Privacy Policy

1. Who we are

The Career Boost ("we", "us") operates thecareerboost.com and provides AI-powered resume optimization. For the purposes of data protection law, The Career Boost is the data controller of the personal data we collect and process. This policy explains what data we collect and how we use it.

2. Information we collect and legal basis

We process personal data on the following legal bases:

• Account data (email, name, authentication identifiers) — Legal basis: contract performance — necessary to create and manage your account and provide the Service.
• Uploaded content (resumes, CVs, and job descriptions you submit for analysis) — Legal basis: contract performance — necessary to deliver CV analyses, ATS scores, and optimized resumes.
• Usage data (pages viewed, features used, analysis history, device and browser information) — Legal basis: legitimate interest — to operate, secure, and improve the Service.
• Payment data — handled directly by Flutterwave (NGN) and Paddle (USD). We receive only the transaction status and the last 4 digits of cards — never full card numbers. Legal basis: contract performance and legal obligation — to process payments and meet tax and accounting requirements.
• Transactional emails (sign-in, receipts, plan expiry) — Legal basis: contract performance — to deliver the Service. Marketing emails require your explicit consent.

3. How we use it

• To deliver CV analyses, ATS scores, optimized resumes, and cover letters.
• To operate, secure, and improve the Service.
• To process payments and prevent fraud.
• To send transactional emails (sign-in, receipts, plan expiry). We do not send marketing without your consent.

We do not sell your personal data or use your uploaded documents to train AI models.

4. Sharing

We share data only with vetted processors who help us run the Service:

• Hosting & database: Lovable Cloud (Supabase).
• AI processing: model providers via the Lovable AI Gateway.
• Payments: Flutterwave (NGN), Paddle (USD, merchant of record for international transactions).
• Email delivery: our transactional email provider.

5. Security

Data is encrypted in transit (TLS) and at rest. Access to production systems is restricted and logged. No system is perfectly secure — please use a strong, unique password.

6. Retention

Account and analysis data are retained for as long as your account is active. You may request deletion at any time, after which we will remove your data within 30 days, subject to legal record-keeping requirements (e.g., tax records for payments).

7. Your rights

Depending on your jurisdiction, you may have the right to access, correct, port, or delete your personal data, and to object to certain processing. To exercise these rights, contact us via the Support page.

8. Cookies

We use strictly necessary cookies to keep you signed in and remember preferences, and limited analytics cookies to understand product usage. You can clear cookies in your browser at any time.

9. Children

The Service is not directed to children under 16. We do not knowingly collect data from children.

10. Changes & contact

We will post material changes to this policy on this page. Questions? Reach us via the Support page.