This Privacy Policy describes how Career Adapter LLC ("Company," "we," "us," or "our") collects, uses, stores, shares, and protects your information when you use our AI Resume Adaptation Service ("Service"). Please read this Privacy Policy carefully.

By using the Service, you consent to the collection, use, and processing of your information as described in this Privacy Policy. If you do not agree, do not use the Service.

1. Information We Collect

1.1. Account Information

When you create an account or authenticate with the Service, we collect:

• Identity Information: User ID (derived from your OAuth provider), email address, phone number, and display name (if provided by your OAuth provider).

• Authentication Data: OAuth provider identifiers and token metadata. We do not store your OAuth provider password.

• Account Metadata: Account creation date, last activity date, subscription tier, and account status.

1.2. Resume and Job Description Data

When you use the Service, we collect and process:

• Resume Files: PDF or DOCX files you upload, including the extracted text content.

• Career Data: Structured data extracted from your resume by AI, including work history, education, skills, certifications, and other professional information.

• Job Descriptions: Job posting text you provide directly or via URL.

• Job URLs: URLs to job postings you submit for processing.

• File Metadata: File names, file hashes (SHA256) for deduplication purposes.

1.3. Service Usage Data

We automatically collect:

• Session Data: Session identifiers, processing parameters (theme, iterations), timestamps, and session status.

• Performance Metrics: Processing duration, step timing, and iteration counts.

• Token Usage: AI model token consumption (prompt tokens, completion tokens), estimated processing costs, and usage against your tier limits.

• Error Information: Error types, error messages, and processing phase information when errors occur during Service use.

• Cache Hit Data: Whether your resume or job description was served from cache.

1.4. Generated Output Data

We store:

• Adapted Resumes: AI-generated resume content in JSON and YAML formats.

• PDF Files: Generated PDF resume documents stored in cloud blob storage.

• Evaluation Results: Quality assessment scores and dimensional analysis of generated resumes (if evaluation is performed).

1.5. Feedback Data

If you provide feedback on generated resumes, we collect:

• Feedback Text: Your written feedback and revision requests.

• Feedback History: The history of feedback iterations for a given session.

1.6. Safety and Security Data

We collect data related to security events, including:

• Safety Incidents: Records of detected prompt injection attempts, content filter triggers, rate limit violations, budget exceedances, and detected secrets.

• Incident Details: Severity level, input previews (truncated), exception types, and actions taken.

1.7. Information We Do NOT Collect

• We do not store your OAuth provider password.

• We do not collect payment card or banking information directly (if payments are processed, they are handled by a third-party payment processor).

• We do not collect biometric data.

• We do not use cookies for tracking or advertising purposes.

2. How We Use Your Information

We use the information we collect for the following purposes:

2.1. Providing the Service

• Processing your resumes and job descriptions through AI models to generate adapted resumes.

• Generating PDF output files.

• Caching resume and job description data to improve performance and reduce redundant processing.

• Tracking your usage against subscription tier limits.

2.2. Account Management

• Authenticating your identity and managing your account.

• Enforcing subscription tier limits and usage quotas.

• Communicating with you about your account or the Service.

2.3. Service Improvement

• Monitoring Service performance, errors, and reliability.

• Analyzing aggregate, de-identified usage patterns to improve the Service.

• Diagnosing and resolving technical issues.

2.4. Safety and Security

• Detecting and preventing fraud, abuse, and security threats.

• Enforcing rate limits and usage policies.

• Logging safety incidents for security monitoring.

2.5. Legal Compliance

• Complying with applicable laws, regulations, and legal processes.

• Responding to lawful requests from law enforcement or government authorities.

• Enforcing our Terms of Service.

3. How We Share Your Information

3.1. Third-Party AI Model Providers

Your resume text, job description text, and career extraction data are transmitted to third-party AI language model providers (currently Microsoft Azure OpenAI Service) for processing. This processing is essential to the core functionality of the Service. We do not control how these providers process data beyond our contractual agreements with them.

3.2. Third-Party Infrastructure Providers

We use the following third-party services to operate the Service:

ProviderPurposeData SharedMicrosoft Azure (Cosmos DB)Database storageAll account, session, and cache dataMicrosoft Azure (Blob Storage)File storageGenerated PDF and YAML resume filesMicrosoft Azure (OpenAI Service)AI language model processingResume text, job descriptions, career dataMicrosoft Azure (Key Vault)Credential managementAPI keys and connection strings (internal)Microsoft/Entra IDUser authenticationOAuth tokens and identity claims

3.3. Third-Party Job Posting Sites

When you provide a URL to a job posting, our Service accesses that third-party website to retrieve the job description text. We transmit only the URL you provide and standard HTTP request headers.

3.4. Legal Requirements

We may disclose your information if required to do so by law, regulation, legal process, or governmental request, or if we believe in good faith that such disclosure is necessary to:

• Comply with applicable law or legal process;

• Protect our rights, property, or safety, or that of our users or the public;

• Detect, prevent, or address fraud, security, or technical issues;

• Enforce our Terms of Service.

3.5. Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control.

3.6. We Do NOT Sell Your Information

We do not sell, rent, or trade your personal information to third parties for marketing or advertising purposes.

4. Data Storage and Security

4.1. Storage Location

Your data is stored on Microsoft Azure infrastructure located in the United States (East US region).

4.2. Security Measures

We implement reasonable administrative, technical, and physical security measures to protect your information, including:

• JWT-based authentication with RS256 cryptographic signing.

• API key hashing (keys are not stored in plaintext).

• Encryption at rest provided by our cloud infrastructure provider.

• HTTPS encryption for data in transit.

• Rate limiting to prevent abuse.

• Non-root container execution for application security.

• Private network endpoints with no public IP exposure for backend services.

• Input validation and sanitization for all user-provided URLs, text, and files.

• Service isolation separating data processing from user account information.

• Customer-managed key (CMK) encryption for data processed by our AI provider.

4.3. No Guarantee of Security

Despite our security measures, no method of transmission over the internet or electronic storage is completely secure. WE CANNOT AND DO NOT GUARANTEE THE ABSOLUTE SECURITY OF YOUR INFORMATION. You acknowledge that you provide your information at your own risk.

5. Data Retention

5.1. Account Data

We retain your account data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete your account data as described in Section 6.

5.2. Resume Cache

Cached resume text and extracted career data are automatically deleted after 30 days from the date of creation.

5.3. Job Description Cache

Cached job description data is automatically deleted after 7 days from the date of creation.

5.4. Session Data

Session records (including adapted resume output, evaluation results, feedback, and usage metrics) are automatically deleted after 30 days from the date of creation.

5.5. Generated Files

PDF and YAML files stored in blob storage are automatically deleted after 30 days from the date of creation.

5.6. Safety and Error Logs

Safety incident records and error logs are retained for as long as reasonably necessary for security monitoring and Service improvement.

5.7. Post-Deletion Retention

After account deletion, we may retain de-identified or aggregated data that cannot be used to identify you. We may also retain information as required by law or for legitimate business purposes such as resolving disputes and enforcing our agreements.

6. Your Rights and Choices

6.1. Data Export

You may export your account information and session metadata at any time through the Service's data export feature.

6.2. Account Deletion

You may delete your account and all associated data at any time through the Service's account deletion feature. Account deletion will:

• Permanently delete your user profile and account data;

• Permanently delete all session records associated with your account;

• Permanently delete cached resume data associated with your account;

• Permanently delete all generated PDF and YAML files from blob storage;

• Permanently delete error logs associated with your account.

Account deletion is irreversible.

6.3. California Residents (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You may request information about the categories and specific pieces of personal information we have collected about you.

• Right to Delete: You may request deletion of your personal information, subject to certain exceptions.

• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

• Right to Opt-Out of Sale: We do not sell personal information.

To exercise these rights, use the data export and account deletion features described above, or contact us at the address provided in Section 11.

6.4. European Economic Area, United Kingdom, and Swiss Residents (GDPR)

If you are located in the EEA, UK, or Switzerland, you may have the following rights under the General Data Protection Regulation (GDPR) or equivalent local legislation:

• Right of Access: You may request a copy of the personal data we hold about you.

• Right to Rectification: You may request correction of inaccurate personal data.

• Right to Erasure: You may request deletion of your personal data.

• Right to Restrict Processing: You may request restriction of processing of your personal data.

• Right to Data Portability: You may request a copy of your personal data in a structured, machine-readable format.

• Right to Object: You may object to processing of your personal data.

• Right to Withdraw Consent: You may withdraw consent at any time where processing is based on consent.

To exercise these rights, use the data export and account deletion features described above, or contact us at the address provided in Section 11.

Legal Basis for Processing: We process your personal data on the following legal bases:

• Performance of a Contract: Processing necessary to provide the Service to you.

• Legitimate Interests: Processing for Service improvement, security, and fraud prevention.

• Consent: Where you have provided explicit consent (e.g., submitting your resume for AI processing).

• Legal Obligation: Where processing is required by applicable law.

6.5. Other Jurisdictions

If you reside in a jurisdiction with data protection laws that provide additional rights, we will comply with applicable requirements. Contact us to exercise any rights not covered above.

7. AI-Specific Disclosures

7.1. AI Processing of Personal Data

Your resume contains personal information (name, contact details, work history, education, skills). This personal information is:

• Extracted from your uploaded resume file by our document parsing service;

• Transmitted to and processed by third-party AI language models (Azure OpenAI) for analysis and resume adaptation;

• Used to generate adapted resume output;

• Stored in our database and file storage systems.

7.2. Automated Decision-Making

The Service uses AI to generate adapted resumes. This is an automated process. However, the Service does not make any employment decisions or other decisions with legal or similarly significant effects on you. The output is a tool for your use, and you retain full control over whether and how to use any generated content.

7.3. AI Model Training

We do not use your personal data or User Content to train AI models. Your data is processed by third-party AI models under our API agreements, which typically do not permit the use of customer data for model training. However, we cannot guarantee the practices of third-party AI providers beyond our contractual agreements.

7.4. AI Limitations

AI-generated output may contain errors, inaccuracies, biases, hallucinations, or content that does not accurately reflect your qualifications. You must review all output before use. We are not responsible for any consequences of using AI-generated output without review.

8. Children's Privacy

The Service is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18, we will take steps to delete that information promptly. If you believe we have collected information from a child under 18, please contact us immediately.

9. International Data Transfers

Your information is stored and processed in the United States. If you are accessing the Service from outside the United States, your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those of your jurisdiction. By using the Service, you consent to such transfer, storage, and processing.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated Privacy Policy on our website with a revised "Last Updated" date. Your continued use of the Service after any changes constitutes your acceptance of the revised Privacy Policy. We encourage you to review this Privacy Policy periodically.

11. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Career Adapter LLC Email: contact@careeradapter.ai

For data protection inquiries or to exercise your rights under GDPR or other data protection laws, please contact our Data Protection contact at: contact@careeradapter.ai

12. Additional Disclosures

12.1. Do Not Track

The Service does not currently respond to "Do Not Track" browser signals. The Service does not use cookies for tracking or advertising.

12.2. Third-Party Links

The Service may contain references to third-party websites (e.g., job posting URLs you provide). We are not responsible for the privacy practices of third-party websites.

12.3. Data Breach Notification

In the event of a data breach that affects your personal information, we will notify you and applicable authorities as required by law.