Privacy Policy
This policy explains what information CareerPrism ("we", "us"), operated by [Company legal name], collects when you use www.careerprism.io, how we use it, and the choices you have. Contact us at contact@careerprism.io or [Company postal address].
Your resume
- When you upload a PDF, its text is extracted in your browser. The PDF file itself is not uploaded to our servers.
- The extracted or pasted resume text is sent to our server to produce your analysis. We send it to our AI provider, xAI (the Grok API), for processing. We do not save your resume text in our databases. Our server logs record technical details, such as how long the text was, but not the resume itself.
- If you unlock a full spectrum, information from your decoded spectrum (not your resume text) may be sent to xAI to generate role and job search suggestions.
- Your analysis history, including resume text and results, is saved in your browser's local storage so you can return to it. You can clear it from the app or by clearing your browser's site data.
Accounts
If you create an account, we store your email address, name, a hashed (not plain-text) password, your token balance, the IDs of analyses you've unlocked, AI usage counts, and whether you've opted in to receive email updates. This information is kept in private storage hosted by Vercel, and a customer record with your email and name is created with our payment processor, Stripe. Signing in sets a session cookie (cp_session) that lasts up to 30 days.
You can delete your account from your profile. Deleting it removes your user record, your Prism Cards, your email opt-in record, and your Stripe customer record.
Payments
Token purchases are processed by Stripe through Stripe Checkout. We never see or store your full card number. Stripe handles your payment details under its own privacy policy.
Prism Cards
If you choose to publish a Prism Card, a teaser of your results (for example your Career Identity, top industries, and superpowers, but never your resume text) and the card image are stored and made available to anyone who has the link. We ask search engines not to index Prism Card pages. You can remove a card at any time with "Unpublish this card" in the app, and deleting your account removes all of your cards.
Password-reset emails are sent through Resend, which receives your email address for that purpose. If you opt in to updates, we keep your name and email to contact you, and you can opt out at any time.
Analytics, security, and service providers
- Vercel hosts the site and serverless functions. We use Vercel Web Analytics, which measures page views without cookies.
- To prevent abuse, we keep rate-limit counters keyed to a one-way hash of your IP address and, for sign-in attempts, a hash of your email.
- Your browser loads fonts from Google Fonts and PDF tools from cdnjs (Cloudflare). Those providers receive your IP address and standard browser information when the files load.
- We share information with the providers above only to operate CareerPrism. We do not sell your personal information.
Retention
Account data is kept until you delete your account, or for [retention period] after your account becomes inactive. Payment records are kept by Stripe as required by law. [Describe log retention period.]
Your rights
Depending on where you live, you may have the right to access, correct, delete, or export your personal information, or to object to certain processing. To make a request, email contact@careerprism.io. [Add region-specific disclosures (e.g., GDPR/UK GDPR, CCPA/CPRA) as advised by counsel.]
Children
CareerPrism is not intended for anyone under [minimum age], and we do not knowingly collect information from them.
Changes
If we update this policy, we'll change the effective date above. If the changes are significant, we'll give more prominent notice.