Privacy Policy

Last updated: August 19, 2026

Introduction

Career Rift ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and any of its related products and services (collectively, "Services"). Please read this policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access or use our Services. By accessing and using the Services, you acknowledge that you have read, understood, and agree to be bound by the terms of this Privacy Policy.

Information We Collect

Information You Provide

We collect information you provide directly to us when you create an account, use our Services, or communicate with us. This includes:

Account registration details such as your name, email address, and password.
Professional profile information including skills, work experience, education, certifications, projects, and volunteering history.
Job application data you enter into the tracker, including company names, role details, status, dates, and salary information.
Notes, comments, and other content you create within the platform.
Payment and billing information when subscribing to paid plans, processed securely through our third-party payment processor.
Communications you send to us, including support requests and feedback.
Job posting content captured through our browser extension from third-party job boards (such as LinkedIn and Indeed), including job titles, company names, descriptions, locations, and salary information displayed on those pages.
Email from a mailbox you choose to connect (Gmail, Outlook, or IMAP), limited to what is needed to recognize and file job-application mail. See the Google User Data section below for exactly what is read, stored, and deleted.
Calendar events from a calendar you choose to connect, and the interview events Career Rift creates on your behalf.

Information Collected Automatically

When you access or use our Services, we automatically collect certain information, including:

Device information such as your browser type, operating system, and device identifiers.
Usage data including pages visited, features used, actions taken, and time spent on the platform.
IP address and approximate geographic location derived from your IP address.
Cookies and similar tracking technologies as described in our Cookies section below.
Referral URLs and information about how you arrived at our Website.

How We Use Your Information

We use the information we collect for the following purposes:

To provide, operate, maintain, and improve our Services.
To power AI-driven features such as job fit analysis, interview preparation, company research, and personalized insights.
To recognize job-application email in a mailbox you connect, attach it to the right application, and suggest status updates.
To personalize your experience and deliver content and features relevant to your job search.
To process transactions, manage your account, and send you related information including purchase confirmations and invoices.
To send you technical notices, updates, security alerts, and support and administrative messages.
To respond to your comments, questions, and requests, and provide customer service.
To monitor and analyze trends, usage, and activities in connection with our Services to improve user experience.
To detect, investigate, and prevent fraudulent transactions, abuse, and other illegal activities, and protect the rights and property of Career Rift and others.

These purposes do not all apply to Google user data. Data obtained through a Google account — Gmail messages, calendar events, and your Google profile — is used only to provide and improve the user-facing features described in the Google User Data section below, and for security, fraud prevention, and compliance with applicable law. We do not use it to personalize unrelated content, to analyze usage trends, for advertising, or for any purpose that is not a feature you can see in the product.

How We Share Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

Service Providers: We share information with third-party service providers who perform services on our behalf, such as cloud hosting, AI processing, payment processing, analytics, error monitoring, and diagnostic tracing of AI requests (LangChain's LangSmith, which never receives mailbox content — see the Google User Data section). Our AI providers are named in the Google User Data section below. These providers are contractually obligated to use your information only as necessary to provide their services to us, and are not permitted to train AI or machine-learning models on it.
Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).
Protection of Rights: We may disclose your information where we believe it is necessary to investigate, prevent, or take action regarding potential violations of our policies, suspected fraud, situations involving potential threats to the safety of any person, or as evidence in litigation in which we are involved.
Business Transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company, with prior notice to you. Google user data is transferred in such an event only with your explicit prior consent.

Google user data is shared more narrowly than the above. We transfer it only as necessary to provide or improve the features described in the Google User Data section, to comply with applicable law, as part of a merger or acquisition with your explicit prior consent, or where necessary for security purposes such as investigating abuse. We never sell it, never use it for advertising, and never transfer it to a party that would train an AI or machine-learning model on it.

Google User Data and Limited Use

Career Rift connects to Google in three separate, independently optional places: signing in with Google, connecting a Gmail mailbox, and connecting a Google Calendar. Each has its own consent screen and requests only the scopes the corresponding feature needs. You can decline or revoke any one of them and continue using the rest of the product.

Scopes We Request and Why

openid, email, profile — used only when you choose "Sign in with Google", to identify your account and read your name, email address, and profile picture.
userinfo.email — used when connecting a mailbox or calendar, so we can show you which Google account is connected.
gmail.modify — used to read messages in the mailbox you connect, so Career Rift can recognize job-application email (acknowledgements, interview invitations, rejections) and attach it to the right application in your tracker. The same scope is used to move a message to Trash, and only when you explicitly turn on the optional cleanup setting that files acknowledgements or rejections away for you. Gmail offers no narrower scope that permits moving a message to Trash: gmail.readonly and gmail.metadata cannot, and no trash-only scope exists. We never send, draft, or permanently delete email, and mailboxes connected without the cleanup setting are only ever read.
calendar.events — used to create, update, and remove the interview and follow-up events that Career Rift manages on your behalf.
calendar.calendarlist — used to list your calendars so you can choose which one to sync, and to set the display colour of a calendar you have asked Career Rift to manage.

What We Do With Mailbox Content

For a connected mailbox we store the sender address and domain, the subject, the received date, the classification result, and the raw message source of the mail we process. Raw message source is deleted automatically twelve months after the message was received, unless the message is attached to one of your job applications, in which case it is kept as part of that application record for as long as the application exists. Disconnecting the mailbox deletes all of it immediately. You can also mute a sender so Career Rift stops processing its mail. Mailbox content is never used for advertising, never sold, and never shared with other users.

AI Processing of Google User Data

Recognizing job-application email uses an AI model, which means the content of a message from a connected mailbox is sent to our model provider for that single classification and is not retained by them afterwards. We use the following providers, on paid commercial plans whose terms prohibit the provider from training on data submitted through their API:

Mistral AI — the model that classifies email and powers our other AI features.

Mistral AI is the only provider that receives content from a connected mailbox. Our diagnostic tracing provider, LangChain (LangSmith), is excluded from email classification entirely, so no content from a connected mailbox is ever sent to it. This exclusion is enforced in our code.

Our web-search provider, Exa, is used only for company research and never receives Google user data. No Google user data is used to create, train, fine-tune, or improve any AI or machine-learning model, whether ours or a third party's.

Email from a connected Google account is never retained beyond what is described above. Career Rift offers organizations an optional setting, off by default, that retains non-Google email we processed but found nothing actionable in, so we can measure the accuracy of the instructions we give the model. Google user data is excluded from that setting entirely, regardless of whether the organization enabled it, and the exclusion is enforced in our code rather than left to a preference. We do not train or fine-tune any model on any of it.

Human Access to Google User Data

No one at Career Rift reads the mail or calendar events in a connected Google account. Employees access Google user data only where you have given explicit consent (for example, when you ask us to investigate a specific message in a support request), where it is necessary for security purposes, where we are required to by law, or where the data has been aggregated and anonymized for internal operations. Access is restricted to the staff who need it and is logged.

Limited Use Statement

Career Rift's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we do not use, transfer, or sell raw, aggregated, anonymized, or derived Google user data to develop, improve, or train generalized or foundational artificial intelligence or machine-learning models, and we do not transfer such data to any third party that would do so.

Revoking Google Access

You can disconnect a Google mailbox or calendar at any time from your Career Rift settings, which revokes our tokens and deletes the data derived from that connection. You can also revoke access directly from your Google Account at myaccount.google.com/permissions.

Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

Access: You can request a copy of the personal data we hold about you.
Correction: You can update or correct your personal information directly through your account settings, or by contacting us.
Deletion: You can request deletion of your personal data. We will delete your data within 30 days, except where retention is required by law.
Data Portability: You can request a copy of your data in a structured, commonly used, machine-readable format.
Opt-out: You can opt out of marketing communications at any time by clicking the unsubscribe link in our emails or contacting us.
Restrict Processing: You can request that we restrict the processing of your personal data under certain circumstances.

To exercise any of these rights, please contact us at hello@careerrift.com. We will respond to your request within 30 days.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our Services. If you close your account, we will delete or anonymize your personal data within 30 days, except where we are legally required or permitted to retain certain information (e.g., for tax, legal reporting, or audit purposes). Usage data and anonymized analytics may be retained for longer periods to help us improve our Services. This longer retention never includes Google user data or anything derived from it, whether raw, aggregated, anonymized, or derived — that data follows the retention and deletion rules in the Google User Data section only.

Data Storage and Security

We implement industry-standard security measures to protect your personal information, including encryption of data in transit (TLS/SSL) and at rest, regular security assessments and audits, access controls and authentication mechanisms, and secure data backup procedures. However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. You are responsible for maintaining the confidentiality of your account credentials.

Transfer of Information

Your information may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction. If you are located outside of our primary operating region and choose to provide information to us, please note that we transfer the data to our servers and process it there. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

Payment Processing

We use third-party payment processors to handle payment transactions. Your payment information is transmitted directly to our payment processor using industry-standard encryption and is not stored on our servers. Our payment processor is PCI-DSS compliant, which ensures the secure handling of payment information.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and track information about your use of our Services. Cookies are small data files stored on your device. We use the following types of cookies:

Essential Cookies: Required for the operation of our Website, such as session management and authentication.
Preference Cookies: Used to remember your settings and preferences, such as theme selection.
Analytics Cookies: Used to understand how visitors interact with our Website, helping us improve our Services.

You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our Services.

Browser Extension

Career Rift offers an optional browser extension that helps you capture job postings from supported job boards (such as LinkedIn and Indeed) directly into your Career Rift account. The extension collects the following data from job posting pages you visit:

Job posting content visible on the page, including title, company name, description, location, job type, and salary information.
The URL of the job posting for duplicate detection and linking back to the original listing.
Authentication cookies to sync your login session with the Career Rift web app, so you do not need to sign in separately.

The extension does not collect browsing history, track your activity across websites, or access any data outside of supported job board pages. All captured data is sent directly to the Career Rift backend and stored in your account. The extension only activates on supported job board domains and does not run on other websites.

Data Analytics

We may use third-party analytics services to help us understand how our Services are used. These services may collect information sent by your browser or device, including the pages you visit, your use of features, and other information that assists us in improving our Services. Analytics data is collected in aggregate form and does not personally identify individual users. Our analytics providers never receive Google user data, and no data obtained from a Google account is used for analytics of any kind.

Children's Privacy

Our Services are not intended for use by children under the age of 16. We do not knowingly collect personally identifiable information from children under 16. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us. If we become aware that we have collected personal information from a child under 16 without verification of parental consent, we will take steps to remove that information from our servers promptly.

Email Communications

We may send you emails related to your account, transactions, and important Service updates (transactional emails). We may also send you marketing emails about new features, promotions, or other news about Career Rift. You can opt out of marketing emails at any time by clicking the unsubscribe link in the email or contacting us. Please note that even if you opt out of marketing emails, we may still send you transactional emails related to your account and use of our Services.

Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want to have your online activity tracked. We currently do not respond to DNT signals. However, you can control tracking through your cookie preferences as described above.

Data Breach

In the event of a data breach that compromises your personal information, we will notify affected users within 72 hours of becoming aware of the breach, as required by applicable law. We will provide information about what data was affected, what steps we are taking in response, and what actions you can take to protect yourself.

Links to Other Resources

Our Services may contain links to third-party websites, services, or resources that are not operated by us. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party websites or services. We strongly advise you to review the privacy policy of every site you visit. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.

Changes and Amendments

We reserve the right to modify this Privacy Policy at any time. When we do, we will revise the "Last updated" date at the top of this page. We may also provide notice to you in other ways at our discretion, such as through the contact information you have provided. An updated version of this Privacy Policy will be effective immediately upon posting unless otherwise specified. Your continued use of our Services after any changes to this Privacy Policy constitutes your acceptance of those changes. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

Acceptance of This Policy

You acknowledge that you have read this Privacy Policy and agree to all its terms and conditions. By accessing and using our Services, you consent to the collection and use of your information as described in this Privacy Policy. If you do not agree with the terms of this Privacy Policy, you are not authorized to access or use our Services.

Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or our data practices, we encourage you to contact us using the details below:

hello@careerrift.com