Security & Privacy Protocol
Plain-language summary: the messages and screenshots you submit are used only to produce your risk report. They are transmitted and stored securely, visible only to you, and are never sold to third parties.
Protocol blueprint
- Transport: every request between your device and CareerSteer travels over encrypted TLS. Nothing is transmitted in the clear.
- Storage: documents, pasted text and account records are encrypted at rest on our hosting infrastructure.
- Isolation: your submissions are strictly excluded from external AI training datasets. They are processed to produce your report and for nothing else.
- Access control: row-level database rules mean your scans and profile are readable only by your own authenticated account, not by other users and not by advertisers.
- Non-disclosure: your documents are never shared with the sender of the message you are checking, and are never sold, rented or traded.
- Erasure: deleting your account permanently removes your profile and scan history, and cancels any active subscription.
What we collect
- The text you paste for analysis, and any screenshots you upload.
- Your account email and display name if you create an account.
- A history of your scans (risk rating, score and evaluation) so you can revisit them.
- Basic, non-identifying usage and error diagnostics that keep the service working.
How your data is protected
- All traffic runs over encrypted HTTPS connections.
- Stored data is encrypted at rest by our hosting provider.
- Access rules mean your scans and profile are readable only by your own signed-in account.
- Screenshots are processed for your analysis and are not stored in your scan history.
We never sell your data
- We do not sell, rent or trade your pasted messages, screenshots or personal information to any third party.
- We do not use the contents of your messages to build advertising profiles.
- Your data is never shared with the sender of the message you are checking.
Service providers we use
- A cloud database and authentication provider stores your account, profile and scan history.
- An AI provider processes the text and screenshots you submit solely to generate your explanation; submissions are not used to train models.
- Advertising may be served on free plans. Ad partners may set cookies to measure and serve ads; paid plans are ad-free.
Your choices and rights
- Scanning requires a free account so that your saved reports stay tied to you and our infrastructure is protected from abuse.
- You can update your display name at any time from Account settings.
- You can permanently delete your account and all associated data from Account settings.
- You may request a copy of your data by emailing support@careersteer.app.
Cookies and local storage
- We store your free-check count, your most recent report and your plan status in your browser's local storage.
- A secure session cookie or token keeps you signed in.
- Advertising cookies, where present, are set by our ad partners and can be managed in your browser settings.
Children
- CareerSteer is intended for people aged 16 and over and is not directed at children.
Questions about this policy? Email support@careersteer.app.