Privacy Policy

CareerCommand is the data controller for personal data collected through our application and website.

• Account Information: Name, email address, and hashed password credentials (or profile data provided via Google OAuth).
• Application Data: Job applications, recruiter contacts, notes, task items, calendar events, and custom preferences stored in your workspace.
• Billing Information: Payment metadata processed via Stripe (Stripe customer reference and subscription status). Card details are handled directly by Stripe.
• Technical Data: Basic system access logs, IP addresses, and operational error data required for service stability.

We process data to perform our contract with you (providing the workspace service), fulfill legal obligations (tax and accounting records), and protect our legitimate business interests (maintaining software security).

We share data only with infrastructure providers operating under strict confidentiality and processing agreements:

• Supabase: Database hosting and authentication.
• Stripe: Payment processing and subscription management.
• Resend: Transactional email delivery.

Contact information added to your workspace is never sold, rented, or submitted to external AI training models.

Your personal data is retained for as long as your account remains active. Initiating account deletion under Settings -> Data & Privacy permanently purges your account records from active databases immediately.

Under UK GDPR, you have the right to access, rectify, export, or request the erasure of your personal data. You can export workspace data via CSV at any time in Settings.

For privacy queries or data rights requests, contact support via the in-app Feedback tool.