Legal Information

We collect information you provide directly to us when you create an account, use our services, or contact us for support. This includes:

• Account Information: Your email address, password (encrypted), and account preferences.
• Profile Information: Your name, headline, timezone, language preferences, and any other information you choose to provide.
• Content You Create: Monetization plans, service offers, skill analyses, roadmaps, templates, and any other content you create using our platform.
• Payment Information: We integrate with Stripe for payment processing. Stripe handles and stores your payment card details. We only store your Stripe customer ID and subscription status.
• Usage Data: Information about how you interact with our platform, including analytics, logs, usage statistics, and feature usage patterns.
• AI-Generated Content: Content generated through our AI features, including chat conversations, AI-generated offers, analyses, and recommendations.
• Communication Data: Records of communications between you and CreatingCareers, including support requests and feedback.

We use the information we collect for the following purposes:

• Service Delivery: To provide, maintain, and improve our platform services, including AI features, templates, analytics, and all other platform functionality.
• Payment Processing: To process payments through Stripe, manage subscriptions, and handle billing-related communications.
• AI Processing: To power our AI features, including OpenAI integration for chat, content generation, skill analysis, and recommendations. Your content may be sent to OpenAI for processing in accordance with their privacy policy.
• Analytics and Improvement: To analyze usage patterns, understand how users interact with our platform, and continuously improve our services.
• Communication: To send you updates about our services, new features, security alerts, and respond to your inquiries and support requests.
• Security and Fraud Prevention: To protect our platform, users, and prevent fraud, abuse, and unauthorized access.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes.

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data under the following legal bases:

• Contract Performance (Article 6(1)(b)): To perform our contract with you, including providing our services and processing payments.
• Legitimate Interests (Article 6(1)(f)): For analytics, service improvement, security, and fraud prevention where such processing is necessary for our legitimate business interests.
• Consent (Article 6(1)(a)): When you have provided consent for specific processing activities, such as marketing communications (if applicable).

You have the following rights regarding your personal information:

• Right of Access: You can request access to your personal data and receive a copy of the data we hold about you.
• Right to Rectification: You can request correction of inaccurate or incomplete personal data.
• Right to Erasure ("Right to be Forgotten"): You can request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or when you withdraw consent.
• Right to Data Portability: You can request a copy of your data in a structured, machine-readable format. You can export your data through our platform at any time via the export feature available in your account settings, or by contacting us at privacy@creatingcareers.net.
• Right to Object: You can object to processing of your personal data based on legitimate interests.
• Right to Restrict Processing: You can request restriction of processing in certain circumstances.
• Right to Withdraw Consent: When processing is based on consent, you can withdraw your consent at any time.

To exercise these rights, please contact us at privacy@creatingcareers.net. We will respond to your request within 30 days.

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security measures include:

• Encryption: All data transmission uses HTTPS/TLS encryption. Data at rest is encrypted using industry-standard encryption methods.
• Secure Authentication: We use Supabase Auth for secure password storage with bcrypt hashing. Passwords are never stored in plain text.
• Access Controls: We limit access to personal data to authorized personnel only, on a need-to-know basis.
• Regular Security Audits: We conduct regular security assessments and audits to identify and address potential vulnerabilities.
• Infrastructure Security: Our platform is hosted on secure infrastructure provided by Supabase, which implements industry-standard security practices.

However, no method of transmission over the internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

We may share your information with the following third-party service providers:

• Stripe: For payment processing. Stripe handles your payment card information and processes transactions. Please review Stripe's Privacy Policy.
• OpenAI: For AI-powered features including chat, content generation, and analysis. Content you submit may be sent to OpenAI for processing. Please review OpenAI's Privacy Policy.
• Supabase: For database hosting, authentication, and infrastructure services. Data is stored on Supabase servers in secure data centers.
• Email Service Providers: For sending transactional emails, notifications, and support communications.
• Analytics Providers: For understanding how users interact with our platform (if applicable).

We do not sell your personal information to third parties. We only share data with service providers who help us operate our platform and who are contractually obligated to protect your data.

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Account Data: We retain your account information and content for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or legitimate business purposes.
• Payment Records: We retain payment and billing records as required by law, typically for 7 years for tax and accounting purposes.
• Backup Data: Deleted data may persist in backup systems for up to 90 days before being permanently deleted.
• Legal Requirements: We may retain certain information if required by law or to resolve disputes, enforce agreements, or comply with legal obligations.

We use cookies and similar tracking technologies to improve your experience, analyze usage patterns, and personalize content. Cookies are small text files stored on your device.

Types of Cookies We Use:

• Essential Cookies: Required for the platform to function properly, including authentication and session management.
• Analytics Cookies: Help us understand how visitors use our platform, which pages are most popular, and how users navigate the site.
• Preference Cookies: Remember your settings and preferences, such as language and display preferences.

You can control cookies through your browser settings. However, disabling certain cookies may impact the functionality of our platform. For more detailed information about our use of cookies, please see our Cookie Policy.

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country.

When we transfer data from the European Economic Area (EEA) or United Kingdom, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission, to protect your personal data in accordance with GDPR requirements.

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately at privacy@creatingcareers.net, and we will delete such information.

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: privacy@creatingcareers.net
• Support: Contact Support