Privacy Policy

1. Introduction

This Privacy Policy explains how CareerForge (“we”, “us”, “our”) collects, uses, and protects personal data when you use our website, services, and browser extension (the “Service”).

CareerForge provides tools designed to help users manage and improve their job application process, including resume management, job tracking, and AI-assisted career tools.

We are committed to protecting your privacy and handling your personal data in accordance with the General Data Protection Regulation and applicable Swedish data protection laws.

If you have questions about this policy, you can contact us at: [miltonchowdary@gmail.com]

2. Data Controller

The data controller responsible for processing your personal data is:

Milton Chowdary
Email: [miltonchowdary@gmail.com]

3. Personal Data We Collect

3.1 Information You Provide

When you create an account or use the Service, we may collect:

Account information

• Name
• Email address
• Phone number
• Location

Profile information

• Work experience
• Education history
• Skills
• Certifications
• Languages
• References

Professional links

• LinkedIn profile
• GitHub profile
• Personal portfolio links

Documents

• Resumes (CV)
• Cover letters
• Other uploaded application documents

Job application data

• Employer names
• Job descriptions
• Application statuses
• Personal notes related to applications

3.2 Data Collected via Browser Extension

When you use the CareerForge browser extension:

Data from your CareerForge account

• Profile information described above
• Selected resumes and cover letters

Data collected from webpages (only when triggered by the user)

• Current page URL when the user selects “Save Job”
• Page content converted to structured text for job parsing

Local extension processing

• Form field metadata (labels, IDs, types) may be scanned locally to help fill job applications.
• This data is processed locally in the browser and is not transmitted to our servers.

The extension does not collect browsing history and does not access webpage data unless the user actively triggers a feature.

4. How We Use Your Data

We process personal data for the following purposes:

• Providing and maintaining the Service
• Creating and managing user accounts
• Generating resumes, cover letters, and career insights using AI tools
• Saving and organizing job applications
• Improving application materials through analysis and scoring
• Authenticating users and maintaining secure sessions
• Responding to support requests
• Maintaining platform security and preventing abuse

5. Legal Basis for Processing

Under the General Data Protection Regulation, we rely on the following legal bases:

Contractual necessity — Processing required to provide the Service you requested.

Legitimate interests — Improving the functionality, reliability, and security of the platform.

Consent — Where required, such as optional features or specific processing actions initiated by the user.

6. AI Processing

CareerForge uses artificial intelligence tools to assist with:

• Resume analysis and scoring
• Cover letter generation
• Job matching
• Career insights

To provide these features, portions of your profile data, resumes, or job descriptions may be processed by AI services operated through our backend infrastructure.

AI processing occurs on servers located within the European Economic Area (EEA) whenever possible.

We do not use your personal data to train public AI models unless explicitly stated and consented to.

7. Third-Party Services and Sub-Processors

We rely on the following service providers to operate the Service:

Infrastructure and hosting

• Google Cloud Platform – backend infrastructure and AI services (European region)
• Vercel – frontend hosting

Authentication and database

• Supabase – authentication and database services hosted in the EU

These providers process personal data on our behalf under data processing agreements and in accordance with applicable data protection laws.

We do not sell or share your personal data for advertising or marketing purposes.

8. Potential Sharing with Recruiters or Employers

In the future, CareerForge may offer optional features that allow users to share parts of their professional profile with recruiters or potential employers in order to improve job opportunities.

If such features are introduced:

• Users will always have full control over whether their data is shared.
• Personal information will never be shared with recruiters or employers without the user's explicit consent.
• Users will be able to choose what information is shared, such as selected profile details, resumes, or work experience.
• Users will be able to withdraw their consent at any time, after which their information will no longer be shared.

CareerForge does not sell personal data to recruiters, advertisers, or other third parties.

9. Data Storage and Security

We take appropriate technical and organizational measures to protect personal data, including:

• Encryption of data in transit using HTTPS
• Secure authentication using JWT tokens
• Restricted internal access controls
• Secure cloud infrastructure

Some data may be cached locally on the user's device through the browser extension for usability purposes.

10. Local Storage in the Browser Extension

The extension may store limited information locally using chrome.storage.local, including:

• Authentication tokens
• Cached profile data
• Selected resume or cover letter identifiers

Local data:

• Is stored only on the user's device
• Is cleared when the user logs out
• Is not synchronized or transmitted without user interaction

Cached profile information is stored for a maximum of 24 hours.

11. Data Retention

We retain personal data only as long as necessary to provide the Service. Typical retention periods include:

• Account and profile data — until account deletion
• Uploaded documents — until deleted by the user
• Job application records — until deleted by the user
• Logs and technical records — limited retention for security and troubleshooting

Users may request deletion of their data at any time.

12. Anonymized Data for Research and Service Improvement

When a user deletes their account, personal data associated with the account is deleted from our active systems.

Before deletion, certain information may be transformed into irreversibly anonymized data that can no longer be used to identify an individual. During this process:

• All direct identifiers (such as name, email, phone number, and account identifiers) are removed.
• Any internal user identifiers are replaced with a newly generated random identifier that cannot be linked back to the original user account.
• Information that could directly identify a person (such as specific employers, exact locations, or document text) is removed or generalized.

The resulting anonymized data may be retained for purposes such as:

• Statistical analysis of job search patterns
• Improving the functionality and quality of our services
• Research and development, including improving internal AI systems

Once anonymized, this information cannot be used to identify any individual and is no longer considered personal data under the General Data Protection Regulation.

13. Your Rights

Under the General Data Protection Regulation, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Restrict or object to certain processing
• Request data portability
• Withdraw consent where applicable

To exercise your rights, contact: [miltonchowdary@gmail.com]