Privacy Policy & GDPR Compliance
We take your privacy seriously and are committed to protecting your personal data
Last updated: April 2025
Information We Collect
- •Account information: your full name and email address (obtained via Google Sign-In or direct registration)
- •Resume files and their text content that you upload for analysis
- •Career preferences, target job titles, and job search criteria you provide
- •AI-generated analysis results (scores, feedback, recommendations) associated with your account
- •Interview session data and answers you provide during practice sessions
- •Usage analytics (pages visited, features used) to improve our service — no personally identifiable data is shared with analytics providers
Google User Data — Access, Use, Storage & Sharing
- •ACCESS: We access only your Google account name and email address via Google Sign-In (OAuth 2.0 scopes: openid, email, profile). We do not access Google Drive, Gmail, Calendar, Contacts, or any other Google service.
- •USE: Your Google name and email are used solely to create and identify your CareerSpark AI account. We do not use Google data for advertising, profiling, or any purpose unrelated to operating the service.
- •STORAGE: Your name and email are stored securely in our database and associated with your account. We do not store any OAuth tokens beyond the session needed for login.
- •SHARING: We do not sell, rent, or share your Google user data with any third parties. It is never transferred to advertisers, data brokers, or analytics platforms.
- •LIMITED USE: Our use of data received from Google APIs strictly adheres to the Google API Services User Data Policy, including the Limited Use requirements.
- •REVOCATION: You can revoke CareerSpark AI's access to your Google account at any time at myaccount.google.com/permissions. This will sign you out but your CareerSpark data remains unless you request deletion.
How We Use Your Information
- •Provide AI-powered resume analysis, scoring, and career guidance
- •Generate personalized career path recommendations and skill gap analyses
- •Match you with relevant job opportunities based on your profile
- •Enable interview practice and feedback features
- •Improve and optimize our AI models and service quality
- •Send transactional emails (account-related notifications only — no marketing without consent)
Data Sharing & Third Parties
- •We do NOT sell your personal data or resume content to any third party
- •Resume content is shared with companies only when you explicitly opt in to the Resume Bank feature
- •We use AI inference services (OpenAI / Google) to process resume text — these providers process data under strict data processing agreements and do not retain your data for training
- •We use Base44 as our backend infrastructure provider — your data is stored securely on their platform under a data processing agreement
- •We may disclose data if required by law, court order, or to protect our legal rights
Data Protection & Security
- •All data is encrypted in transit (TLS 1.2+) and at rest (AES-256)
- •Access to personal data is restricted to authorised personnel only
- •We use industry-standard security practices and regularly review them
- •Your resume data is never shared with third parties without your explicit consent
- •Authentication is handled securely via Google OAuth 2.0
Your Rights (GDPR)
- •Right to access: request a copy of all personal data we hold about you
- •Right to rectification: correct inaccurate or incomplete data
- •Right to erasure: delete your account and all associated data
- •Right to data portability: receive your data in a machine-readable format
- •Right to object: object to certain types of processing
- •Right to withdraw consent at any time without affecting prior processing
- •To exercise any of these rights, email us at info@careerspark.com
Data Retention
- •We retain your data for as long as your account is active
- •You can delete your account and all associated data at any time
- •Deleted data is permanently removed from our systems within 30 days
- •Anonymised, aggregated analytics data may be retained indefinitely
- •Some data may be retained longer where required by applicable law
International Data Transfers
- •Your data may be processed in the EU/EEA and the United States
- •All international transfers comply with GDPR Chapter V requirements
- •Standard Contractual Clauses (SCCs) are in place with all non-EEA processors
- •AI processing (e.g. resume analysis) may involve servers in the United States under appropriate safeguards
Contact Us
If you have any questions about this Privacy Policy or our data practices, or if you wish to exercise your GDPR rights, please contact us:
Email: info@careerspark.com
Response time: Within 30 days (as required by GDPR)
GDPR Compliance Statement
CareerSpark AI is fully compliant with the General Data Protection Regulation (GDPR). We are committed to protecting your privacy and ensuring you have control over your personal data. You can exercise your rights at any time through your account settings or by contacting us directly.
Google API Services User Data Policy
CareerSpark AI's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only use the data we receive from Google to provide and improve our service.