Privacy Policy

CareerPilot is the data controller responsible for your personal data. Contact: admin@mycareerpilot.co.uk

We collect: name, email, employment history, skills, career goals, CVs, cover letters, job applications you track, interview practice transcripts, IP addresses, and usage logs. If you use the Ghost Job Detector, we also store the job listing details you submit (title, company, description, and any other fields provided), whether or not you are signed in.

To build and maintain your Career Profile, analyse CVs and job matches, generate AI coaching and interview feedback, improve the accuracy of our tools, detect fraudulent referrals, and secure your account. We do not sell your personal data to third parties.

We process data under: Contract (providing the Service you've signed up for), Consent (optional features such as marketing emails), Legitimate Interests (security, fraud prevention, and improving our Service), and Legal Obligation (e.g. tax and accounting records).

We use the following processors to run the Service: Supabase (database and authentication hosting), Railway (backend application hosting), Vercel (frontend website hosting), OpenAI (AI-generated analysis, CVs, cover letters, and coaching), Stripe (payment processing — CareerPilot never sees or stores your full card details), Apify (sourcing employer-direct job listings), and Brevo (transactional email, such as job alerts). Each processor is contractually restricted from using your data for their own purposes, including training their own models, beyond what's needed to provide their service to us.

Some processors (including OpenAI and Stripe) may process data outside the UK. Where this happens, we rely on UK GDPR adequacy regulations or Standard Contractual Clauses to ensure your data remains protected to UK standards.

We use encryption in transit (TLS) and at rest where supported by our processors, role-based access controls, and Row Level Security on our database so that, by default, only you can read your own data.

We retain personal data only as long as necessary for the purposes described above, or as required by law (e.g. financial records). You may request account deletion at any time; some anonymised or aggregated data (such as Ghost Job Detector submissions used to improve detection accuracy) may be retained after deletion in a form that no longer identifies you.

You have the right to: access the personal data we hold about you; correct inaccurate data; request erasure ('right to be forgotten'); restrict or object to certain processing; receive your data in a portable format; and withdraw consent at any time where processing is based on consent. To exercise any of these rights, email admin@mycareerpilot.co.uk — we will respond within one month as required by law.

Features such as AI Job Match scores, ATS scores, and the Career Health Score are advisory only — they help you make your own decisions, but no automated system decides whether you get hired, and we do not make any solely automated decision about you that has a legal or similarly significant effect.

We use cookies and similar technologies for login sessions, security, and site performance. See our separate Cookie Policy for full details, including how to manage your preferences.

If you join the CareerPilot Ambassador Programme, we store your unique referral code and a record of who you've referred and whether they've qualified for a reward. We do not share your referred contacts' personal data with you beyond what's needed to show your own referral progress.

AI-generated recommendations are produced using OpenAI's models based on the information you provide. You are responsible for reviewing this content before relying on it or sharing it with a third party (such as an employer).

CareerPilot is for users aged 18+. We do not knowingly collect data from children.

We may update this Privacy Policy from time to time. We'll update the date below when we do; continued use of the Service after a change indicates your acceptance of the updated policy.

If you believe we have mishandled your personal data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk, though we'd appreciate the chance to resolve it directly first via admin@mycareerpilot.co.uk.