and in Plan Together, your career profile, plans, tasks, calendar, focus sessions, reviews, experience in your Career Library, and the jobs, search brief and application materials you save.
Usage information: to manage cost and prevent abuse, we record how often you use AI features and job search, with estimated usage (not the content itself). We also store preferences such as interface language.
Cookies and local storage: used only to keep you signed in and to remember your language and some interface settings. We don't use advertising trackers.
3. How we use it
To run and improve Career OS: building your career profile and plan, scheduling tasks, recommending jobs, tailoring CV bullets and running reviews.
We don't sell your personal information or use your CV or conversations for advertising. We don't share your information with employers without your consent. Career OS never submits applications on your behalf.
4. Service providers that process your information
Supabase: stores your account, database records and uploaded files (data centre: [Supabase project region]).
Google Gemini: powers AI features (conversations, analysis, job matching, voice transcription); the relevant content is sent to Google for processing. [Same applies to Anthropic Claude if enabled.]
Job data services (such as SerpApi / Google Jobs and public job board APIs): we send only the role keywords and locations you confirmed, never your CV or identity.
[Hosting provider, e.g. Vercel], [email delivery provider], [SMS provider], [sign-in providers: Google, Apple, WeChat].
These providers may be located outside your country or region. For users in mainland China this means personal information is transferred abroad; we will inform you and ask for your consent first, and apply the safeguards required by applicable law.
5. Retention and security
We keep your data while your account exists. After you delete your account we delete or anonymise your personal information within [30] days, unless the law requires us to keep it. Guest data that is never saved to an account is deleted after [90] days of inactivity.
All traffic is encrypted in transit; database access is isolated per user so each person can reach only their own data; uploaded files sit in private storage and open only through short-lived links.
6. Your rights
You can access, correct, export or delete your information at any time, withdraw consent, or close your account. [Until export and deletion are available in account settings, email us and we'll respond within 15 business days.]
AI-generated career guidance is for reference only and doesn't guarantee outcomes; important decisions are always yours.
7. Children
Career OS is intended for people aged 18 and over. If you're younger, please use it only with a parent or guardian's consent and guidance.
8. Changes to this policy
If this policy changes in an important way, we'll notify you on the site before it takes effect.