CareerCRM
Privacy Policy
Last updated: June 27, 2026
CareerCRM ("we", "us", or "our") is committed to protecting your privacy. This policy explains what personal information we collect, how we use it, and the choices you have.
Short version: We collect only what we need to run the product. We never sell your data. You control your outreach — we never send messages on your behalf without your explicit approval.
1. Information we collect
Account information: When you register, we collect your name, email address, and password (hashed and salted — we never store plaintext passwords).
Resume data: If you upload a resume, we store the content to power company matching and outreach drafting. You can delete it at any time.
Job search activity: Companies you've saved or approved, contacts you've added, messages you've drafted, outreach statuses, and follow-up schedules — all stored to power your pipeline.
Usage data: Pages visited, features used, and session data (browser, device type, IP address) to help us improve the product and diagnose issues.
2. How we use your information
- To provide, maintain, and improve CareerCRM
- To match your profile with relevant companies and roles
- To generate outreach drafts for your review and approval
- To send transactional emails (password resets, billing receipts, product updates)
- To detect and prevent fraud, abuse, or unauthorized access
- To comply with legal obligations
We do not use your data to train AI models sold to third parties. We do not send any message on your behalf without your explicit, per-message approval.
3. Cookies and tracking
We use strictly necessary cookies to keep you logged in and maintain session state. We use analytics cookies (privacy-respecting, aggregated) to understand how people use the product. You can disable non-essential cookies in your browser; this will not affect core functionality.
4. Data sharing
We share your data with a limited set of trusted vendors who help us operate the service (cloud hosting, payment processing, transactional email delivery). Each vendor is contractually bound to process data only as instructed and never for their own purposes.
We never sell, rent, or trade your personal data to third parties for advertising or marketing purposes.
We may disclose data if required by law, court order, or in response to a valid government request.
5. Data retention
We retain your account data as long as your account is active. If you close your account, we delete your personal data within 30 days, except where we're required to retain it for legal or regulatory reasons (e.g., billing records for up to 7 years).
6. Security
We use industry-standard security measures: TLS encryption in transit, AES-256 encryption at rest, least-privilege access controls, and regular security audits. No system is perfectly secure — if you discover a vulnerability, please use the contact form and choose the security/privacy topic.
7. Your rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your data (right to be forgotten)
- Port your data to another service
- Object to certain processing
- Withdraw consent at any time where processing is based on consent
To exercise any of these rights, use the contact form and choose the security/privacy topic. We'll respond within 30 days.
8. Children's privacy
CareerCRM is not intended for users under 16 years of age. We do not knowingly collect data from children. If you believe we have collected data from a child, please contact us immediately.
9. Changes to this policy
We may update this policy periodically. We'll notify you by email and post the updated policy with a revised "Last updated" date. Continued use of CareerCRM after changes constitutes acceptance of the updated policy.
10. Contact
Questions about this policy? Use our contact form and choose the security/privacy topic.