Effective Date: February 2026

Last Updated: 9 June 2026

Careersy AI — Privacy Policy

1. Introduction & Scope

Careersy AI is operated by Goekhan Guenduez, trading as Careersy Coaching (ABN 55 143 766 707) ("Careersy," "we," "us," or "our"). Careersy AI is an AI-powered career mentoring platform for senior technology professionals in Australia and New Zealand (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service.

We are committed to handling your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). For users based in New Zealand, we also comply with the Privacy Act 2020 (NZ) and the New Zealand Information Privacy Principles where applicable.

By using the Service, you agree to the collection and use of your information as described in this Policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Information You Provide Directly

Account Information:

  • Email address
  • Name (optional)
  • Payment information (processed securely via our payment provider — we do not store credit card details)

Career and Professional Information:

  • Career history, experience, and goals you share in sessions
  • Resume and LinkedIn content you provide for review
  • Job search activity, target roles, and companies you discuss
  • Interview experiences and feedback you share
  • Any other professional information you choose to provide

Session Content:

  • The content of your conversations with the Careersy AI mentor
  • Documents or text you paste into the Service
  • Questions, responses, and notes generated during sessions

2.2 Information We Collect Automatically

Usage Information:

  • Session frequency and duration
  • Features used and interaction patterns
  • Error logs and performance data

In-Product Usage Events:

To understand how the product is used and improve it, we record lightweight first-party usage events when you interact with in-app features — for example, opening a help guide, using a suggested prompt, or celebrating a milestone. These events record an action type and a short feature label only — never the content of your messages, documents, or profile. They are visible only to our team, are never shared with third parties or used to train AI models, and are automatically deleted after 180 days (see section 7).

In-Product Surveys (Sunny Check-Ins):

From time to time, Sunny may ask you a few short questions inside the app to understand how Careersy is working for you. Answering is always optional, and you can dismiss the prompt at any time. When you respond, we collect your answers — your selections to the multiple-choice and rating questions, and any optional free-text comment you choose to add. We use this only to understand how the product is performing and to decide what to build and improve next. Your survey answers are visible only to our team; they are never provided to the AI assistant, never used to train AI models, and never shared with third parties. They are automatically deleted after 180 days (see section 7), and removed immediately if you delete your account.

CV Canvas Activity:

When you use CV Canvas — our interactive CV editor — to refine a line of your CV, we keep a short record of that interaction: the line you selected, the instruction you gave, the suggested rewrite, any job description you provided, and any feedback note you add. We use this to review quality, provide support, and improve the feature. It is visible only to our team, is never shared with third parties or used to train AI models, and the readable content is automatically deleted after 30 days (see section 7). After 30 days we keep only de-identified information about the interaction — such as a quality score, whether the suggestion was kept, and your thumbs-up or thumbs-down rating — with no link to the readable text. Everything is removed immediately if you delete your account.

Technical Information:

  • Device type, operating system, and browser
  • IP address (used for security and debugging purposes only)

Support Requests:

When you contact us through in-app feedback, we attach basic technical context to your message — the page you were on, your device and browser, and whether key setup steps are complete — to help us diagnose and resolve your request. This context records app state only, never the content of your messages, documents, or profile, and is visible only to our team.

2.3 Payment Information

Payment processing is handled by a third-party payment provider. We receive confirmation of payment status but do not store your full card details. Billing records are retained as required by Australian tax law.

2.4 Temporary Chats

Some conversations you may not want associated with your saved profile. When you start a Temporary Chat (the EyeOff icon in the sidebar), three things happen:

  • Careersy AI doesn't learn anything from the conversation. No facts get added to your profile.
  • The assistant doesn't see your existing saved facts during the chat. It starts fresh.
  • The conversation itself stays saved to your account so you can scroll back, and the full message contents are retained in our internal admin logs for quality review.

If you want a conversation that leaves no trace at all, contact us at support@careersy.ai and we will delete the relevant logs.

Temporary Chat status is set when the conversation is created and cannot be changed afterwards.

2.5 Sensitive Information

Your CV, profile, or messages may contain sensitive information as defined by the Privacy Act — for example, health information (such as a disability or a period of medical leave) or information about your background. We only collect this information when you choose to include it.

By uploading a CV or sharing such details, you consent to us collecting and using that sensitive information for the sole purpose of providing the Service — analysing your CV, coaching you, and matching you to opportunities. We do not use it for any other purpose, and you can choose not to share it.

3. How We Use Your Information

3.1 To Provide the Service

  • Delivering AI-powered career mentoring sessions
  • Maintaining context memory across sessions (where your plan includes this feature)
  • Processing payments and managing your subscription
  • Responding to support enquiries

3.2 To Improve the Service

  • Analysing usage patterns to improve the quality of responses
  • Identifying and fixing technical issues
  • Developing new features

3.3 To Communicate With You

  • Transactional emails — account confirmations, payment receipts, service notices
  • Product updates and new features (you can opt out at any time)
  • Market and career updates you subscribe to on our blog — we collect only your email address for this, and you can unsubscribe anytime with one click

3.4 For Security and Legal Compliance

  • Detecting and preventing fraud or misuse
  • Complying with applicable Australian and New Zealand law
  • Responding to lawful requests from government or regulatory bodies

4. AI Processing and Your Career Data

4.1 How Your Data is Used in AI Sessions

The nature of this Service means you will share personal and professional information — including career history, goals, vulnerabilities, and challenges — as part of receiving mentoring. This information is used solely to provide the Service to you.

We do not:

  • Sell your personal information to any third party
  • Use your conversation content to train AI models
  • Share your career information with employers, recruiters, or third parties
  • Use your data for advertising targeting

4.2 Third-Party Providers

The Service relies on trusted third-party providers, most of them based in the United States, to deliver its features. These include Anthropic (Claude) to generate AI responses; OpenAI to transcribe any audio or video you upload; Voyage AI to convert your text into search embeddings; Exa to run live web searches; Resend to deliver our emails; and Stripe to process payments. Your content is shared with each provider only to the extent needed to deliver the feature you are using.

Each provider processes your data under its own privacy terms and data processing agreement. Before your personal information is handled overseas, we take reasonable steps to ensure the provider handles it consistently with the Australian Privacy Principles, and we remain accountable under those Principles for how they handle it.

You can review Anthropic's privacy policy at anthropic.com/privacy.

4.3 Web Search (Growth Plan)

When web search is enabled, the Service sends search text to our search provider (Exa) to retrieve current ANZ market information relevant to your question. That search text is drawn from your message and profile, so it may include personal information, which Exa processes in the United States under the safeguards described in section 4.2.

4.4 Session Memory

Where your plan includes context memory across sessions, your conversation history is stored to provide continuity of mentoring. You may request deletion of your session history at any time by contacting support@careersy.ai.

4.5 Automated Analysis and Scoring

Careersy AI uses automated processing to analyse the information you provide — including your CV, career details, and messages — to generate scores, assessments, and recommendations (for example, ATS-compatibility scores, AI-discoverability assessments, interview feedback, and job suggestions).

These are decision-support tools designed to help you with your own career. They do not make legally or similarly significant decisions about you on their own — you decide how to use the output, and we do not provide any automated decision about you to a third party such as an employer. If you would like to understand how a particular feature reached its result, contact us at support@careersy.ai.

5. Sharing Your Information

We share your personal information only in the following circumstances:

Service Providers:

We work with trusted third-party providers to operate the Service, including cloud infrastructure, payment processing, and AI services. These providers are contractually required to protect your information and use it only for the purposes we specify.

Legal Requirements:

We may disclose your information where required by Australian or New Zealand law, a court order, or a lawful request from a regulatory or government authority.

Business Transfers:

If Careersy AI is acquired, merged, or substantially restructured, your information may be transferred to the acquiring entity. We will notify you before this occurs and provide you with the option to delete your account.

With Your Consent:

We will share your information with third parties only where you have given explicit consent.

We will never:

  • Sell your personal information
  • Share your career data with employers or recruiters
  • Use your information for third-party advertising

6. Data Storage and Security

6.1 Where Your Data is Stored

Your data is stored on servers located in Australia. Some processing happens overseas, primarily in the United States, through the third-party providers described in section 4.2 (for example, generating AI responses, running web search, or delivering our emails). Before personal information is handled overseas, we take reasonable steps to ensure the provider handles it consistently with the Australian Privacy Principles, and we remain accountable for that handling.

6.2 Security Measures

We implement reasonable technical and organisational security measures including:

  • Encryption in transit (TLS/SSL) for all data transfers
  • Encryption at rest for stored data
  • Access controls limiting who can access your data
  • Regular security reviews

No method of electronic storage is completely secure. While we take reasonable steps to protect your information, we cannot guarantee absolute security.

6.3 Your Responsibilities

You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately at support@careersy.ai if you suspect unauthorised access to your account.

7. Data Retention

Data TypeRetention PeriodNotes
Active account dataDuration of subscription + 30 daysRetained while account is active
Session conversation historyDuration of subscription + 30 daysDeletable on request at any time
Quality-review logs (message content, including Temporary Chats)Anonymised after 18 monthsKept for quality review and support while your account is active; automatically anonymised after 18 months — the message content and the link to you are permanently removed, and only de-identified usage statistics are retained to improve the Service. Logs still linked to you are deleted when you delete your account
In-product usage events180 daysBehavioural only — an action type and a feature label, never message, document, or profile content. Used to understand which features are used and improve the Service
In-product survey responses (Sunny check-ins)180 daysYour answers to optional in-app surveys, including any free-text comment. Visible only to our team; never provided to the AI assistant, used to train AI models, or shared with third parties. Deleted when you delete your account
CV Canvas activity (interactive CV editor)Readable content deleted after 30 daysThe line you selected, your instruction, the suggested rewrite, any job description, and any feedback note — kept so we can review quality and support you, then the readable content is automatically deleted after 30 days. De-identified information (a quality score, whether you kept the suggestion, and your rating) is retained with no link to the readable text. Visible only to our team; never used to train AI models or shared with third parties. Deleted when you delete your account
Deleted account dataDeleted immediately on requestPermanent. No recovery period once confirmed
Payment records7 yearsRequired under Australian tax law
Security and access logs90 daysFor security and incident response

After retention periods expire, your data is permanently deleted or irreversibly anonymised.

8. Your Privacy Rights

As an Australian resident, you have the following rights under the Privacy Act 1988 (Cth):

Right to Access:

You may request access to the personal information we hold about you. We will respond within 30 days. In most cases, access is free of charge.

Right to Correction:

If you believe personal information we hold about you is inaccurate, out of date, incomplete, or misleading, you may request that we correct it.

Right to Deletion:

You may request deletion of your account and associated personal information. Deleting your account through your account settings takes effect immediately and permanently. Emailed deletion requests are actioned promptly, and within 30 days at the latest, subject to any legal retention obligations (such as payment records, which we are required to keep).

Right to Complain:

If you believe we have mishandled your personal information, you have the right to make a complaint to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or by calling 1300 363 992.

New Zealand residents have equivalent rights under the Privacy Act 2020 (NZ) and may complain to the Office of the Privacy Commissioner at privacy.org.nz.

How to Exercise Your Rights

Contact us at support@careersy.ai. Please include your name, email address, and a description of your request. We may ask you to verify your identity before actioning the request.

9. Cookies and Tracking

Our web application uses minimal tracking technologies:

Essential functionality:

  • Session cookies required for login and account access
  • Local storage for application preferences

Analytics:

We use Google Analytics 4 (provided by Google LLC) on both our marketing website (careersy.ai) and our web application (app.careersy.ai) to understand, in aggregate, how people find, sign up for, and use the Service. Google Analytics sets a cookie and collects standard usage and device data, such as pages viewed, approximate location (derived from your IP address), browser, and device type.

To measure how visitors move from our website into the product, a pseudonymous analytics identifier first set on careersy.ai may be reused in the app, so a single journey can be understood end to end — for example, visiting the site, creating an account, first using the product, starting a subscription checkout, and completing a purchase. Some of these product events are sent to Google directly from our servers rather than from your browser. For this purpose, the information shared with Google is limited to a pseudonymous identifier, these activity events, and the amount of any purchase. We do not send Google your name, email address, or the content of your conversations, CV, or documents.

We have disabled Google's advertising and cross-site tracking features (Google Signals and ad personalisation), so this data is used for analytics only, never for advertising. Google processes this data in the United States; before your information is handled overseas we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles, and we remain accountable for that handling. Google retains this data subject to Google Analytics' data-retention controls, which we set to a limited period.

You can control this collection. Blocking or clearing analytics and third-party cookies in your browser, or installing Google's opt-out browser add-on at tools.google.com/dlpage/gaoptout, stops the browser-based analytics on our website and prevents your website visit from being linked to your in-app activity. Because some product events are sent from our servers and identified only by a pseudonymous identifier, those particular events are not affected by browser controls; they never include your name, email address, or the content described above. We do not currently offer a separate in-product analytics opt-out.

Email analytics:

Our emails include standard email-analytics technologies so we can understand engagement in aggregate and improve what we send. A small tracking pixel lets us see whether an email was opened, and in our marketing and product-update emails (the ones you subscribe to) we may also measure which links you click. We use this only in aggregate — for example, open and click rates — and it does not read the contents of your inbox or your replies. These analytics are handled by our email delivery provider (Resend), which processes them in the United States. You can opt out of marketing emails at any time using the one-click unsubscribe link included in every marketing email.

Embedded media (blog):

Some articles on our blog embed video players from YouTube or Vimeo. When you open a post that contains an embedded video, your browser loads the player directly from that provider, which receives your IP address and device information and may set its own cookies — this happens whether or not you press play. To reduce this, we embed YouTube in its privacy-enhanced "no-cookie" mode and signal "do not track" to Vimeo, but this does not remove the data sharing entirely. YouTube (Google) and Vimeo process this data in the United States under their own privacy policies. You can limit it by blocking third-party cookies in your browser, or by not opening posts that contain embedded video.

No advertising tracking:

We do not use advertising cookies, the Meta Pixel, or any tracking technology for advertising or ad targeting.

You can control cookies through your browser settings. Disabling essential cookies may affect your ability to use the Service.

10. Children's Privacy

The Service is intended for adults (18 years and over) in professional contexts. We do not knowingly collect personal information from anyone under the age of 18. If we become aware that we have collected personal information from a person under 18, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will notify you by email at least 14 days before the changes take effect. Minor changes will be posted with an updated "Last Updated" date.

Your continued use of the Service after changes take effect constitutes your acceptance of the updated Policy. If you do not agree to the changes, you may cancel your subscription before they take effect.

Previous versions of this Policy are available on request.

12. Contact

For privacy enquiries, access requests, correction requests, or complaints:

Privacy Officer

Goekhan Guenduez trading as Careersy Coaching (ABN 55 143 766 707)

Australia

Email: eli@careersy.ai

General support: eli@careersy.ai

Website: careersy.ai

We aim to respond to all privacy enquiries within 7 business days.

If you are not satisfied with our response to a complaint, you may escalate to:

  • Australia: Office of the Australian Information Commissioner — oaic.gov.au
  • New Zealand: Office of the Privacy Commissioner — privacy.org.nz

This Privacy Policy was last updated in June 2026.