Trust & Transparency

Trust & Transparency

Your career data is deeply personal. Here is exactly what we collect, why we collect it, how we use it, and what we will never do with it.

Your career history isn't just random text on a screen. It represents years of late nights, high-stakes decisions, proud achievements, confidential projects, and your most ambitious future goals. When you trust a software platform with that kind of information, you deserve total, unvarnished honesty about how it's stored, processed, and protected.

We don't believe in hiding behind 50 pages of impenetrable legal boilerplate. CareerWin is built as a private, high-leverage career intelligence operating system for your professional life. Here is our plain-English, transparent blueprint of how we handle your career data.

Trust commitments last reviewed: September 12, 2026|Next scheduled review: October 12, 2026

1. What We Collect

We only collect data that directly powers your career intelligence and application materials. We don't harvest peripheral browsing habits, tracking cookies from third parties, or unnecessary device data. Here is everything we collect when you use CareerWin:

Resume Text (Pasted or uploaded)

When you upload or paste an existing resume, we parse out the text: your work history, titles, dates, bullet points, skills, and education. We convert this into structured data for your baseline profile.

LinkedIn Profile Data (Pasted text, not API access)

We process the public text of your LinkedIn profile that you paste (we do not have API access to LinkedIn) so you can keep your public professional presence consistently in sync with your career narrative.

Career Goals & Preferences

The target job titles, seniority levels, salary expectations, preferred industries, and work arrangement preferences you specify.

Career Deep-Dive Transcripts

The specific examples, business metrics, technical decisions, and project outcomes you share during our interactive Career Deep-Dives to prove your claims.

Job Alert Emails (If Gmail connected)

If you connect your job alerts, we read only the metadata and extracted job posting text from known senders. We never read or store full personal email bodies.

Application History

The roles you apply to, application submission dates, interview stages, and status updates you log to manage your active search pipeline.

Browser Extension Activity

For users of our browser extension, we temporarily access job application pages visited specifically for autofill functionality.

2. Why We Collect It

Every data point we ingest has a clear, functional purpose designed to increase your hiring signal and significantly reduce your application time. We do not collect speculative data for advertising or background brokering.

To Build Your Master Work Record

We structure your career history into a persistent, private master profile. This serves as your single source of truth, ensuring every document is rooted in authentic, verifiable evidence.

To Match Opportunities Against Your Profile

We compare incoming job requirements against your verified skills and accomplishments, calculating precision match scores so you only focus on high-compatibility roles.

To Generate Tailored Application Materials

We compile customized Application Packages, including tailored resumes and high-signal cover letters, by highlighting your most relevant real-world accomplishments for each job.

3. Your Career Content Is Not Used to Train Public AI Models

CareerWin utilizes enterprise Large Language Model (LLM) API endpoints to synthesize narrative structures and format application packages. Configured AI service providers are contractually restricted from using your data to train, retrain, or improve public AI foundation models.

Stateless AI Processing (Google DeepMind, OpenAI, Anthropic)

We access frontier AI models exclusively via commercial enterprise APIs. Your resume text and career prompts are transmitted securely, processed in volatile memory to generate your requested draft, and are not stored in third-party model data warehouses.

Strict Public Model Training Prohibition

Under enterprise API terms, our configured service providers are contractually prohibited from using your private career records, interview transcripts, or uploaded materials to train public foundation models.

Short-Term Provider Abuse Logs & Ephemeral Processing

Enterprise API providers may temporarily retain encrypted API payloads for a brief window (typically up to 30 days) solely for statutory abuse monitoring and fraud prevention before automated deletion, completely isolated from model training pipelines.

4. Email Scanning Scope (Gmail Integration)

Connecting Gmail allows CareerWin to automate checking job alert emails. We know that connecting your email requires immense trust. Here is exactly how our scanner operates:

Known Job Board Senders Only

Our ingestion engine only reads emails from known job board senders (e.g., Indeed, LinkedIn, Glassdoor).

No Personal Emails, Calendar, or Contacts

We do NOT read personal emails, calendar events, or contacts. Our system ignores everything outside of automated job alerts from approved senders.

No Email Content Stored

We extract the structured job listings and discard the raw email body. No email content is stored on our servers.

Revoke Anytime

Users can revoke Gmail access at any time from their account dashboard. Disconnecting invalidates the token and immediately stops all background scans.

5. Data Retention and Deletion

You own your career narrative. We view ourselves solely as custodians of your evidence. Here are our specific retention and deletion policies:

Active Account Retention

Your data is retained for as long as your subscription or account remains active.

Account Deletion within 30 Days

If you choose to delete your account, all personal data is permanently deleted from our active systems within 30 days.

Data Export (JSON format)

Users can export all their data at any time in JSON format for complete portability.

Backup Retention

Encrypted disaster recovery backups automatically overwrite and expire within a maximum of 30 calendar days after account deletion.

6. Chrome Extension Specifics

Our Chrome extension is designed to securely streamline your application process without intrusive monitoring.

Current Status

The extension is currently in private beta and requires a developer-mode installation.

Permissions & Access

The extension only requests permissions to access job application pages. We do not track or have access to your full browsing history.

Local Data Processing

Form field data is processed locally on your device. Only completed application data is stored in your CareerWin account.

Immediate Revocation

Uninstalling the extension from your browser removes all local data immediately.

7. Methodologies & Claims

We believe in representing our platform's capabilities and user outcomes with complete transparency.

Evidence-Grounded Generation & Pre-Retrieval Authorization

CareerWin retrieves only candidate-approved evidence permitted for the requested task, validates generated drafts against that evidence, preserves source provenance, and asks you to review all final materials before use. Private or sensitive records (salary targets, internal team challenges) are filtered before model retrieval, and our attribution linter prevents ownership escalation (e.g., converting collaborative contributions into sole-credit claims).

What "Verified Outcome" Means

A "verified outcome" on a testimonial means the user confirmed their result through our platform. It does NOT mean the outcome was independently audited by a third party. Company names are always anonymized unless the user explicitly consented otherwise.

Results Methodology

Outcome claims presented on our site are based on self-reported user surveys. Sample sizes, date ranges, and methodologies are documented where claims are made.

No Guarantees

Results are not guaranteed and vary widely by individual based on experience, industry, and market conditions.

8. What CareerWin Does NOT Do

We believe trust is forged through clear, non-negotiable boundaries. Here are the ironclad commitments we make to every CareerWin user:

Never submits an application for you

CareerWin never submits an application for you. You are always the applicant, and every submission requires your manual review, verification, and action.

Does not automate LinkedIn profile changes

We do not have write-access to your LinkedIn account and cannot make automated updates to your profile.

Does not guarantee interviews or job offers

We provide tools to maximize your hiring signal, but we do not and cannot guarantee specific job placement outcomes.

Does not access employer ATS systems directly

We do not integrate via backdoor API into employer Applicant Tracking Systems to bypass standard application flows.

Is not SOC 2 certified

While we employ rigorous security practices and encryption, CareerWin is currently not SOC 2 certified.

Never sells or monetizes your data

You are our customer, not the product. We do not sell your data to recruiters, employers, or data brokers, and we do not run ad networks.