100 applications, no interviews?Score CV free

Effective Date: February 2026

Last Updated: 2 September 2026

Careersy AI — Privacy Policy

1. Introduction & Scope

Careersy AI is operated by Careersy Pty Ltd (ACN 701 729 295), trading as Careersy Coaching (ABN 36 701 729 295) ("Careersy," "we," "us," or "our"). Careersy AI is an AI-powered career mentoring platform for senior technology professionals in Australia and New Zealand (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service.

We are committed to handling your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). For users based in New Zealand, we also comply with the Privacy Act 2020 (NZ) and the New Zealand Information Privacy Principles where applicable.

By using the Service, you agree to the collection and use of your information as described in this Policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Information You Provide Directly

Account Information:

  • Email address
  • Name (optional)
  • Payment information (processed securely via our payment provider — we do not store credit card details)

Career and Professional Information:

  • Career history, experience, and goals you share in sessions
  • Resume and LinkedIn content you provide for review
  • Job search activity, target roles, and companies you discuss
  • Interview experiences and feedback you share
  • Any other professional information you choose to provide

Session Content:

  • The content of your conversations with the Careersy AI mentor
  • Documents or text you paste into the Service
  • Questions, responses, and notes generated during sessions

2.2 Information We Collect Automatically

Usage Information:

  • Session frequency and duration
  • Features used and interaction patterns
  • Error logs and performance data

In-Product Usage Events:

To understand how the product is used and improve it, we record lightweight first-party usage events when you interact with in-app features — for example, opening a help guide, using a suggested prompt, or celebrating a milestone. These events record an action type and a short feature label only — never the content of your messages, documents, or profile. They are visible only to our team, are never shared with third parties or used to train AI models, and are automatically deleted after 180 days (see section 7).

In-Product Surveys (Sunny Check-Ins):

From time to time, Sunny may ask you a few short questions inside the app to understand how Careersy is working for you. Answering is always optional, and you can dismiss the prompt at any time. When you respond, we collect your answers — your selections to the multiple-choice and rating questions, and any optional free-text comment you choose to add. We use this only to understand how the product is performing and to decide what to build and improve next. Your survey answers are visible only to our team; they are never provided to the AI assistant, never used to train AI models, and never shared with third parties. They are automatically deleted after 180 days (see section 7), and removed immediately if you delete your account.

CV Canvas Activity:

When you use CV Canvas — our interactive CV editor — to refine a line of your CV, we keep a short record of that interaction: the line you selected, the instruction you gave, the suggested rewrite, any job description you provided, and any feedback note you add. We use this to review quality, provide support, and improve the feature. It is visible only to our team, is never shared with third parties or used to train AI models, and the readable content is automatically deleted after 30 days (see section 7). After 30 days we keep only de-identified information about the interaction — such as a quality score, whether the suggestion was kept, and your thumbs-up or thumbs-down rating — with no link to the readable text. Everything is removed immediately if you delete your account.

Technical Information:

  • Device type, operating system, and browser
  • IP address (used for security and debugging purposes only)

To protect the free allowance from abuse we also keep a one-way hashed version of your network address for 60 days. It cannot be turned back into your address.

Support Requests:

When you contact us through in-app feedback, we attach basic technical context to your message — the page you were on, your device and browser, and whether key setup steps are complete — to help us diagnose and resolve your request. This context records app state only, never the content of your messages, documents, or profile, and is visible only to our team.

2.3 Payment Information

Payment processing is handled by a third-party payment provider. We receive confirmation of payment status but do not store your full card details. Billing records are retained as required by Australian tax law.

2.4 Temporary Chats

Some conversations you may not want associated with your saved profile. When you start a Temporary Chat (the "Temporary chat" option in your workspace menu), three things happen:

  • Careersy AI doesn't learn anything from the conversation. No facts get added to your memory or profile, and the assistant is not shown your saved CV.
  • The assistant doesn't see your existing saved facts during the chat. It starts fresh.
  • The conversation itself stays in your account so you can scroll back, and the full message contents are kept in our internal quality-review logs on the same terms as any other conversation (section 7).

Web search, whether you switch it on or a mode runs it for you (section 4.3), and other features you use inside a Temporary Chat still send that message to the providers in section 4.2.

If you want a conversation that leaves no trace at all, contact us at support@careersy.ai and we will delete the relevant logs.

Temporary Chat status is set when the conversation is created and cannot be changed afterwards.

2.5 Sensitive Information

Your CV, profile, or messages may contain sensitive information as defined by the Privacy Act — for example, health information (such as a disability or a period of medical leave) or information about your background. We only collect this information when you choose to include it.

By uploading a CV or sharing such details, you consent to us collecting and using that sensitive information for the sole purpose of providing the Service — analysing your CV, coaching you, and matching you to opportunities. We do not use it for any other purpose, and you can choose not to share it.

2.6 Free CV Score

You can score a CV on our website without an account. The scan is anonymous — no name or email is attached — and is deleted within 24 hours unless you claim it. Claiming your score asks for your first name and email address, and the report (including the CV text) is then kept until you delete it or your account. The CV is read by our AI provider (section 4.2) and is never used to train its models.

3. How We Use Your Information

3.1 To Provide the Service

  • Delivering AI-powered career mentoring sessions
  • Remembering facts you share so later conversations have context — on by default, and yours to switch off (section 4.4)
  • Processing payments and managing your subscription
  • Responding to support enquiries

3.2 To Improve the Service

  • Analysing usage patterns to improve the quality of responses
  • Identifying and fixing technical issues
  • Developing new features

3.3 To Communicate With You

  • Transactional emails — account confirmations, payment receipts, service notices
  • Product updates — what we have shipped and changed in Careersy AI
  • Career and market updates — our newsletter on how hiring works, where the job market is moving, and how to stay visible in it. We send this both to people who subscribe on our website or blog and to people who hold a Careersy AI account. If you subscribe without holding an account, your email address is the only personal information we collect for it.

Product updates and career and market updates are separate subscriptions, and you can opt out of either one independently at any time using the one-click unsubscribe link in any of those emails. Opting out of one does not opt you out of the other, and neither affects the transactional emails above, which we need to send in order to operate your account.

3.4 For Security and Legal Compliance

  • Detecting and preventing fraud or misuse
  • Complying with applicable Australian and New Zealand law
  • Responding to lawful requests from government or regulatory bodies

4. AI Processing and Your Career Data

4.1 How Your Data is Used in AI Sessions

The nature of this Service means you will share personal and professional information — including career history, goals, vulnerabilities, and challenges — as part of receiving mentoring. This information is used solely to provide the Service to you.

We do not:

  • Sell your personal information to any third party
  • Use your conversation content to train AI models
  • Share your career information with employers, recruiters, or third parties
  • Use your data for advertising targeting

4.2 Third-Party Providers

The Service relies on third-party providers to deliver its features: Supabase, which hosts our database and sign-in in Australia (Sydney); Render, which runs the application in Singapore and serves our marketing website from its global content network; Anthropic (Claude), which generates AI responses and scores CVs, including in the free CV score — some features also use Anthropic's built-in web search and page-fetch tools, so a search or a link you paste may go to Anthropic; OpenAI, which transcribes your voice input (when you dictate, audio streams from your browser directly to OpenAI); Voyage AI, which converts text into search embeddings, including your CV, your saved facts, and job listings; Exa, which runs live web searches; RapidAPI (Fantastic.jobs), which supplies job listings — we send it search terms drawn from your target roles and preferences, never your name, email, or account details; Google, for Google sign-in if you choose it and for analytics (section 9); Resend, which delivers our emails; Sentry, which reports technical errors after personal details are scrubbed; Stripe, which processes payments; and Telegram, which delivers operational alerts to our team — those carry your first name, the text of any feedback you send us in the app, and, for newsletter and guide sign-ups, your email address, but never your conversations or CV. Most of these providers operate in the United States; Telegram is based in the United Arab Emirates. The current list, what each receives, and where it operates is kept at careersy.ai/legal/sub-processors. Your content is shared with each provider only to the extent needed to deliver the feature you are using.

Each provider processes your data under its own privacy terms and data processing agreement. Before your personal information is handled overseas, we take reasonable steps to ensure the provider handles it consistently with the Australian Privacy Principles, and we remain accountable under those Principles for how they handle it.

Some features retrieve publicly available professional information about other people — for example, public profiles used as benchmarks in AI Discoverability. We use it only to produce your report and do not build profiles of those people.

We use Attio (Attio Ltd, hosted in the United States) as our customer relationship system. It holds your email address, plan, credits used, last active date and signup date. It never receives your CV, your conversations or anything the assistant remembers about you.

You can review Anthropic's privacy policy at anthropic.com/privacy.

4.3 Web Search

Web search is a per-message option, not a plan feature; some features (Deep Research, AI Discoverability) use it whenever you run them, and in Interview Preparation and Compensation Negotiation the Service runs it for you when a question needs current facts, such as a company's interview process or today's pay ranges. When a search runs, the Service sends search text to Exa — or, for some features, to Anthropic's built-in search — to retrieve current ANZ market information relevant to your question. That search text is drawn from your message and profile, so it may include personal information, which those providers process in the United States under the safeguards in section 4.2.

4.4 Memory

The Service remembers facts you share so later conversations have context. Memory is on by default for every account. From Privacy & memory in your profile you can switch it off (existing facts are kept but not used, and nothing new is learned), see and delete individual facts, tell Careersy what to remember or forget, and download a copy of your data. A fact or conversation you delete is hidden immediately and permanently erased within 90 days. For a conversation that should not touch your memory at all, use a Temporary Chat (section 2.4).

4.5 Automated Analysis and Scoring

Careersy AI uses automated processing, including AI models, to analyse the information you provide — your CV, LinkedIn content, career details, job descriptions you share, and your messages — and to produce scores, assessments, and recommendations for you: for example ATS-compatibility scores, AI-discoverability assessments, interview feedback, CV rewrites, and job suggestions.

These outputs are for your own use. We do not use them to make decisions about you, and we do not provide them, or any automated decision about you, to employers, recruiters, or anyone else. The only automated actions the Service takes about your account are operational: applying your plan's credit allowance and rate limits, limiting the free allowance per device or network to prevent abuse, checking whether a referral reward is payable, and stopping email to an address that has unsubscribed or bounced. None of these decides anything about your career, and you can ask us to review any of them.

If you would like to understand how a feature reached its result, contact us at support@careersy.ai. From 10 December 2026, Australian privacy law will require privacy policies to describe automated decisions that could significantly affect a person's rights or interests; this section is written to that standard.

5. Sharing Your Information

We share your personal information only in the following circumstances:

Service Providers:

We work with trusted third-party providers to operate the Service, including cloud infrastructure, payment processing, and AI services. These providers are contractually required to protect your information and use it only for the purposes we specify.

Legal Requirements:

We may disclose your information where required by Australian or New Zealand law, a court order, or a lawful request from a regulatory or government authority.

Business Transfers:

If Careersy AI is acquired, merged, or substantially restructured, your information may be transferred to the acquiring entity. We will notify you before this occurs and provide you with the option to delete your account.

With Your Consent:

We will share your information with third parties only where you have given explicit consent.

We will never:

  • Sell your personal information
  • Share your career data with employers or recruiters
  • Use your information for third-party advertising

6. Data Storage and Security

6.1 Where Your Data is Stored

Your data is stored on servers located in Australia. Some processing happens overseas, primarily in the United States, through the third-party providers described in section 4.2 (for example, generating AI responses, running web search, or delivering our emails). Before personal information is handled overseas, we take reasonable steps to ensure the provider handles it consistently with the Australian Privacy Principles, and we remain accountable for that handling.

6.2 Security Measures

We implement reasonable technical and organisational security measures including:

  • Encryption in transit (TLS/SSL) for all data transfers
  • Encryption at rest for stored data
  • Access controls limiting who can access your data
  • Regular security reviews

No method of electronic storage is completely secure. While we take reasonable steps to protect your information, we cannot guarantee absolute security.

6.3 Your Responsibilities

You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately at support@careersy.ai if you suspect unauthorised access to your account.

7. Data Retention

Data TypeRetention PeriodNotes
Account dataWhile your account existsWe may close accounts inactive for a long period on 30 days' notice
Conversation historyWhile your account existsYou can delete any conversation; it is hidden immediately and permanently erased within 90 days
Saved facts (memory)Until you delete themDeleted facts are hidden immediately and permanently erased within 90 days
Free CV scoreAnonymous scan: 24 hours if unclaimed. Claimed report: until you delete itSee section 2.6
Free-allowance abuse check60 daysA one-way hashed network address, never the address itself
Quality-review logs (message content, including Temporary Chats)Anonymised after 18 monthsKept for quality review and support while your account is active; automatically anonymised after 18 months — the message content and the link to you are permanently removed, and only de-identified usage statistics are retained to improve the Service. Logs still linked to you are deleted when you delete your account
In-product usage events180 daysBehavioural only — an action type and a feature label, never message, document, or profile content. Used to understand which features are used and improve the Service
In-product survey responses (Sunny check-ins)180 daysYour answers to optional in-app surveys, including any free-text comment. Visible only to our team; never provided to the AI assistant, used to train AI models, or shared with third parties. Deleted when you delete your account
CV Canvas activity (interactive CV editor)Readable content deleted after 30 daysThe line you selected, your instruction, the suggested rewrite, any job description, and any feedback note — kept so we can review quality and support you, then the readable content is automatically deleted after 30 days. De-identified information (a quality score, whether you kept the suggestion, and your rating) is retained with no link to the readable text. Visible only to our team; never used to train AI models or shared with third parties. Deleted when you delete your account
Deleted account dataDeleted immediately on requestPermanent, no recovery. We keep only payment records (below) and the record that stops us emailing you if you unsubscribed
Payment records7 yearsRequired under Australian tax law

After retention periods expire, your data is permanently deleted or irreversibly anonymised.

8. Your Privacy Rights

We hold ourselves to the Australian Privacy Principles for everyone who uses the Service, and the Privacy Act 2020 (NZ) applies to how we handle New Zealand users' information. You can:

Right to Access:

Request access to the personal information we hold about you. We respond within 30 days, and access is usually free. You can also download a copy of your data at any time from Privacy & memory in your profile.

Right to Correction:

If you believe personal information we hold about you is inaccurate, out of date, incomplete, or misleading, you may request that we correct it.

Right to Deletion:

You may request deletion of your account and associated personal information. Deleting your account through your account settings takes effect immediately and permanently. Emailed deletion requests are actioned promptly, and within 30 days at the latest, subject to any legal retention obligations (such as payment records, which we are required to keep).

Right to Complain:

If you think we have mishandled your personal information, email support@careersy.ai with "Privacy complaint" in the subject line and tell us what happened. We will acknowledge your complaint within 5 business days, look into it, and give you a written response within 30 days. If you are not satisfied, you can raise it with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or by calling 1300 363 992.

New Zealand residents have equivalent rights under the Privacy Act 2020 (NZ) and may complain to the Office of the Privacy Commissioner at privacy.org.nz.

How to Exercise Your Rights

Contact us at support@careersy.ai. Please include your name, email address, and a description of your request. We may ask you to verify your identity before actioning the request.

9. Cookies and Tracking

Our web application uses minimal tracking technologies:

Essential functionality:

  • Sign-in tokens and application preferences kept in your browser's local storage

Analytics:

We use Google Analytics 4 (provided by Google LLC) on both our marketing website (careersy.ai) and our web application (app.careersy.ai) to understand, in aggregate, how people find, sign up for, and use the Service. Google Analytics sets a cookie and collects standard usage and device data, such as pages viewed, approximate location (derived from your IP address), browser, and device type.

To measure how visitors move from our website into the product, a pseudonymous analytics identifier first set on careersy.ai may be reused in the app, so a single journey can be understood end to end — for example, visiting the site, creating an account, first using the product, starting a subscription checkout, and completing a purchase. Some of these product events may also be sent to Google directly from our servers rather than from your browser. For this purpose, the information shared with Google is limited to a pseudonymous identifier, these activity events, and the amount of any purchase. We do not send Google your name, email address, or the content of your conversations, CV, or documents.

We have disabled Google's advertising and cross-site tracking features (Google Signals and ad personalisation), so this data is used for analytics only, never for advertising. Google processes this data in the United States; before your information is handled overseas we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles, and we remain accountable for that handling. Google retains this data subject to Google Analytics' data-retention controls, which we set to a limited period.

You can control this collection. Blocking or clearing analytics and third-party cookies in your browser, or installing Google's opt-out browser add-on at tools.google.com/dlpage/gaoptout, stops the browser-based analytics on our website and prevents your website visit from being linked to your in-app activity. Where product events are sent from our servers, they are identified only by a pseudonymous identifier and are not affected by browser controls; they never include your name, email address, or the content described above. We do not currently offer a separate in-product analytics opt-out.

Email analytics:

Our emails include standard email-analytics technologies so we can understand engagement in aggregate and improve what we send. A small tracking pixel lets us see whether an email was opened, and in our product updates and our career and market updates we may also measure which links you click. We use this only in aggregate — for example, open and click rates — and it does not read the contents of your inbox or your replies. These analytics are handled by our email delivery provider (Resend), which processes them in the United States. You can opt out of either of those email types at any time using the one-click unsubscribe link included in every one of them, as described in section 3.3.

Embedded media (blog):

Some articles on our blog embed video players from YouTube or Vimeo. When you open a post that contains an embedded video, your browser loads the player directly from that provider, which receives your IP address and device information and may set its own cookies — this happens whether or not you press play. To reduce this, we embed YouTube in its privacy-enhanced "no-cookie" mode and signal "do not track" to Vimeo, but this does not remove the data sharing entirely. YouTube (Google) and Vimeo process this data in the United States under their own privacy policies. You can limit it by blocking third-party cookies in your browser, or by not opening posts that contain embedded video.

Our marketing website also loads fonts from Google Fonts, which receives your IP address.

No advertising tracking:

We do not use advertising cookies, the Meta Pixel, or any tracking technology for advertising or ad targeting.

You can control cookies through your browser settings. Disabling essential cookies may affect your ability to use the Service.

10. Children's Privacy

The Service is intended for adults (18 years and over) in professional contexts. We do not knowingly collect personal information from anyone under the age of 18. If we become aware that we have collected personal information from a person under 18, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will notify you by email at least 14 days before the changes take effect. Minor changes will be posted with an updated "Last Updated" date.

Your continued use of the Service after changes take effect constitutes your acceptance of the updated Policy. If you do not agree to the changes, you may cancel your subscription before they take effect.

Previous versions of this Policy are available on request.

12. Contact

For privacy enquiries, access requests, correction requests, or complaints:

Privacy Officer

Gökhan (Eli) Gündüz, Director

Careersy Pty Ltd (ACN 701 729 295) trading as Careersy Coaching (ABN 36 701 729 295)

Australia

Email: eli@careersy.ai

General support: eli@careersy.ai

Website: careersy.ai

We aim to respond to all privacy enquiries within 7 business days.

If you are not satisfied with our response to a complaint, you may escalate to:

  • Australia: Office of the Australian Information Commissioner — oaic.gov.au
  • New Zealand: Office of the Privacy Commissioner — privacy.org.nz

This Privacy Policy was last updated on 2 September 2026.