CareerHawkCareerHawk← Back to home

CareerHawk — Privacy Policy

Effective date: July 3, 2026 Controller: Bowery Road LLC (d/b/a CareerHawk), a New York limited liability company. Privacy contact: [email protected]

This Privacy Policy explains what we collect, how we use it, when we share it, how we protect it, and the rights you have. It applies to careerhawk.ai and any related feature (the "Service"). Capitalized terms not defined here have the meaning given in the Terms of Service.

1. Information we collect

Account data. Name, email address, and authentication identifiers, managed through our authentication provider, Clerk.

Profile and career data you provide. Resume/CV files (typically PDF), pasted profile or LinkedIn text, employment history, education, skills, certifications, work authorization, location preferences, salary expectations, target roles, dream companies, and any answers or notes you enter (including STAR stories and interview-prep responses).

Search and activity data. The searches you save, the postings we match to you, your worklist actions (saved, applied, screened, rejected), the fit scores and dossiers generated for you, the tailored resumes, cover letters, interview prep, negotiation notes, and follow-up drafts you generate, and the timestamps and status of each.

Billing data (paid plans). If you subscribe to Pro, our payment processor collects your payment method, billing address, and transaction history. We receive a token, the last four digits of your card, and transaction metadata — we do not see or store your full payment-card number.

Technical data. IP address, device and browser information, referring URL, pages visited, and diagnostic logs collected automatically for security, abuse prevention, and reliability.

Email engagement data. If you receive our transactional or digest emails, our email provider records deliveries, opens, and link clicks so we can operate the Service and, where you have opted in, our job-alert emails.

We do not knowingly collect Social Security numbers, government IDs, biometric data, precise geolocation, or special-category personal information. Please do not upload anything you would not want processed by our sub-processors listed below.

2. How we use your information

We use the information above to:

  • run the Service — including saved searches, daily market scans, fit scoring, dossiers, and drafting tailored resumes, cover letters, interview prep, STAR stories, negotiation notes, and follow-ups;
  • surface roles that fit your background and suggest lookalike companies;
  • send transactional emails (account, security, billing) and, where you have opted in, job-alert digests — you can opt out of digests at any time using the link in the email or in your account settings;
  • process payments and manage subscriptions;
  • secure the Service, prevent fraud and abuse, and enforce our Terms of Service;
  • diagnose problems, monitor performance, and improve the Service (using aggregated or de-identified data wherever practical);
  • comply with legal obligations, respond to lawful requests, and protect rights and safety.

We process your data to provide the Service you request, for our legitimate business interests in operating and securing it, to perform our contract with you, and where required, on the basis of your consent (which you can withdraw at any time).

3. AI processing

To score postings and draft materials, we send the minimum necessary content — for example, the relevant portions of your CV/profile and the job description — to our AI provider, Anthropic. Under the terms we have with Anthropic:

  • your inputs and outputs are not used to train Anthropic's models; and
  • inputs and outputs are subject to limited retention consistent with Anthropic's commercial-service data-handling terms.

AI output can be inaccurate or fabricated; you are responsible for reviewing anything generated before you rely on it or submit it to a third party.

4. Cookies and similar technologies

We use strictly necessary cookies (for authentication, security, and session integrity) and a small number of functional cookies to remember your preferences. We do not run cross-context behavioral advertising and do not sell personal information. If we ever add analytics beyond first-party diagnostic logs, we will update this policy and, where required, request your consent.

5. How we share information

We do not sell or "share" (as defined by CCPA/CPRA) your personal information for cross-context behavioral advertising. We disclose personal information only:

  • To service providers ("processors"), who process your data on our behalf under contract and only as needed to run the Service:
    • Clerk — authentication and account management;
    • Anthropic — AI processing (scoring, drafting materials);
    • Railway — application hosting and managed PostgreSQL database;
    • Resend — transactional and digest email delivery;
    • our payment processor (Stripe or successor) — subscription billing and fraud prevention;
    • our object-storage provider — resume and generated-PDF storage.
  • To comply with law or protect rights — for example, to respond to a valid subpoena, court order, or governmental request, or to protect the Service, our users, or third parties from fraud, abuse, or harm.
  • In a business transfer — as part of a merger, acquisition, financing, reorganization, or sale of all or substantially all of our assets, subject to this policy or a policy at least as protective.

Job postings displayed to you originate from third-party sources. Visiting an employer, an applicant-tracking system (e.g., Greenhouse, Ashby, Lever, Workday), or any external site is governed by that third party's own privacy practices — not this policy.

6. Data retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you delete your account, we delete your profile, career data, saved searches, matches, generated materials, and stored files within thirty (30) days, except for limited records we must retain to comply with law, resolve disputes, enforce our agreements, or address fraud and security. Backups may persist for a limited additional period before being overwritten in the ordinary course.

7. Security

We use industry-standard measures including TLS encryption in transit, encryption at rest for stored files, per-tenant data isolation, least-privilege access controls, managed secrets, and audit logging. No online service is perfectly secure, but protecting your career information is a core design priority. If we ever become aware of a security incident affecting your personal information, we will notify you as required by applicable law.

8. Your rights

Depending on where you live, you may have the right to:

  • know and access the personal information we hold about you;
  • receive a portable copy of it in a common, machine-readable format;
  • correct inaccurate information;
  • delete your personal information;
  • opt out of "sale" or "sharing" — we do neither;
  • limit the use of sensitive personal information — we do not use sensitive information for purposes that would trigger this right;
  • withdraw consent where processing is based on consent;
  • not be discriminated against for exercising these rights.

To exercise these rights, use the account tools inside the Service or email [email protected]. We will verify your identity (typically by confirming control of the email on the account) and respond within the time required by law. You may use an authorized agent where permitted; we will require reasonable proof of authorization. If we deny a request, you may appeal by replying to our response with "Appeal" in the subject line.

California residents (CCPA/CPRA). In the twelve (12) months before this policy's effective date, we collected the categories of personal information listed in Section 1 for the purposes described in Section 2 and disclosed them to the categories of recipients listed in Section 5. We do not sell or share your personal information as those terms are defined by California law. We retain each category of personal information for the period described in Section 6.

9. Children

The Service is not directed to children under 18, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, contact [email protected] and we will delete it.

10. International users

The Service is operated from the United States and is intended for users in the United States at launch. If you access the Service from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States, where privacy laws may differ from those in your country. Where we serve users in jurisdictions with additional requirements (for example, the EEA or UK), we will publish supplemental terms.

11. Third-party links

The Service links to third-party job platforms, employer sites, and applicant-tracking systems. We are not responsible for the content, practices, or privacy of those sites; their own policies govern your interactions with them.

12. Changes to this policy

We may update this policy from time to time. Material changes will be notified through the Service or by email, and the effective date above will be updated. Continued use of the Service after changes take effect constitutes acceptance.

13. Contact

Bowery Road LLC (d/b/a CareerHawk) Privacy questions and requests: [email protected]