Privacy Policy

1. Categories of Information We Collect

To provide resume optimization and career collateral services, we collect the following categories of information:

• Account Registration and Authentication Information: Name, email address, and authentication credentials managed securely via our third-party identity provider.
• Professional and Employment-Related Information: Resumes, cover letters, career histories, target job descriptions, and core competencies uploaded directly by you to your user workspace.
• Usage Data and Technical Telemetry: Anonymized interaction events, system latency metrics, diagnostic data, and execution logs necessary to maintain system stability, security, and performance.

2. Artificial Intelligence and Machine Learning Policies

We enforce strict data isolation protocols regarding public and proprietary machine learning models:

• Strict Non-Training Mandate: We explicitly guarantee that your personal data, resumes, corporate summaries, and generated job application collateral will never be used by us, or by our infrastructure subprocessors, to train, fine-tune, retrain, or optimize public or proprietary large language models (LLMs).
• Inference Processing: We utilize secure, enterprise-grade API endpoints to process machine learning requests. We configure these endpoints to strictly exclude data from model training or improvement cycles. Data transmitted for inference is processed only as necessary to fulfill your specific request and is not retained for any secondary model development purposes.

3. Data Security and Encryption Standards

We implement administrative, technical, and physical safeguards designed to protect your personal information from unauthorized access, disclosure, or alteration:

• At-Rest Encryption: All user-provided professional text blocks, employment profiles, and documents are encrypted at the application layer at the field level using Advanced Encryption Standard AES-256-GCM algorithms before being written to physical storage layers.
• In-Transit Encryption: All data transmitted across the Platform architecture is enforced over secure, encrypted Transport Layer Security (TLS 1.3) protocol layers.
• Credential Isolation: System cryptographic keys, operational processing parameters, and service credentials are kept strictly isolated within hardware-secured cloud credential vaults.

4. Third-Party Service Providers and Subprocessors

We share personal information with trusted third-party service providers and infrastructure subprocessors solely to execute core platform operations. These partners are contractually bound by strict Data Processing Addendums (DPAs) and confidentiality constraints:

• Identity and Authentication Providers: For user provisioning, login validation, and platform access control.
• Payment Processors: We utilize Stripe for PCI-compliant subscription billing and transaction processing. Your raw credit card and financial credentials never touch or reside on our servers.
• Communications and Transactional Routing: For transmitting transactional emails, account notifications, quota alerts, and verification receipts.
• Inference API Providers: For passing text payloads to isolated, enterprise LLM node processing networks under explicit non-training mandates.

5. Data Retention and Account Deletion

We adhere to data minimization principles and retain your personal information only as long as necessary to fulfill your requested services or comply with statutory requirements.

• Permanent Erasure: When you initiate an account deletion within the user console, the system executes an automated, asynchronous purge that permanently, irreversibly deletes all your data across our production databases, user tables, metadata records, field-level encrypted entries, and storage object blobs.
• Statutory Exceptions: Residual operational data and transaction history required for legitimate business purposes—such as legal compliance, financial auditing, and billing verification (e.g., Stripe payment receipts)—are retained in accordance with statutory timelines but remain entirely decoupled from your professional resume files.

6. Regional Privacy Rights (CCPA / CPRA / GDPR)

We extend comprehensive data privacy protections to our users globally. Depending on your jurisdiction, you may exercise the following rights regarding your personal information:

• The Right to Know and Access: The right to request a clean, portable export of the personal and professional data points currently compiled within your account workspace.
• The Right to Correction: The right to modify, update, or rectify inaccuracies within your compiled account data.
• The Right to Deletion (Erasure): The right to request that we permanently wipe your entire operational data footprint at any time.
• The Right to Non-Discrimination: We do not deny services, alter API priority latency, or adjust pricing tiers based on the exercise of your statutory privacy rights.

To exercise any of these rights, you may use the self-service settings within your dashboard console or contact us directly at the administration email listed below.

7. Essential Security Cookies

We use a single, strictly necessary cookie (calibry_ai_authorized) with a maximum lifespan of 30 days. This cookie is used exclusively to verify authorization for access to our private platform environments and prevent unauthorized system scraping. It contains no personally identifiable data and is not used for tracking, marketing, or analytical purposes.

8. Legal Administration and Contact Information

For questions regarding this Privacy Policy, our data handling procedures, or to inquire about our data isolation frameworks, please contact our help desk directly at support@clbry.com.