Privacy Policy

Introduction

Career Portrait ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share your information when you use our service at careerportrait.co.

What Data We Collect

CV/Resume Data

When you upload your LinkedIn PDF or resume, we extract and process:

• Your name, professional title, and contact information
• Work experience, job titles, companies, and dates
• Education history, degrees, and institutions
• Skills, certifications, and languages

AI-Generated Data

We use AI to analyze your career data and generate: your career archetype, narrative, DNA traits, percentile scores, career matches, skills analysis, recruiter insights, and Career Kit content (Premium tier only).

Technical Data

• Session cookies (httpOnly, secure) to maintain your session across pages
• Anonymous usage analytics via PostHog (page views, feature usage, conversion events)
• Payment transaction data via ePayco (we do not store your credit card details)

How We Use Your Data

• Generate your Career Portrait (archetype, narrative, skills analysis, etc.)
• Deliver your purchased tier features (Pro or Premium)
• Process payments and send order confirmation emails
• Improve our AI models and service quality (aggregated, anonymized data only)
• Provide customer support and respond to your requests

Who We Share Data With

We do not sell your personal data. We share data only with trusted service providers:

• ePayco: Payment processing (subject to ePayco's privacy policy)
• AI Analysis Provider: AI analysis of your career data
• Resend: Transactional emails (order confirmations, notifications)
• PostHog: Anonymous analytics (no PII sent)

We may disclose your data if required by law, to protect our rights, or to prevent fraud.

How Long We Keep Your Data

• Uploaded CV files: Deleted immediately after processing (within minutes)
• Portrait data (generated content): Retained as long as your session is active, or until you request deletion
• Session cookies: 30 days (automatically deleted)
• Payment records: Retained for 7 years for tax/legal compliance

How We Protect Your Data

We implement industry-standard security measures:

• HTTPS encryption for all data in transit
• HttpOnly, Secure, SameSite cookies to prevent session hijacking
• Database encryption at rest (via Supabase)
• Security headers (CSP, HSTS, X-Frame-Options, etc.)

Your Rights (GDPR & CCPA)

You have the right to:

• Access: Request a copy of all personal data we hold about you
• Delete: Request deletion of your portrait and all associated data
• Export: Download your portrait data in a portable format
• Opt-Out: Opt out of analytics tracking (via browser settings or PostHog's opt-out)

To exercise these rights, contact us at privacy@careerportrait.co.

Cookies & Tracking

We use the following cookies:

• Session Cookie (cp_session): Essential for identifying your portrait across pages (30-day expiry, httpOnly, secure)
• Analytics Cookies (PostHog): Anonymous usage tracking (no PII). You can opt out via your browser settings.

You can disable cookies in your browser, but this will prevent the service from functioning properly.

International Data Transfers

Your data may be processed in the United States and Europe (where our service providers are located). By using Career Portrait, you consent to this transfer. We ensure adequate safeguards are in place via our providers' compliance with GDPR and Privacy Shield frameworks.

Children's Privacy

Career Portrait is not intended for users under 18. We do not knowingly collect data from children. If you believe we have collected data from a child, contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent changes. Continued use of the service after changes constitutes acceptance.

Contact Us

For privacy-related questions or requests, email us at privacy@careerportrait.co