Privacy Policy

Last Updated: August 17, 2026

Welcome to CareerCred. This Privacy Policy explains how CareerCred, operating at careercred.io, collects, uses, discloses, and protects information about you. We understand that your privacy is important. This document outlines our practices concerning your personal data when you visit or use our website and app.

When we say “we,” “us,” or “our,” we mean CareerCred. When we refer to “you,” we mean the individual accessing or using our website or app. This policy applies to all visitors, users, and others who access or use CareerCred.

Information We Collect

We collect different types of information from and about you, depending on how you interact with CareerCred. This helps us provide and improve our services.

Account and Profile Information

CareerCred uses passwordless sign-in: you sign in with a one-time “magic link” sent to your email address, and we never collect or store a password. When you create an account, we collect:

Email Address: Used to sign you in and, if you choose to log wins by email, to match incoming emails to your account.
Name: Your first and last name, as provided during onboarding or in your account settings.
Job Title: Used to personalize AI-generated content, such as post starters.
Timezone: Used to schedule reminder and digest emails at appropriate local times. We do not infer your location from your IP address or any other means beyond the timezone you set.

Win Content

The core purpose of CareerCred is to help you capture and organize your professional accomplishments (“wins”). We collect:

Raw Win Input: The text you submit describing a win, whether typed into the app or sent by email to save@mail.careercred.io.
AI-Parsed Fields: Structured details our AI extracts from your raw input, such as a title, date, relevant skills, and a breakdown of the opportunity, your contribution, and the outcome.
Generated Assets: Content generated from your wins at your request, such as post starters, and any digest insights generated across your logged wins.

Communications

We keep records of your correspondence with us, including support emails and inbound emails sent to our win-capture address.

Information We Collect Automatically

When you use CareerCred, we use a product analytics tool (PostHog) to automatically collect certain information about how you interact with the app. This helps us understand usage and fix problems.

Usage Data: The pages and features you use, actions you take in the app, and the dates and times of your visits.
Device Information: Your IP address, browser type, and operating system, as automatically collected by our analytics provider.

We do not use Google Analytics, Facebook/Meta Pixel, or advertising trackers, and we do not collect precise geolocation data.

Cookies

CareerCred uses a small number of cookies, and no more than are necessary to run the product:

Authentication Cookie: Set by our authentication provider, Supabase, to keep you signed in. This is required for the app to function and is not used for advertising.
Analytics Identifiers: Our analytics provider, PostHog, uses a cookie and/or local storage on your browser to distinguish sessions and measure product usage.

We do not currently show a cookie consent banner, since we do not use advertising or cross-site tracking cookies. You can block or delete cookies through your browser settings, though blocking the authentication cookie will prevent you from staying signed in.

How We Use Your Information

We use the information we collect for the following purposes:

To Provide the Service: Operating your account, saving and organizing your wins, and sending you the emails necessary to use CareerCred (e.g., magic-link sign-in emails, win-capture confirmations, reminder emails, and digest emails).
To Generate AI Content: We send your win content to OpenAI to parse it into structured fields, generate suggested post starters, and produce thematic insights across your wins for your digest emails. See “AI-Generated Content” in our Terms of Service for more on how we handle AI outputs.
To Improve the Product: We use aggregated, anonymized analytics from PostHog to understand usage patterns and improve features.
To Process Payments: We use Stripe to process subscription payments and manage billing.
To Ensure Security and Prevent Fraud: We use information to protect CareerCred and our users from malicious activity.
To Comply with Legal Obligations: We may use your information to meet applicable laws, regulations, legal processes, or governmental requests.

We do not currently send marketing newsletters or promotional emails. The emails we send are transactional and product-related, such as win-capture confirmations, weekly reminders, and digest recaps.

How We Share Your Information

We don’t sell your personal data to anyone. That’s a core principle for us. We share information only with the following categories of service providers, each of which processes data solely to provide their service to us:

Supabase: Our authentication and database provider. Supabase stores your account data and win content and manages sign-in.
OpenAI: Processes the win content you submit to parse it into structured fields, generate post starters, and produce digest insights.
Stripe: Processes subscription payments. We do not store your payment card details ourselves.
Resend: Delivers the emails we send (sign-in links, reminders, digests, win-capture confirmations) and receives inbound emails sent to our win-capture address so we can parse them into wins.
PostHog: Provides product analytics so we can understand how CareerCred is used.

We may also share information in these circumstances:

Business Transfers: If CareerCred is involved in a merger, acquisition, or asset sale, your personal data may be transferred as a business asset. We will provide notice before your personal data is transferred and becomes subject to a different Privacy Policy.
Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court order or government agency). This includes protecting our rights, property, or safety, or the rights, property, or safety of others.
With Your Consent: We may share your information for any other purpose with your explicit consent.

Your Choices and Rights

You have certain rights regarding the personal information we hold about you. We respect those rights and want to make them clear.

Access and Correction: You can update your name, job title, and timezone directly in your account settings, or contact us to request access to or correction of other personal information we hold about you.
Deletion: You may request that we delete your personal information, subject to certain legal exceptions (for example, if we need to retain it for legal compliance).
Email Preferences: You can turn off weekly reminder emails at any time from your account settings. We don’t send marketing newsletters, so there’s no separate marketing opt-out.
Cookie Preferences: You can manage cookies through your browser settings. Most browsers allow you to block or delete cookies, though blocking the authentication cookie will prevent you from staying signed in.

To exercise any of these rights, please contact us using the details provided in the “Contact Us” section below. We’ll respond to your request in accordance with applicable US laws.

Data Security

We take reasonable measures to protect your personal information from unauthorized access, use, or disclosure. We implement technical, administrative, and physical safeguards designed to secure your data. But here is the thing: no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. When we no longer need your data, we will securely delete or anonymize it. This means we don’t hold onto your information indefinitely if there’s no good reason to do so.

Children's Privacy

CareerCred is not intended for use by children under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us. If we become aware that we have collected personal data from children without verification of parental consent, we take steps to remove that information from our servers. This aligns with the Children’s Online Privacy Protection Act (COPPA) in the United States.

Links to Other Websites

Our website, careercred.io, may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party’s site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last Updated” date at the top of this document. We encourage you to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy, please contact us:

By email: david@davidweiss.dev