Privacy Policy

Who we are

Career Agent is operated by RND HORIZON LLC, a Florida limited liability company in the United States (“we”, “us”). We act as the controller of the personal data described in this policy and are responsible for it. Write to us at privacy@rndhorizon.com, or by post to RND HORIZON LLC, 7901 4th St N #24768, St. Petersburg, FL 33702, United States.

If you live in the European Economic Area (the European Union, Iceland, Liechtenstein and Norway), the United Kingdom or Switzerland, this policy is also the information the General Data Protection Regulation (GDPR), the UK GDPR and the Swiss Federal Act on Data Protection (FADP) ask us to give you. We have no establishment in the European Union, the United Kingdom or Switzerland.

If you live in Türkiye, our notice under the Personal Data Protection Law No. 6698 (KVKK) is published in Turkish as the “KVKK Aydınlatma Metni”.

What we collect

We collect only what is needed to provide the service you use:

• Account data: name, email address, password hash (never the password itself), interface language, email notification choices, and the site or link that sent you to the sign-up page or the whitelist (for example “reddit.com”, or the label of an ad).
• If you choose to sign in with Google: your name, your email address, whether Google has confirmed it, and Google's identifier for your account, which Google sends us. We never receive your Google password or anything else from your Google account. Google handles the sign-in under its own privacy policy.
• If you choose to sign in with Apple: your name (only the first time, and only if you share it), your email address or the private relay address Apple makes for you, and Apple's identifier for your account, which Apple sends us. Apple also gives us a token that lets us remove Career Agent from your Apple ID. We keep this token encrypted, use it for nothing else, and delete it with your account. When you delete your account, we use it to tell Apple to end Career Agent's access. If Apple does not answer at that moment, we keep trying for several hours and then delete the token. If we hold no such token for your account, the iPhone app asks you to confirm with Apple once more when you delete your account, so that we can do the same. If you skip that, or delete your account on the website, you can remove Career Agent yourself in your Apple ID settings. We never receive your Apple ID password. Apple handles the sign-in under its own privacy policy.
• Profile data you provide or confirm: contact details you add (phone, city, links), work history, education, skills, languages, certifications, projects, achievements and career goals.
• A photo, only if you add one: we store a new picture made from the area you crop, without the location, camera and date details the original file may carry. A résumé shows it only when you turn it on, in a template with a place for a photo. We never analyze it and never use it for matching.
• Job-search preferences: target roles, seniority, work arrangements, locations, willingness to relocate, work authorization by country, salary expectation, industries and companies to exclude.
• Documents you upload (résumés) and the text extracted from them, text you paste, and your conversations with the profile interviewer and the career coach.
• Job and application data: postings you save or add, fit analyses, drafts, approved versions, exports, status history and notes.
• The browser extension, if you connect one: the name you give each browser, when it was connected and last used, and the code that connects it, which we keep only as a one-way hash. When you press Save in the extension, it sends us the page's address, the title, company and place you confirmed, the job data the page publishes about the posting, and the text of the page or the text you selected. We keep what you send as a job you added.
• Interview practice, if you use it: the practice questions written for an application, your practice answers (typed, or recorded and written out), the feedback on them and, for an answer given aloud, how it was said: its length, pace, filler words and pauses, measured from the written-out words. We do not keep the recording. If you also turn on camera feedback, how the answer came across on camera: the share of the time you looked into the camera, your head moved, a smile was visible, and you were well framed and well lit. These totals are worked out in your browser; we never receive the camera picture. If you take a live video interview, the same for your spoken answers, with the interviewer's follow-up questions and your replies to them, and when and for how long the interviewer was shown.
• Practice tests, if you take them: the tests you start (their kind, level, mode and language, and the questions as they were asked), the answer you choose to each question, whether it was right, how long it took, and your results. They stay in your account: we never share them with employers and never use them to rank or filter jobs or applications.
• English practice, if you use it: the reading, grammar and vocabulary sets you start (their skill, level and mode, and the questions as they were asked), the answers you choose, whether they were right and how long they took, and your results; the writing tasks you start, the texts you write for them, what we measure in them (such as their length) and the feedback on them. To score a text against the rubric we send it, with its task, to our AI provider, only for that. They stay in your account: we never share them with employers and never use them to rank or filter jobs or applications.
• Usage and security data: sessions with browser and system name, keyed hashes of IP addresses, sign-in and security events, and monthly usage counts for plan limits.
• If you use the Career Agent app on a phone: the app keeps your sign-in in the phone's secure storage, and we keep only a one-way hash of it, as for any session. If you allow notifications on a phone: its push token (an address for the app on that phone, which says nothing about you), whether it is an iPhone or an Android phone, when it was registered and last used, and the sign-in it belongs to.
• Billing data, if you buy a paid plan: the payment is taken by Link, Stripe's service, which sells the plan to you as merchant of record (“Sold through Link”) and handles your payment details under its own privacy policy. We store your Stripe customer and subscription identifiers and plan status, never card details.
• If you buy a paid plan from Türkiye: the pre-contract information form and the distance sales contract you accepted, with the name, email address, plan, price and dates they state.
• If you confirm a school email for the Student plan: the school's domain (for example “example.edu.tr”), a keyed fingerprint of the address, so that one school address confirms one account at a time, and when you confirmed it and when the confirmation ends. We use the address itself once, to send you the link, and do not keep it, except in the copy of that email, kept like every email we send.
• If you buy a paid plan from the EEA, the United Kingdom or Switzerland: the pre-contract information you were shown, your request to start the service at once with your acknowledgement of what that means for your right of withdrawal, the name, email address, plan, price and dates, and, if you withdraw, when you withdrew and what was refunded.
• If you buy a paid plan from the United States or Canada: the purchase terms you were shown before paying (what you buy, the price, how often it renews and how to cancel, and for a whitelist price when it ends and what you pay after it), your consent to the automatic renewal, your acceptance of the Terms of Service, the name, email address, plan, price and dates, and when we sent you the confirmation and the reminders about it.
• If you make a request about your personal data: the request, its date and our answer.
• If you write to us through the contact form: your name, your email address and your message. We send them to our company mailbox through our email delivery provider and keep nothing of them in Career Agent, except keyed hashes of your network address and email address, for as long as the form's limit on repeated messages runs.
• Records of what you were shown and agreed to: which version of these terms and notices, and when.
• If you ask to join the whitelist: your email address, the role you look for, the country you look for work in, your interface language, the site or link that sent you to it (for example “reddit.com”), when you confirmed your address, whether it took one of the whitelist's places, when we invited you, and, if you ticked the separate box for launch emails, when you ticked it and the version of its text. You do not have to be a user, and you give us nothing else. If you join through our form inside Facebook or Instagram (a Meta lead ad), Meta passes us what you sent in it: your email address (Meta may fill it in from your account, and you can change it before sending), the country you look for work in where the form asks it, and whether you ticked the separate box for launch emails, with the name of the ad campaign (or of the ad or the form) it came from, which we keep as the label of the link that sent you. Meta shows the form in its apps and handles your use of Facebook and Instagram under its own terms and privacy policy. We put no Meta pixel or other Meta code on our site and send Meta nothing about you. As with the form on our site, we then email you a link to confirm your address, and you hold no place until you confirm it. So that the same form entry never reaches the list twice, we keep a keyed fingerprint of the address (not the address itself) for 90 days after we take it from Meta's list.
• Counts of visits to our public pages, by day, page and the site or link that sent the visitor. They contain no IP address, cookie, account or other identifier, and cannot be traced to a person.
• If you turn on the career fair email: that it is on, whether it lists fairs within a distance of your places or anywhere in their countries, the distance you chose, whether online fairs are included, and when it was last sent. The fairs near you are worked out from the places already in your profile (where you live and the places you search); we do not track where you are.
• If you try Career Agent without an account (the try page, /try): the CV you upload or paste and the text taken from it, the profile we make from it, the roles you confirm, the postings suggested to you with one of them read requirement by requirement, the record of the try (its status and times, and the record that you were shown the try notice and asked for the result), the site or link that sent you, a one-way keyed hash of your IP address and a cookie that identifies the try. We ask for no name or email address for a try; they reach us only if your CV contains them, or if you open an account.

Sensitive information

We do not ask for special categories of data such as health or disability, memberships of associations or trade unions, religious or philosophical beliefs, or criminal records. If you choose to include such information in your résumé, profile or conversations, we process it only on the basis of your separate, optional explicit consent (GDPR Article 9(2)(a)), which you can give or withdraw at any time in Settings → Privacy & data. Without that consent, please remove such information before you upload a document.

How we use it

To provide the service: building your profile, finding and analyzing jobs, drafting, checking and exporting documents, tracking applications, coaching, and account management (contract performance).

To save the pages you send with the browser extension, as jobs you added (contract performance). The extension reads a page only when you open it there and sends it only when you press Save; it never reads pages in the background. We use and transfer what the extension sends in line with the Chrome Web Store User Data Policy, including its Limited Use requirements.

To keep the service and your account secure and prevent abuse (legal obligation to secure data, and legitimate interests).

To send transactional emails such as email confirmation, password resets and password-change notices, the confirmation of a purchase with the terms you accepted, the reminders before a subscription renews or its price changes where the law where you live asks for them, and the emails you choose in settings: new job matches, reminders about the steps you record for an application, and once a week the new career fairs near your places (contract performance). We send no marketing email other than the launch emails you can ask for on the whitelist form.

To send the notifications you allowed on a phone, about new job matches and the steps you record for an application. Each has a short title and one line, saying how many new matches or reminders there are and never which job or employer. You turn them off in the app under Settings → Notifications or in your phone's settings.

To run the whitelist: we email you a link to confirm your address and may send one invitation to create an account (your request); a confirmed address holds one of the whitelist's places while any are left, and in the private week before the public launch it may create an account and subscribe at whitelist prices. We use the role and the country to plan the launch. We send nothing else from the list, and every one of these emails has a link to leave it.

To send the launch emails, only if you ticked the separate box for them on the whitelist form, on our site or in our form inside Facebook or Instagram (your consent): at most three, when the private launch opens, the day before it ends, and at the public launch. The box is never ticked for you and is not a condition of joining. Every one of these emails names us and our postal address and has a link that stops them at once; you can also write to us. If you create an account from your place, your consent goes with it as a record, and stopping the emails is recorded the same way.

To answer a message you send us through the contact form (legitimate interests, or steps you ask for before a contract).

To count visits to our public pages on our own server, so we know which pages are read and where visitors come from, and to count how many accounts were opened and how many paid subscriptions were bought from each site, link or ad (legitimate interests). These counts name nobody and are not sent to an advertising or analytics service.

To prepare the result you ask for on the try page without an account: we read your CV, make a profile from it, compare it with the postings for your country and read one posting requirement by requirement (steps you ask for before a contract). We email nothing to a visitor who tries without an account.

We do not sell personal data, and we do not use your data for advertising.

Legal bases

Where the GDPR, the UK GDPR or the Swiss FADP applies, each purpose rests on the legal basis below (the articles are the GDPR's and the UK GDPR's). Where we rely on our legitimate interests, you may object at any time (see “Your rights”). You need to give us an email address and a password, or use Google or Apple, to have an account; everything else is up to you, but a feature cannot work without the data it uses.

AI processing

When you use AI features, the relevant parts of your profile, documents, conversations and job postings are sent to our AI provider in the United States (when it cannot be reached, a backup AI provider in the United States answers instead) to perform the task you requested, under commercial terms that do not allow your data to be used to train models. AI output is checked against your confirmed evidence before you see it, and nothing is used in an application until you approve it.

When you try Career Agent without an account, the text of your CV, pictures in it where needed, and the postings are sent to our AI provider only to prepare that result. Our AI provider and our backup AI provider may each keep what they receive for up to 30 days to prevent misuse, and longer if their safety systems flag it.

When a résumé you upload carries content in pictures (badges, logos, scanned pages, a section pasted as an image), those pictures are sent with it so the AI can read their words, and what is read from them is marked so you can check it. A picture that looks like a photo of you, by its shape and its place at the head of the résumé, is not sent. A photo of you that is part of another picture, such as a scanned page, or that is not recognised as one may be sent: the AI is instructed not to read, describe or interpret it, nothing is taken from it, and it never becomes your profile photo. The photo you add to your profile is never sent to an AI provider.

When you practise an interview, your answer is sent to our AI provider with the question and the parts of your profile it may draw on, so it can give feedback on the answer. When you practise aloud, your recording is sent to our speech provider in the United States to be written out, and the text of each question is sent to it to be read aloud. Career Agent never stores the recording, and asks the provider to delete each transcript and each question read aloud as soon as it has received them; the provider may still keep them in its backups for up to 30 days and in its own security and debugging logs. Your voice is never used to identify you, and nothing about your emotions or personality is inferred from it or from your answers. When you turn on camera feedback, the camera picture is read by software that runs in your browser (Google's MediaPipe face landmark model, served from our site) and never leaves your device: no video, picture, face landmark or face measurement is sent to us or to anyone else, and only the totals named above are kept with your answer. The software does not recognise or identify you, and nothing about your emotions, personality or character is inferred; a smile is reported only as visible or not. In a live video interview, the interviewer's questions, its short replies and its follow-up questions (written by our AI provider from your answer, so they may repeat words you said) are read aloud by our speech provider, and only that voice is sent to our video interview provider in the United States, which shows the interviewer on video speaking it. That provider receives nothing from you: not your camera picture, your microphone or your answers. To show you the interviewer, your browser connects to the video streaming service that provider uses, which sees your device's network address. The screen always says that the interviewer is an AI.

Fit analyses describe how your documented experience covers a posting's stated requirements. They are not automated decisions about you, they do not predict hiring, and they are not shared with employers. We make no decision based solely on automated processing that has legal effects for you or affects you similarly significantly (GDPR Article 22): the order of suggestions and every analysis are information for you, and you decide what to do with them. You can contest any result by contacting us.

Sharing

We share data only with processors that help us run the service, under data-processing agreements. Below we name them by what they do and where they process data; write to us, and we tell you their names:

• Hosting, database and file storage: our cloud hosting provider, in the European Union (Germany).
• AI processing: our AI provider in the United States and, when it cannot be reached, a backup AI provider in the United States. We may change these providers. If what a provider does, where it processes data, the safeguard for the transfer or how long it keeps data changes, we update this page before the change.
• Speech (writing out recorded practice answers and reading practice questions aloud): our speech provider in the United States, only when you practise an interview aloud.
• The live video interview (showing the AI interviewer on video, from the interviewer's voice; the video reaches you through a streaming service the provider uses, from servers in the region nearest to you, which may be outside the United States): our video interview provider in the United States, only when you take a live video interview.
• Stripe and Link (payments for paid plans: Link takes the payment as the seller of record, collects and pays the sales tax or VAT, and sends the receipts and invoices; it acts as a controller of your payment details) and our email delivery provider in the United States (transactional email, and delivering the messages sent through the contact form to our mailbox).
• Our push notification provider in the United States, only for a phone where you allowed notifications: as our processor it passes the app's notifications to Apple's push service (APNs) or Google's (Firebase Cloud Messaging), which deliver them to your phone.
• Google (sign-in), only if you choose "Continue with Google": Google learns that you signed in to Career Agent and receives nothing from your profile.
• Apple (sign-in), only if you choose "Continue with Apple": Apple learns that you signed in to Career Agent, and that you deleted your account. It receives nothing from your profile.
• Google and Apple, when you choose to sign in with them, receive what the sign-in needs as independent controllers under their own privacy policies, not as our processors.

Employers

We never send your data to employers. You submit applications yourself on the employer's site. Job postings are read from employers' public career sites, and from public employment services and job sites; what we ask those services and sites is a job title and a country, never anything about you.

Career fairs are read from the public calendars of employment services and from organisers' own pages, the same for everyone; nothing about you is sent to them. You register for a fair on its organiser's site, never through us.

Retention

We keep account data while your account is active and delete it on the schedule below:

• When you delete your account, your profile, photo, uploaded files, documents, approved versions, applications, practice interviews, practice tests, English practice, conversations, usage counts and consent records are permanently erased.
• A practice interview, with its answers and their feedback, is kept until you delete it, its application or your account.
• A practice test, with its answers and result, is kept until you delete it or your account.
• An English practice set, or a text written for a writing task with its feedback, is kept until you delete it or your account.
• A browser you connected stays connected until you disconnect it, in Settings or in the extension, or delete your account. A page you saved is a job you added and is kept like one.
• Sessions end after 30 days without use and are then deleted.
• A phone's push token is deleted, at the latest, when you sign out of the app on it, when you end that sign-in in Settings, when that sign-in is deleted after 30 days without use, when you turn notifications off in the app, when you next open the app after turning notifications off in your phone's settings, when the push service tells us the token no longer reaches the phone, or when you delete your account.
• The security log is deleted after 12 months; when you delete your account, its link to you is removed at once.
• Copies of the emails we sent are deleted after 30 days. Confirmation links work for 24 hours and password-reset links for 60 minutes; their records are deleted 7 days after they stop working.
• If nobody signs in to or uses your account for 24 months, we email you 30 days before and then permanently delete the account and everything in it, as if you had deleted it yourself.
• Copies in backups are deleted within 8 days.
• If you try Career Agent without an account and do not open one, your CV and its file, the profile, the roles, the suggestions, the analysis and the record of the try are deleted 24 hours after you upload the CV, or at once when you press “Delete now” on the result; copies in backups are deleted within 8 more days. If you open an account, they stay in it and are kept as the rest of it is. The keyed hash of your IP address is kept for at most 48 hours.
• We keep a log of what we delete, without personal data: the date, the kind of record, how many records and the method. The log is kept for 3 years.
• You can delete each uploaded résumé or pasted text yourself in Settings → Privacy & data. Information already added to your profile stays there until you edit it.
• You can replace or delete your photo yourself in your profile. Either one also deletes the files exported from approved versions that show the photo.
• If you ask to join the whitelist and do not confirm your address, we erase it 7 days after the last confirmation email (the link in it works for 72 hours). A confirmed entry is erased 12 months after you confirmed, as soon as you create an account, or when you ask: use the link in any whitelist email, or write to us.
• When a whitelist entry is erased because the address was never confirmed or because you created an account, we keep only the date, the country, the site or link that sent you and whether it held a place, without your address, name, role or consent, to count how many people joined and how many places are taken. That count is deleted when the entry's 12 months are over. If you ask us to remove you, nothing is kept and your place is freed; only if your address came from our form inside Facebook or Instagram does its keyed fingerprint stay until its 90 days are over, so that Meta's list cannot add you again.
• A record that you agreed to the launch emails, or stopped them, is kept with your account and erased with it, like the other consent records.
• Counts of visits to public pages are kept for 25 months.
• A student confirmation lasts 12 months. A month before it ends we remind you if you pay for the Student plan; when it ends we delete it, and the Student plan stops renewing. A link that was not followed (it works for 72 hours) is forgotten 7 days after it stops working.
• If you buy a paid plan from Türkiye, the forms you accepted, filled with your details, are kept for 3 years after the payment, as Turkish consumer law requires, also if you delete your account (only their link to your account is removed). Forms accepted for a payment that was never made are deleted after 7 days.
• If you buy a paid plan from the EEA, the United Kingdom or Switzerland, the information you were shown, your request to start at once and a withdrawal with its refund are kept for 3 years after the payment in the same way, so that we can show what was agreed while a claim about it can still be made.
• If you buy a paid plan from the United States or Canada, the purchase terms you were shown, your consent to the automatic renewal and when we sent the confirmation are kept for 3 years after the payment or, for a subscription, until one year after it ends if that is later, so that we can show what you agreed to (California's automatic renewal law asks for this), also if you delete your account (only their link to your account is removed).
• A message you send through the contact form stays in our company mailbox, not in Career Agent, for as long as we need it to answer you and to deal with what follows from it.
• A request you make about your personal data and our answer are kept for 3 years after the answer, also if you delete your account (only their link to your account is removed), so that we can show it was answered.
• Stripe and Link retain billing records as required by the law that applies to them.

Your rights

You can access, correct and export your data at any time (Settings → Privacy & data provides a complete JSON export), delete uploaded files, withdraw a consent, and delete your account permanently. Depending on where you live, you may also object to or restrict processing and complain to a supervisory authority. To exercise any right, use the request form in Settings → Privacy & data or write to us at the address above; we answer within 30 days, free of charge. If you tried Career Agent without an account, you have no account to sign in to: write to us at the address above; “Delete now” on the result deletes the try at once.

In the EEA and the United Kingdom you have the right of access (Article 15), to rectification (Article 16), to erasure (Article 17), to restriction of processing (Article 18), to data portability (Article 20: the JSON export, or we send it to another service where that is technically feasible), and to object to processing based on our legitimate interests (Article 21). Where we rely on your consent, you can withdraw it at any time; this does not affect what was done before. Where the GDPR or the UK GDPR applies, we answer within one month at the latest; for complex or numerous requests we may take two more months, and we would tell you why within the first month. In Switzerland the FADP gives you the same rights, answered within 30 days.

You also have the right to lodge a complaint with a supervisory authority: in the EEA, the data protection authority of the country where you live, work or think the infringement took place (the European Data Protection Board lists them at edpb.europa.eu); in the United Kingdom, the Information Commissioner's Office (ico.org.uk); in Switzerland, the Federal Data Protection and Information Commissioner (edoeb.admin.ch). In Canada, you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca). We would welcome the chance to answer your concern first.

International transfers

We are based in the United States, and our processors may process data outside your country. Our database and files are hosted by our cloud hosting provider in the European Union (Germany). The recipients below process data in the United States, for which the European Commission's adequacy decision of 10 July 2023 covers only organisations certified under the EU-U.S. Data Privacy Framework (DPF). For a recipient that states it is certified (under the EU-U.S. DPF and, for data from the United Kingdom and Switzerland, its UK Extension and the Swiss-U.S. DPF), the transfer relies on that certification; otherwise, or for what its certification does not cover, on the Standard Contractual Clauses approved by the European Commission (Decision (EU) 2021/914) in its data processing terms, with the UK Addendum for data from the United Kingdom and the adjustments the Swiss Commissioner recognises for data from Switzerland. Where Turkish law applies, transfers abroad are subject to Article 9 of the KVKK. Data processed outside your country is subject to the laws of that country and may be accessed by its courts, law enforcement and national security authorities.

You can ask us for a copy of the safeguard that applies to a recipient by writing to the address above.

Security

Data is encrypted in transit, passwords are hashed with scrypt, sessions use random tokens stored only as hashes, approved documents and consent records are protected against modification at the database level, and access to each record is restricted to its owner.

Cookies

We use only strictly necessary cookies: a session cookie that keeps you signed in (up to 30 days), a cookie that remembers the language you chose (365 days) and, if you try Career Agent without an account, a cookie that identifies only that try (at most 24 hours; it stops working when the try is deleted). We do not use analytics or advertising cookies. We count visits to our public pages on our own server, by day, page and the site or link that sent the visitor, without any cookie, IP address or identifier, and we do not pass those counts to any other service. Checkout opens on Stripe's own site, under Stripe's cookie rules.

Children

The service is intended for people aged 16 and over.

Changes

We will notify you by email of material changes to this policy before they take effect.