Last Updated: March 2026
AutoCareer ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your information when you use our AI-powered job application service at autocareer.ai (the "Service").
1. Information We Collect
We collect the following categories of personal data:
- Account Information: Name, email address, and password (hashed) when you create an account.
- Profile Data: Phone number, address, date of birth, nationality, work authorization status, and other demographic information you provide during onboarding.
- Resume & Professional Data: Uploaded resumes (PDF/DOCX), work history, education, skills, certifications, and career preferences.
- Job Preferences: Target roles, preferred locations, salary expectations, work type preferences, and blocked companies.
- Application Data: Records of jobs applied to, application status, confirmation screenshots, and submission logs.
- Payment Information: Subscription plan, payment history, and billing cycle. Payment card details are processed and stored by our payment processor (Creem.io) — we do not store your card number.
- Usage Data: Pages visited, features used, session duration, and browser/device information.
- Authentication Data: Google OAuth tokens if you sign in via Google. We receive your email and name from Google — not your Google password.
2. How We Use Your Information
- Job Matching: We use your resume and preferences to match you with relevant job openings using AI-powered vector similarity search.
- Automated Applications: We use your profile data and resume to fill out and submit job applications on your behalf through employer applicant tracking systems (ATS).
- AI Analysis: We process your resume text to extract skills, experience, and qualifications for better job matching and application quality.
- Account Management: To manage your subscription, process payments, and communicate service updates.
- Service Improvement: To improve our matching algorithms, application success rates, and user experience.
3. Third-Party Data Processors
We share your data with the following third-party services to operate our platform:
- OpenAI (USA): Resume text and job descriptions are sent to generate vector embeddings for job matching. OpenAI does not use API data for training.
- DeepSeek (China): Resume summaries and job descriptions are processed for AI-powered job ranking and resume suggestions. No raw resume files are sent — only extracted text summaries.
- Cloudflare R2 (USA): Resume files, profile photos, and application screenshots are stored securely on Cloudflare's R2 object storage.
- Creem.io (Payment Processor): Email address and subscription details are shared to process payments. Creem handles all card processing — we never see or store your card number.
- Vercel (USA): Our application is hosted on Vercel's infrastructure. Request logs and error data may be processed by Vercel.
- Hetzner (Germany): Our database is hosted on Hetzner cloud infrastructure in Germany.
We do not sell your personal data to any third party. We do not share your data with advertisers or data brokers.
4. Data Retention
- Account Data: Retained as long as your account is active. Deleted within 30 days of account deletion request.
- Resume Files: Retained while your account is active. You can delete your resume at any time from the dashboard.
- Application Records: Retained for 12 months for your reference, then archived.
- Payment Records: Retained for 7 years for tax and legal compliance.
- Usage Logs: Retained for 90 days, then deleted.
5. Data Security
- All data is transmitted over HTTPS (TLS encryption in transit).
- Passwords are hashed using industry-standard algorithms — we cannot read your password.
- Session cookies are Secure, HttpOnly, and scoped to our domain.
- CSRF protection on all state-changing API endpoints.
- Rate limiting on authentication endpoints to prevent brute-force attacks.
- Database access is restricted to authorized services only.
6. Your Rights (GDPR)
If you are located in the European Economic Area (EEA) or UK, you have the following rights under GDPR:
- Right of Access: Request a copy of all personal data we hold about you.
- Right to Rectification: Request correction of inaccurate personal data.
- Right to Erasure: Request deletion of your personal data ("right to be forgotten").
- Right to Data Portability: Request your data in a structured, machine-readable format.
- Right to Object: Object to processing of your personal data for certain purposes.
- Right to Restrict Processing: Request that we limit how we use your data.
To exercise any of these rights, email us at support@autocareer.ai. We will respond within 30 days.
7. Your Rights (CCPA)
If you are a California resident, you have additional rights under the CCPA:
- Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected.
- Right to Delete: Request deletion of personal information we have collected.
- Right to Opt-Out of Sale: We do not sell personal information. There is nothing to opt out of.
- Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
8. Cookies
We use essential session cookies to keep you logged in and protect against CSRF attacks. These are strictly necessary for the Service to function. We do not use advertising cookies, tracking pixels, or third-party analytics cookies. No cookie consent banner is required for strictly necessary cookies under GDPR.
9. Children's Privacy
Our Service is not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have collected data from a minor, please contact us immediately.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last Updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.
11. Contact Us
If you have questions about this Privacy Policy or want to exercise your data rights, contact us at: support@autocareer.ai