Legal

Privacy Policy

Last updated: March 2026

1. Overview

Career Quiver ("we," "us," or "our") is operated by Unmasked Logic, LLC. This Privacy Policy explains how we collect, use, and protect information about you when you use our website at careerquiver.com and any associated services (collectively, the "Service").

We are committed to handling your data with care. We do not sell your personal data to third parties. We do not share your resume or professional history with employers or data brokers.

2. Information We Collect

Information you provide directly

  • Account information — name, email address, and password when you create an account.
  • Professional profile data — work history, education, skills, certifications, and achievements that you enter to use the resume builder and job analysis features.
  • Uploaded documents — resumes, cover letters, or other files you upload for import or analysis.
  • Payment information — processed by our payment provider (Stripe). We do not store full card numbers on our servers.
  • Communications — emails you send us, including support requests and feedback.

Information collected automatically

  • Log data — IP address, browser type, operating system, referring URL, pages visited, time and date of visits.
  • Usage data — features used, actions taken within the application, session duration, and interaction patterns.
  • Device information — device type, screen resolution, and browser version.

3. Cookies and Tracking Technologies

We use the following cookies and tracking technologies:

Essential cookies

  • Session cookies — required for authentication and maintaining your login state. These expire when your session ends or after a set period of inactivity.
  • CSRF tokens — required for form security. These are session-scoped.

Preference cookies

  • Theme preference — storing your dark/light mode preference (key: cq-theme). Stored in localStorage on your device, not transmitted to our servers.

Analytics and tracking cookies

  • Google Analytics — we use Google Analytics (Google Tag Manager with gtag.js, property ID G-3MP3MZJJ7P) to collect aggregate information about how visitors use the Service. Google Analytics uses cookies to track page views, session duration, traffic sources, and user interactions. This data helps us understand usage patterns and improve the Service. Google Analytics may collect your IP address, which Google processes in accordance with their privacy policy. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.
  • BetterStack (Sentry-compatible) — we use BetterStack for error tracking and performance monitoring. This collects error reports, stack traces, and browser context when errors occur in the application. This data is used solely for debugging and improving service reliability.

Cookies we do NOT use

  • We do not use advertising cookies or retargeting pixels.
  • We do not use social media tracking cookies.
  • We do not sell data collected through cookies to third parties.

4. How We Use Your Information

  • To provide and operate the Service — building resumes, analysing job postings, generating tailored documents, and powering AI features.
  • To process payments and manage subscriptions via Stripe.
  • To send transactional emails (account confirmation, password reset, billing receipts).
  • To send product updates and newsletters, if you have opted in. You may unsubscribe at any time.
  • To improve the Service through aggregate analytics and error monitoring.
  • To detect and prevent fraud, abuse, or security incidents.
  • To respond to support requests.
  • To comply with legal obligations.

5. AI and Your Data

Career Quiver uses third-party AI language models to power resume generation, job analysis, cover letter creation, interview practice, and profile import features. The AI providers we currently use include:

  • Google Gemini — used for resume generation, job posting analysis, cover letter generation, and profile import parsing.
  • Anthropic Claude — may be used for content generation and analysis features.
  • OpenAI GPT — may be used for content generation and analysis features.

When you use AI-powered features, relevant portions of your professional profile data and job posting content are transmitted to these third-party AI providers to generate outputs. We transmit only the data necessary to perform the requested operation.

We do not use your personal data to train AI models. Our AI providers are selected for their commitments to not use customer API data for model training by default. However, we encourage you to review the privacy policies of these providers for their current data handling practices.

We may change AI providers or add additional providers at any time. We will update this policy to reflect material changes in our AI provider relationships.

6. Data Sharing

We do not sell your data. We share data only with:

  • AI providers (Google, Anthropic, OpenAI) — profile data and job posting content necessary to generate AI outputs, as described in Section 5.
  • Payment processor (Stripe) — payment and billing information necessary to process transactions.
  • Hosting and infrastructure providers — data stored on our hosting infrastructure necessary to operate the Service.
  • Analytics providers (Google Analytics, BetterStack) — aggregate usage data and error reports as described in Section 3.
  • Email delivery provider — email addresses necessary to deliver transactional and marketing emails.
  • Legal requirements — if required by law, court order, or governmental authority.
  • Business transfers — if we merge with or are acquired by another company, your data may be transferred. We will notify you before your data becomes subject to a different privacy policy.

All service providers are contractually bound to process data only as directed and to maintain appropriate security measures.

7. Data Retention

We retain your account data for as long as your account is active. Generated documents (resumes, cover letters, analyses) are retained as part of your account data.

If you delete your account, we will delete your personal data within 30 days, except where retention is required by law or for legitimate business purposes (such as fraud prevention, financial records, or legal compliance). Aggregated, anonymised data that cannot identify you may be retained indefinitely.

8. Your Rights

Depending on your location, you may have rights including:

  • Access — request a copy of the personal data we hold about you.
  • Correction — request correction of inaccurate data.
  • Deletion — request deletion of your data (right to be forgotten).
  • Data portability — export your profile data in a structured format.
  • Objection — object to or restrict certain types of processing.
  • Withdraw consent — where processing is based on consent, withdraw it at any time.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

9. California Privacy Rights

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights regarding your personal information. You have the right to know what personal information we collect, request deletion, and opt out of any sale of personal information. We do not sell personal information. To exercise your rights, contact us at [email protected].

10. International Users

The Service is operated from the United States. If you access the Service from outside the United States, your data will be transferred to and processed in the United States. By using the Service, you consent to this transfer. We process data from EU/EEA users in compliance with applicable data protection regulations.

11. Security

We use industry-standard security measures including:

  • HTTPS encryption for all data in transit.
  • Encrypted storage for sensitive data at rest.
  • Secure authentication with hashed passwords.
  • Regular security monitoring and error tracking.

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. We encourage you to use a strong, unique password for your account.

12. Children

Career Quiver is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, contact us and we will delete it promptly.

13. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by email (if you have an account) or by posting a notice on the website at least 14 days before they take effect. Continued use of the Service after changes constitutes acceptance of the updated policy.

14. Contact

Questions about this policy? Contact us at:

Unmasked Logic, LLC
[email protected]