Privacy Policy

This policy describes how CareerUplift Recruiter (“CareerUplift,” “we,” or “us”) handles personal data when a recruiter signs up, when their teammates join, and when candidates apply to roles posted through our product. If you are a candidate applying to a role, the hiring company you are applying to is the controller of your application data; CareerUplift is their processor.

We collect only the data needed to run the product:

• Recruiter accounts: email address, full name, hashed password (managed by Firebase Authentication), company name, team role, and preferences (e.g. notification settings).
• Company data: verified domains, branding (logo, colors), email and scorecard templates, audit log of team actions.
• Job and applicant data: job descriptions, resumes, application answers, AI interview transcripts and scores, notes written by your team, stage history.
• Product telemetry: anonymized usage events via Google Analytics when you visit public pages. See “Third parties” below.
• Email delivery metadata: the subject, time, and delivery status of each email we send on your behalf, for audit and support purposes.

• To run core product features: scoring resumes, drafting job descriptions, conducting AI interviews, and delivering notifications.
• To send transactional email on your behalf (team invites, candidate invites, status updates, password resets).
• To secure the service: detect abuse, meet Firebase Auth security requirements, and maintain audit logs.
• To improve the product through aggregated, anonymized telemetry.

We do not sell personal data. We do not use candidate data to train general-purpose AI models.

We use these subprocessors to operate the product:

• Google Firebase (Authentication, Firestore, Cloud Storage): account management and primary data store.
• OpenAI: AI-assisted JD drafting and resume scoring. Inputs are processed to produce the requested output and are not used to train OpenAI models under our contract.
• Zoho ZeptoMail: transactional email delivery on the careeruplift.ai sending domain.
• Google Analytics 4: privacy-respecting traffic measurement on our public pages. You can opt out with a browser extension such as the Google Analytics Opt-out Add-on.

Application data is stored in Google Cloud (Firestore and Cloud Storage) in the region configured for our Firebase project. Backups are managed by Google Cloud. Transactional email content and delivery logs are held by ZeptoMail for the retention period they specify.

Recruiter accounts and company data are retained while your account is active. When a company closes its account, we delete or anonymize the associated data within 30 days, except where a longer period is required by law (for example, audit logs of paid transactions).

Candidate application data is retained per the hiring company’s instructions. Candidates may request deletion through the hiring company or by contacting us directly.

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate personal data.
• Delete your personal data.
• Export a copy of your personal data.
• Object to or restrict certain processing.

To exercise any of these rights, email welcome@careeruplift.ai. We will verify your identity before acting on a request.

Access to data is gated by Firebase Authentication and per-company authorization checks on every API call. We log team actions to an audit trail visible to company owners and admins. We keep dependencies up to date and review access to production data on a least-privilege basis.

CareerUplift Recruiter is a workplace product and is not directed to anyone under 16. We do not knowingly collect personal data from children.

We may update this policy to reflect product changes or legal requirements. Material changes will be communicated by email to the account owner at least 14 days before they take effect. The “Last updated” date at the top of this page always reflects the current version.

Questions or requests: welcome@careeruplift.ai.