Privacy Policy

• We never sell your personal information, and we never have.
• We don’t share it for cross-context behavioral advertising. Google Analytics is the one measurement tool we load, and it stays off unless you turn it on in Cookie Preferences.
• Salary data is never shown individually — only in aggregates of five or more.
• You can export your data and delete your account yourself, any time.

Account data: your name, email address, and login credentials (managed by our authentication provider; we never see your password).

Profile and career content you choose to add: roles, education, skills, hobbies, milestones, links, your photo, recommendations, endorsements, applications, messages, and job-tracker entries. You control the visibility of your profile.

Salary information, if you contribute it: stored privately and used only to power aggregate salary intelligence. Individual entries are never displayed, and aggregates are suppressed entirely until at least five people have contributed to a segment.

Usage data: deliberately minimal, and none of it runs without your consent. If you turn on analytics, we load Google Analytics through Google Tag Manager, and Google receives the pages you open plus a fixed set of actions — signing up, logging in, searching, viewing or applying to a job, contributing a salary, sending or accepting outreach, sharing, posting a listing, marking a milestone, and submitting feedback. Those events carry identifiers and categories only: never your name, your email, free text you wrote, or any salary figure. Admin pages are excluded from analytics entirely. We run no advertising or attribution pixels at all. We keep server logs for security and debugging, count job-listing views only in aggregate (excluding bots, prefetches, and the listing’s own managers), and track search-engine crawler traffic by user agent — not people.

We set three essential cookies: your login session, your theme preference, and a record of your cookie choices. If you turn on analytics, Google Analytics sets its own cookies as well. We have no advertising pixels today, and if we ever add them (such as Meta or Google Ads) they would fall under the advertising category below. Those categories are off by default and load only if you enable them in Cookie Preferences — a stricter stance than U.S. state law requires. If your browser sends a Global Privacy Control signal, we treat it as a request to opt out and keep advertising cookies off automatically. You can change your choices any time via “Cookie Preferences” in the footer.

• To run the service: profiles, feeds, search, jobs, messaging, and notifications.
• To send email you’ve chosen to receive — digests, alerts, and reminders — all controlled from your notification preferences, with unsubscribe links in every email.
• To power AI features you explicitly invoke, like resume import and writing assistance. When you use one, the content you provide is processed by Anthropic’s API. We don’t send your data to AI providers otherwise, and it isn’t used to train their models.
• To keep the platform safe: preventing spam, fraud, and abuse.

Other members, according to your visibility settings — your public profile is visible to visitors and search engines if you keep it public.

Employers, only through doors you open: when you apply to a listing, accept recruiter outreach, or join an organization. Recruiters can only message you with your consent. Hiring-team notes about candidacies are internal to the organization and are excluded from any data exports we provide to employers.

Service providers that host and operate the platform on our behalf: Supabase (database, authentication, storage), Vercel (hosting), Resend (email delivery), Anthropic (AI features, only when you invoke them), Sentry (error and performance monitoring), and Google (Analytics and Tag Manager, only if you turn on analytics). Each processes data solely to provide their service to us.

Legal requirements: we may disclose data if required by law, and we will push back on overbroad requests.

We do not sell personal information and we do not share it for cross-context behavioral advertising.

Wherever you live, we extend the same rights: access what we hold about you, correct it, export it, and delete it. Most of this is self-serve — edit any part of your profile, export your resume as PDF or Markdown, and delete your account from Settings → Account, which removes your personal data.

If you’re in a state with a comprehensive privacy law (California, Colorado, Connecticut, Texas, Virginia, and others), these controls cover your statutory rights of access, correction, deletion, portability, and opting out of sale, sharing, and targeted advertising — the latter three being things we don’t do. We honor Global Privacy Control as a valid opt-out signal, we’ll never discriminate against you for exercising your rights, and if we deny a request you can appeal by replying to our decision. For anything you can’t do in-product, email ben@thegoodapps.co and we’ll respond within 45 days.

We keep your data while your account exists and delete it when you delete your account, except where the law requires a longer period. Old notifications and transient records are purged on a schedule. Data is encrypted in transit, access is restricted by row-level security in our database, and we review our dependencies for vulnerabilities. No system is perfectly secure; if a breach affects you, we’ll notify you as the law requires.

Career App is for people 16 and older. We don’t knowingly collect data from anyone under 16; if we learn we have, we’ll delete it.

If we change this policy in a way that matters, we’ll update the date above and notify you on-site or by email before the change takes effect. Questions or requests: ben@thegoodapps.co.