Privacy Policy

Carevolve ("we", "us") respects your privacy. This policy explains what personal data we collect, why, and how we protect it.

1. Data we collect

• Account data: name, email, authentication identifiers.
• Career data: CVs you upload, diagnostic answers, application history.
• Usage data: pages visited, features used, device and browser metadata.
• Billing data: handled by our payment processor (Stripe). We do not store card numbers.

2. How we use it

• To provide and personalise the AI career copilot.
• To improve features, security and reliability.
• To send transactional emails (account, billing, security).
• To comply with legal obligations.

3. Legal bases (GDPR)

We process data under the following bases: performance of contract, legitimate interests, consent (e.g. marketing emails), and legal obligation.

4. Sub-processors

We rely on trusted vendors to operate Carevolve, including hosting, AI inference, analytics and payment processing. All sub-processors are bound by data-processing agreements compliant with GDPR.

5. Data retention

We retain account and career data for as long as your account is active. After deletion, backups are purged within 30 days. Billing records are kept for the period required by tax law (typically 7 years).

6. Your rights

You can access, correct, export or delete your data at any time. See our GDPR page for details on how to exercise these rights.

7. Security

Data is encrypted in transit (TLS) and at rest. Access is limited to authorised personnel under strict need-to-know controls.

8. Cookies

We use essential cookies for authentication and analytics cookies (e.g. Google Analytics) to understand usage. You can disable non-essential cookies in your browser settings.

9. Contact

Privacy questions? Email privacy@carevolve.online.