Privacy Policy

Effective date: May 18, 2026 · Last updated: May 18, 2026

CareerCRM ("we", "us", or "our") operates the CareerCRM web application and mobile app (collectively, the "Service"). This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

By using the Service you agree to the collection and use of information as described here.

1. Information We Collect

We collect only the information you provide directly to us:

Account information — your email address and password (stored as a secure hash) when you register.
Job search data — job listings, companies, statuses, salary ranges, and notes you enter.
Contact data — names, companies, roles, and email addresses of professional contacts you add.
Interaction logs — notes and details about networking conversations you record.

We do not collect any data automatically beyond what is necessary to operate the Service (e.g. server logs for error diagnosis). We do not use analytics, advertising trackers, or third-party cookies.

2. How We Use Your Information

To provide, maintain, and improve the Service.
To authenticate you and keep your account secure.
To send transactional emails you request (e.g. password reset).
To respond to support requests.

We do not sell, rent, or share your personal information with third parties for marketing purposes.

3. Data Storage and Security

Your data is stored on secure servers hosted by Railway (railway.app). We use industry-standard measures including encrypted connections (HTTPS/TLS), hashed passwords, and short-lived authentication tokens to protect your information.

No method of transmission over the internet is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

4. Data Retention

We retain your data for as long as your account is active. You may request deletion of your account and all associated data at any time by contacting us at the email address below. We will delete your data within 30 days of receiving your request.

5. Third-Party Services

The Service uses the following third-party infrastructure providers:

Railway — backend hosting and database (privacy policy)
Vercel — web frontend hosting (privacy policy)
Resend — transactional email delivery (privacy policy)

These providers process data only as necessary to deliver their services and are bound by their own privacy policies.

6. Children's Privacy

The Service is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

7. Your Rights

Depending on your location, you may have the right to:

Access the personal data we hold about you.
Request correction of inaccurate data.
Request deletion of your data.
Export your data in a portable format.

To exercise any of these rights, contact us at the email address below.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this page. Continued use of the Service after changes constitutes acceptance of the updated policy.

9. Contact Us

If you have any questions about this Privacy Policy or how your data is handled, please contact us at:
alingrin@gmail.com