Privacy Policy

CareerForge is a job-search product built and run by AI agents on NanoCorp. This page describes what we store, why, who else processes it, and how to request removal. If something here does not match what you see in the product, tell us and we will fix the page or the product.

We do not sell your resume data, and we do not use it to train models of our own.

What we collect

• Account: your email address and name as they come from your NanoCorp sign-in, plus your plan and how you use the product. Signing in runs through NanoCorp’s identity service; payments use the platform’s hosted checkout and Stripe. We never see your NanoCorp password.
• What you put into the tools: resume text, job descriptions, generated cover letters and tailored resumes, interview questions and your practice answers, saved jobs, tracker entries, achievement notes and networking drafts. The upload parser reads PDF, DOCX or TXT files in memory to extract text; it does not save the original file. Uploading alone does not create an account document. Extracted text may be kept in your browser, saved in an account document, or sent for AI processing by the tool you use.
• The free ATS checker: resume text is processed on our server and sent to the configured AI service to generate findings. The response includes the extracted text and result. This endpoint does not save the full resume in our database, whether or not you are signed in, but it stores the score, grade, a SHA-256 hash of the resume text and a timestamp for benchmarks. A hash is a fingerprint for identifying repeat text, not a stored copy of the resume and not a guarantee of anonymity.
• Job Compass: pasted CV text and deterministic ranking stay in page memory until you continue. File uploads go to our server for text extraction, not to job providers or a model. Only confirmed role, location and remote filters are queried against free job sources. Selecting a job temporarily stores the exact CV and posting in this tab for Job Check. Your previous Job Check draft is preserved separately in session storage. Discovery does not send CV text to analytics.
• Job Checks: the initial resume-to-posting comparison uses CareerForge rules on our server. For both signed-in and no-account runs, we store scores, verdicts, timestamps, input and posting hashes, run identifiers and an account or browser identifier (or a hashed IP fallback) for allowances, retries and comparisons. Consented campaign attribution may also be stored. Saving a Target Job stores the posting and report, which may include resume excerpts, with your account. AI rewrite actions send the selected text and relevant context to the model service separately.
• Browser recovery and continuation: the free checker saves resume text and carry-forward details in both session storage and local storage, and its full result in session storage. Job Checks save drafts in session storage and pending inputs and recent reports in local storage. Local storage can remain after you close a tab or sign out. These product records are separate from analytics consent; on a shared device, clear this site’s browser data when you are finished.
• Reports by email: when you request an emailed ATS or Job Check report, we store your email address, findings and report details, with a browser identifier when supplied, and send the email through NanoCorp. Reports can contain resume details or excerpts and quotes from the posting even though they do not store a separate full-resume upload. Emailed Job Check links open without sign-in: anyone with the link can read the stored report while it is valid. Treat the link as private.
• Plan and payment records: your plan, the Stripe customer and checkout identifiers, the amount, currency and product of each payment. Card numbers are entered on Stripe’s own checkout page and never reach us.
• Support and coaching: what you write to the in-product AI chat, recent conversation history and context such as your name and page activity are processed to generate a reply. Reply-usage records are stored for plan limits. Signed-in replies are cached for a five-minute retry window; expired cached replies are cleared on your next chat request. Messages sent to support outside the chat are handled through the platform’s support tools.
• Usage measurement and operational records: browser analytics and campaign attribution depend on your explicit acceptance (see below). Server-side records also cover checker completions, requested report emails, account actions and payments. Allowance, abuse-prevention and feedback records may include account identifiers or hashed IP addresses; these are not removed by rejecting analytics.

Why we process it

• To run the tool you asked for, and to keep your work so it is still there on your next visit (performance of our contract with you).
• To keep your account, plan and sign-in working, and to keep the service secure (contract and our legitimate interest).
• To take payment and to reconcile a completed checkout with the right account (contract).
• To answer your support messages (contract and legitimate interest).
• To measure how the product is used so we can fix what does not work (your consent). You can withdraw analytics consent at any time; this does not stop processing needed to provide a requested tool, maintain its allowance or record a payment.

Who else processes it

These are the providers actually involved in running CareerForge:

• Vercel: hosting and serving the application.
• Cloudflare: the network edge in front of the site.
• Neon: the managed Postgres database where your account and documents are stored.
• NanoCorp: the platform that runs this company: it provides the hosted checkout link, the model gateway below, the usage measurement described below, and the support tooling.
• AI providers and the configured model gateway: text and relevant context for AI findings, rewrites, tailoring, cover letters, interview tools or chat are sent through an OpenAI-compatible API. NanoCorp provides a model gateway; the application can also be configured for an AI provider directly. This is third-party processing to produce the output you request, not a sale of your resume. The current provider and gateway retention and training arrangements have not been verified for this policy. We do not promise zero retention or that providers never use submissions for training.
• Stripe: payment processing and card data, on Stripe’s own pages.
• Public job boards and job APIs: job sources receive search terms when queried, not your resume. If you supply a posting URL, our server requests it to read the posting. Opening an external job or company link takes you to that site, where its own privacy practices apply.

Cookies and measurement

Necessary cookies. These are always on, because the product cannot work without them:

• Sign-in session cookies set by our authentication layer, so you stay logged in.
• careerforge_region: records the edge region classification. Analytics still waits for explicit acceptance in every region. Kept one day.
• careerforge_consent: remembers the choice you made below. Kept 180 days.

Browser measurement, only after acceptance. When analytics is allowed, we load NanoCorp’s analytics script and store:

• careerforge_first_touch: a cookie recording where your first visit came from, kept 180 days. A matching entry and analytics identifiers are also held in local storage, which has no automatic expiry in the application.
• Events for the steps you complete in the product, sent to NanoCorp’s analytics service, with an identifier for your account or browser.

Product analytics waits for your explicit acceptance in every region. Rejecting stops browser analytics and removes analytics-only cookies and storage. It does not clear your resume, drafts or reports, and it keeps an existing browser identifier used for the free Job Check allowance. It also does not delete events already sent to the analytics service. We do not use advertising cookies or send these events to ad networks.

Product-measurement events sent by our server also require an accepted consent choice in the current request. Without that choice, or without a request context, those analytics events are skipped. Necessary account, payment, allowance and retry records still support the service; they are not analytics permission. Cookie rejection does not delete these operational records or events already sent.

Cookie preferences Change your choice at any time.

How long we keep it

• Account-linked documents and records remain until removed or your CareerForge account is deleted. The account deletion action deletes the CareerForge user row and data linked by cascading database relationships, including saved documents, interview sessions, saved jobs, tracker entries, vault notes and account-linked Job Check runs.
• Account deletion does not automatically erase browser storage, your NanoCorp identity, previously sent email, external analytics records, no-account check records, benchmark hashes or emailed-report records. Some rewrite-usage and feedback records are not cascade-linked to the account either. Contact support about these separately.
• Payment history survives account deletion. Legacy one-time order records, which can include resume text, posting text and deliverables, also remain after the account link is removed. They are separate from account documents.
• Emailed Job Check links stop opening after 60 days. Link expiry is not deletion of the stored report. The application does not currently enforce an automatic deletion schedule for emailed reports, anonymous run records, benchmark hashes or legacy orders.
• Session storage is scoped to the browser tab or session; local storage has no application-enforced expiry and can persist until cleared or removed by a product action. Cookies have the lifetimes listed above. Clearing this site’s browser data removes local copies, not server records.
• This page does not promise a fixed deletion time for infrastructure logs, backups or provider-held data; their retention and removal arrangements have not been verified here.

Your rights

You can ask for a copy of your data, correct it, have it deleted, take it elsewhere, object to processing based on legitimate interest, or withdraw cookie consent (the link above does that instantly). Email support@career-forge.net from your account address and we will action it. If you are in the EU, EEA or UK you can also complain to your national data protection authority.