This policy describes how careerify.ai processes your personal data when you use the service. We are registered in Sweden and follow the GDPR (EU Regulation 2016/679).
Data controller
Adealsweden AB, org.nr 559443-5413 Eldarvägen 2, 611 72 Stigtomta, Sverige support@careerify.ai
careerify.ai is a service operated by Adealsweden AB.
What we collect
Anonymous ATS score (no account). When you drop a CV and paste a job ad to get an ATS score, the CV text is sent to our server. We keep the extracted CV text, the ad text, the filename, a hash of your IP address and a random id that recognises the browser for up to 30 days, and you can move the result into an account if you register right after the run, from the same browser. The IP hash is there to stop overuse of the free tools, and the random id, which lives in the careerify_anon cookie, is what makes the transfer possible. Neither one holds your name or your email address. The text is never used to train models. After 30 days it is deleted automatically by a daily clean-up job. If you want your anonymous run removed sooner, email support@careerify.ai and we will remove it.
With account. If you create an account via magic link or Google we store your email, uploaded CV files and your approved facts for as long as the account is active. You can delete the account at any time from the dashboard, everything is removed within 30 days. If you arrive via a partner or referral link we also store the click id or referral code on your account.
Optional email integration. If you connect Gmail or Microsoft 365 we store an encrypted OAuth refresh token so we can send follow-up emails from your own mailbox. We never read your inbox. You can disconnect the integration at any time.
Browser extension. When you click capture, careerify capture sends the advert's text, title, employer, location and URL, plus the site's hostname, to your account together with your extension token. The advert is saved as a draft among your jobs and is deleted with your account. The extension reads no other page, does not follow your browsing history and sends nothing until you click. Locally in the browser it stores only your extension token and the server address. careerify aktivitetsrapport fetches your own saved applications for the selected month from your account and fills in the form on arbetsformedlingen.se locally in your browser. Nothing from that page is sent to us, and the extension never saves or submits the report for you. careerify for LinkedIn runs only on your own LinkedIn profile, and only when LinkedIn itself shows the edit button that marks the page as yours. When you click send, the extension reads what is already rendered on that page, meaning your headline, your About text, your roles with dates and descriptions, your skills and your education, and sends it to your account together with your extension token. It opens no other page, never reads another member's profile and never calls LinkedIn's own servers. The snapshot is stored as one row on your account, replaced each time you send a new one, and deleted with the account. None of the extensions contains analytics or tracking.
Error reports. When something goes wrong while you use the service, on our server or in your browser, we save an error report so we can fix the problem right away. The report contains what kind of error it was, the page where it happened and the time, and if you are signed in, also your user id and which job it concerned. Email addresses, phone numbers and quoted text are removed from the error message before it is saved. Reports from the browser are counted per hash of the IP address to stop overuse, and that hash is deleted after seven days. New errors are emailed to us without your email address. Reports are deleted automatically after 30 days. The legal basis is our legitimate interest in keeping the service working.
Google API Services. Our use of data received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We request permission only to send email and to read your email address, never permission to read your inbox. We do not share this data onward and do not use it to train AI models.
Legal basis
For anonymous use: your consent and our legitimate interest in providing the service. For account use: contract (our terms) and legitimate interest. For email integration: your explicit consent via OAuth.
Sub-processors
We use the following processors: - PostHog (EU cloud) for product analytics and session recordings, meaning a replay of mouse movement, clicks and page changes during a visit. Anonymous visitors get no person profile. If you log in, the events are tied to your user id, your email address and your plan. The requests go straight to PostHog EU servers, so your IP address reaches them. If you have Do Not Track enabled in your browser, PostHog does not run at all. See the cookie page for the cookie and the details. - Anthropic (USA, EU DPA in place) for LLM calls. CV text and ad text are sent to Anthropic but not retained by them after the response. - Hostinger / Vercel (EU region) as hosting provider. - Mollie B.V., Keizersgracht 313, 1016 EE Amsterdam, Netherlands, for payment details. We never store card numbers ourselves. - Adtraction AB (Sweden), affiliate network. If you arrived via a partner link and later become a paying customer, we send Adtraction the partner's click id, an order reference (our own payment or subscription id) and the order value excluding VAT. We never send your name, your email address, a hash of the email address or any content from your CV. - Meta Platforms Ireland Limited (Ireland), ad platform. If you arrived here via an ad on Facebook or Instagram, we send from our own server the ad platform's own click id, the address of the page you are on, your browser's identification string and your IP address. The IP address is read from the request and never stored by us. This happens when you open a page, when you use one of the free tools, when you create an account and on payment. If you create an account we also send a hash of your email address and a hash of your user id, and for payments the order value. We never send your email address in the clear, your name or content from your CV. If you did not arrive via an ad from there, nothing is sent at all.
Your rights
You have the right to access, rectification and erasure of your personal data. You can object to processing or request data portability. Email support@careerify.ai and we will respond within 30 days.
If you are dissatisfied you can complain to the Swedish Authority for Privacy Protection (IMY), Box 8114, 104 20 Stockholm, Sweden. If you are based in another EU country you can also contact your national supervisory authority (for Germany: Berliner Beauftragte für Datenschutz und Informationsfreiheit).
Contact
careerify.ai support@careerify.ai