Privacy Policy

CareerUp is a job search service. We are the controller of the personal data described in this policy.

For any question about this policy or your data, email us at hello@careerup.online.

• Account details. Your name, email address and sign-in details. Sign-in is handled by Clerk, so we never see your password.
• Your CV and profile. The CV you upload and the profile details you add, such as work history, education, skills, target roles, salary expectations and an optional photo.
• What you create in the app. Tailored CVs, cover letters, tracked applications, job alerts and reviews you submit. A review records your approximate location (city and country) from your IP address, which is shown with it if published.
• Mock interviews. Interview transcripts, the feedback we generate and, only if you turn your camera on, snapshots taken during the interview. Section 4 covers this.
• Coaching sessions. Intake answers, coach notes and, only with your consent, session transcripts. Section 5 covers this.
• Payments. Stripe processes card payments. We receive the plan you bought, the amount and the payment status. We never see or store your full card number.
• Usage and device data. Pages you visit, features you use, your IP address, browser and device type, and the site that referred you.
• Messages to us. Anything you send us by email.

We use your data to:

• run your account and the features you use, such as job matching, CV tailoring and mock interviews;
• take payments and manage your subscription;
• send you service emails, such as job alerts you set up and booking confirmations;
• understand which parts of CareerUp people use, so we can improve them;
• keep the service secure and prevent abuse;
• meet our legal obligations.

Our legal bases are: the contract with you (to provide the service you signed up for), our legitimate interests (to improve and secure the service), legal obligations (for example, keeping payment records), and your consent (for analytics cookies, session transcripts and interview snapshots).

Several features send your data to an AI provider to produce a result. For example, we send your CV to parse it and match it to jobs, a job ad and your CV to write a tailored CV, and an interview transcript to write feedback. The AI provider processes that data to return the result to us.

Mock interviews run on Vapi, a voice AI service. Vapi processes the audio of the call to turn your speech into text and to speak the interviewer's questions. Vapi may keep a recording of the call. When you delete your account, we ask Vapi to delete it.

We store the written transcript and the feedback we generate from it, so you can review them later.

Camera snapshots are optional. If you turn your camera on, we take snapshots at intervals during the interview, store them on our servers and send them to our AI provider for feedback on how you come across, such as your background, posture and body language. If you keep your camera off, the interview works the same way without them.

We keep interview transcripts, feedback and snapshots while your account is open. To have them deleted sooner, email us.

Coaching sessions take place over video. When you book, you choose whether the session is transcribed. If you say no, the session still goes ahead without a transcript, and no insights are produced.

What we collect. The written transcript, with each turn attributed to you or your coach; when each of you joined and left; your intake answers; any notes your coach writes; and insights we derive from the transcript, such as your goals, target roles and the skills you want to develop.

How we use it. To show you a summary and action items after the session, and to improve your job matches and interview preparation. You can turn this off for one session or for your whole account. Turning it off also stops past sessions from informing your matches.

Who sees it. Your coach sees your intake answers and their own notes. Coaches can't see your payment details or anything in your account outside the sessions they run with you. CareerUp administrators can open a transcript, for example to investigate a complaint.

Who processes it. The video provider (Daily.co or Google Meet) hosts the call and produces the transcript. Our AI provider processes the transcript to produce the insights. If the session runs on Google Meet, Meet also shows everyone in the call its own notice while transcription is on.

How long we keep it. We delete the video provider's copy of the transcript 30 days after the session. We keep the written transcript and insights while your account is open.

We don't use coaching transcripts to train AI models. If that ever changes, we will ask for your consent separately.

Essential cookies keep you signed in and remember your cookie choice. The site doesn't work without them, so you can't turn them off.

Analytics cookies are set only if you accept them. We use Google Analytics 4 to see which pages and features people use, and from what kind of device and roughly which country.

Google Analytics runs in consent mode. Before you choose, and if you decline, it loads without cookies and without any identifier for you or your device, and Google is told not to use the data for advertising. We set no advertising or third-party cookies.

If you're signed in and have accepted analytics cookies, we attach a random account identifier to analytics events, so we can tell one person on two devices from two people. We never send Google your name, email address, CV or anything you create.

Referral cookie. On your first visit we set one first-party cookie, ca_attribution. It records how you arrived: the campaign parameters in the link you followed, the referring site, the page you landed on and your approximate country. It holds no name, email address or account or advertising identifier, we don't share it, and it expires after 30 days. If you create an account, we attach this record to your account and delete the cookie.

You can change your choice at any time from the cookie banner or in your browser settings.

We use these companies to run CareerUp. Each one processes data only to provide its service to us.

Some of these companies are based outside the UK. Where they are, we rely on safeguards the UK recognises, such as adequacy regulations or standard contractual clauses.

• Account, CV, profile and what you create. While your account is open.
• Interview transcripts, feedback and snapshots. While your account is open.
• Coaching transcripts and insights. While your account is open. The video provider's copy is deleted after 30 days.
• Payment records. 7 years, to meet UK accounting and tax rules.
• Usage logs. 13 months.

To delete your account, use Delete My Account on your profile page. We delete your profile, CVs, interviews, coaching transcripts and the rest of your data straight away, cancel any plan and remove your sign-in. We keep payment records, and the date, coach and price of past sessions, for 7 years to meet UK accounting and tax rules. If you have an open mentorship or an upcoming session, end or cancel it first.

Under UK GDPR, and EU GDPR if you're in the EEA, you can ask us to:

• give you a copy of your personal data;
• correct data that is wrong or incomplete;
• delete your data;
• restrict how we use it;
• give you your data in a machine-readable format;
• stop processing it on the basis of our legitimate interests or for marketing.

Where we rely on your consent, you can withdraw it at any time.

On your profile page you can download a copy of your data in a machine-readable format (Download My Data) and delete your account and data (Delete My Account). To use any of the other rights, email hello@careerup.online. We will reply within one month. If you're unhappy with our answer, you can complain to the Information Commissioner's Office at ico.org.uk.

When we change this policy, we update the date at the top of this page. If a change affects how we use data you have already given us, we will tell you by email or in the app before it takes effect.