1. Information We Collect
When you create a CareerIQ account, we collect:
- Account data: email address, hashed password, account role.
- Profile data: name, date of birth, phone number, educational background, skills, and career aspirations you provide.
- Documents: certificates, awards, and other documents you upload to your vault.
- Usage data: pages visited, features used, and interaction logs for platform improvement.
2. How We Use Your Information
- To provide and operate the CareerIQ platform and its features.
- To generate AI-powered career analysis (SWOT, resume, employability score) using your profile data.
- To connect students with relevant job postings, mentors, and institutions.
- To send transactional emails (password reset, session confirmations).
- To improve the platform through aggregated, anonymised analytics.
3. Data Sharing
We do not sell your personal data. We share data only in these cases:
- With institutions: If you join an institution via a join code, your profile and progress are visible to that institution's administrators.
- With corporates: Your public profile (name, skills, score, education) may be visible to corporate users browsing talent, based on your visibility settings.
- With mentors: When you book a session, your name and session topic are shared with the mentor.
- Service providers: We use Anthropic (AI processing), Cloudinary (file storage), MongoDB Atlas (database), and Amazon Web Services (email delivery via Amazon SES). These providers process data only as necessary to deliver their services.
4. Data Retention
We retain your account data for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days, except where retention is required by law.
5. Security
Passwords are stored as bcrypt hashes and are never stored in plain text. All data is transmitted over HTTPS. Access tokens are short-lived JWTs signed with a secret key.
6. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data via your profile settings.
- Request deletion of your account and data.
- Object to certain processing activities.
To exercise these rights, contact us at donotreply@blallab.com.
7. Cookies
We use an httpOnly cookie to store your authentication token securely. We do not use advertising or tracking cookies.
8. Changes to This Policy
We may update this policy from time to time. We will notify you of significant changes by email or via an in-app notice. Continued use of the platform after changes constitutes acceptance of the updated policy.