Privacy Policy

Last updated: October 1, 2026

Carevo Inc. ("Carevo," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered career platform, including our website, web application, Chrome extension, and related services (collectively, the "Service").

1. Information We Collect

1.1 Account Information

When you create an account, we collect your name, email address, and authentication credentials. If you sign up using a third-party provider (Google or Apple), we receive the profile information you authorize those services to share.

1.2 Career DNA Profile

Our platform generates and maintains a Career DNA profile based on the information you provide and your interactions with the Service. This includes:

  • Skills, competencies, and expertise areas
  • Work style preferences and motivations
  • Compensation targets and expectations
  • Culture preferences and deal-breakers
  • Growth goals and career aspirations
  • Vector embeddings derived from your profile for matching purposes

Your Career DNA is continuously refined through your interactions with the Career Agent and your explicit edits. You maintain full control over your Career DNA and can view, modify, or delete it at any time.

1.3 Conversation Data

We store your conversations with the Career Agent, including messages, questions, and the context in which they occur (such as onboarding, general career guidance, or interview preparation). Conversation data is used to provide personalized assistance and improve the quality of AI-generated responses.

1.4 Application and Job Search Data

We collect information about your job search activity, including:

  • Applications submitted through the platform or Chrome extension
  • Jobs you view, save, or interact with
  • Match decisions (interested, pass, or ask agent)
  • Resume versions and cover letters generated or uploaded
  • Application status updates and outcomes

1.5 Override Events

When you interact with matches, edit your Career DNA, modify AI-generated content, or change filter preferences, we record these "override events" to learn and adapt to your evolving preferences. These events help the platform better understand your needs over time.

1.6 Usage and Device Data

We automatically collect certain technical information, including your IP address, browser type and version, device type, operating system, referring URLs, pages visited, and interaction timestamps. We use Vercel Web Analytics to count page views and measure site traffic; it sets no cookies and does not receive the query string of the pages you visit. We use PostHog for product analytics to understand how users interact with the Service.

1.7 Chrome Extension Data

If you install the Carevo Chrome extension, it may access job listing pages you visit to extract job details for scoring and matching purposes. The extension only activates on supported job board domains and sends job listing data to our servers for analysis. It does not monitor your general browsing activity.

2. How We Use Your Information

We use your information to:

  • Provide, maintain, and improve the Service, including AI-powered career guidance, job matching, and application tools.
  • Generate and refine your Career DNA profile to deliver personalized recommendations and match scores.
  • Process your subscription payments and manage your account.
  • Send transactional communications such as account confirmations, billing notices, and security alerts.
  • Send optional communications such as weekly career digests, match notifications, and product updates (you may opt out at any time).
  • Detect, prevent, and address fraud, abuse, and security issues.
  • Conduct analytics and research to improve our AI models, matching algorithms, and overall platform experience. When used for model improvement, data is aggregated and anonymized.

3. Data Sharing with Employers

We share your information with employers only with your explicit consent, and only in the following circumstances:

  • Mutual Reveal Stage. When both you and an employer express mutual interest through our three-stage matching protocol, limited profile information is shared with the employer. You will always be notified before any information is shared.
  • Application Submission. When you apply for a role through the platform, the application materials you choose to submit (resume, cover letter, and relevant profile information) are shared with the employer.
  • Anonymized Match Data. During early matching stages (Signal and Deep Fit), employers may see anonymized match scores and dimension breakdowns without any personally identifiable information.

You can withdraw consent for data sharing at any time by withdrawing from a match or adjusting your privacy settings.

4. Other Data Sharing

We may share your information with:

  • Service Providers. We use trusted third-party services to operate the platform, including Vercel (hosting and traffic analytics), Supabase (database and authentication), Stripe (payment processing), Anthropic (AI processing), Resend (email delivery), PostHog (analytics), and Sentry (error monitoring). These providers access your data only as necessary to perform their functions and are bound by contractual obligations to protect your information.
  • Legal Requirements. We may disclose your information if required by law, regulation, legal process, or governmental request.
  • Business Transfers. In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction. We will notify you of any such change.

We do not sell your personal information to third parties. We do not share your data with advertisers.

5. Data Retention

We retain your data according to the following schedule:

  • Active accounts. Your data is retained for as long as your account is active and you continue to use the Service.
  • After account deletion. When you delete your account, we retain your data for 30 days to allow for account recovery. After this period, your personal data is permanently deleted from our active systems.
  • Backup retention. Encrypted backups containing your data may persist for up to 90 days after deletion, after which they are purged.
  • Aggregated data. Anonymized, aggregated data that cannot be used to identify you may be retained indefinitely for analytics and platform improvement purposes.
  • Legal obligations. We may retain certain data longer if required by law, such as billing records for tax compliance.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access. Request a copy of the personal data we hold about you.
  • Correction. Request correction of inaccurate or incomplete data.
  • Deletion. Request deletion of your personal data, subject to legal retention requirements.
  • Portability. Request your data in a structured, commonly used, machine-readable format (JSON export).
  • Objection. Object to certain processing activities, such as AI-based profiling.
  • Restriction. Request that we limit how we process your data in certain circumstances.
  • Withdrawal of Consent. Withdraw consent for data processing where consent is the legal basis.

To exercise any of these rights, contact us at privacy@carevo.tech or use the data export and deletion tools available in your account settings. We will respond to your request within 30 days.

7. California Consumer Privacy Act (CCPA)

If you are a California resident, you have additional rights under the CCPA:

  • Right to Know. You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purpose for collecting the information, and the categories of third parties with whom we share it.
  • Right to Delete. You may request that we delete your personal information, subject to certain exceptions.
  • Right to Opt Out of Sale.We do not sell personal information. If this changes, we will provide a "Do Not Sell My Personal Information" link on our website.
  • Right to Non-Discrimination. We will not discriminate against you for exercising your CCPA rights.

To submit a CCPA request, email privacy@carevo.techwith the subject line "CCPA Request." We may verify your identity before processing your request.

8. Data Security

We implement industry-standard security measures to protect your data, including:

  • Encryption of data in transit (TLS 1.3) and at rest (AES-256).
  • Row-level security (RLS) policies in our database to ensure users can only access their own data.
  • Regular security audits and vulnerability assessments.
  • Access controls and authentication requirements for all internal systems.
  • Rate limiting and abuse detection to prevent unauthorized access.

While we take reasonable measures to protect your data, no system is completely secure. We cannot guarantee the absolute security of your information.

9. International Data Transfers

Your data may be processed and stored in the United States and other countries where our service providers operate. When we transfer data internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses where applicable.

10. Children's Privacy

The Service is not directed to individuals under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete that information promptly.

11. Cookies and Tracking

We use cookies and similar technologies as described in our Cookie Policy. You can manage your cookie preferences through the cookie banner on our website or through your browser settings.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Service, sending you an email, or providing a prominent notice. Your continued use of the Service after such changes constitutes your acceptance of the updated policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: