Career Story LogoCareer Story
Security & Data Protection

How We Protect Your Data

Your career history, master profile, resume versions, and job application notes represent your personal professional asset. Here is how we safeguard them.

Encryption in Transit & at Rest

All communications between your browser and our application servers are encrypted using TLS 1.3. Databases enforce encrypted storage at rest.

Master Profile Data Isolation

Your Master Career Profile is isolated to your authenticated account ID. Application-specific tailored snapshots are versioned independently so your core history is never overwritten.

AI Provider Transparency

When processing job description analysis or resume tailoring, relevant text is sent to established LLM providers (such as OpenAI and Google Gemini) strictly for processing without public training retention.

Account Deletion & Data Rights

You own your career data. You can delete individual resume versions, job application logs, or request full account wipe at any time.

Our Security Commitments

  • We never sell or monetize candidate resumes, contact details, or job application histories.
  • Authentication is secured via JWT access tokens, password hashing (bcrypt), and Google OAuth 2.0.
  • Telemetry and analytics data are strictly sanitized on the client to strip all PII and sensitive parameters.