Privacy policy

CareerID is privacy-first. Your career data belongs to you. Employers pay for software access — not for your data. They only see what you explicitly consent to share, and you can revoke at any time. We do not sell, license, or broker personal data.

Last updated: May 2026

What we collect

  • Information you provide: skills, evidence, roles, achievements
  • Consent records: who you have shared data with and when
  • Waitlist email addresses (with your permission)
  • Structured audit logs for consent and access events (server-side only)

What we do not collect

  • We do not use browser-side tracking or advertising cookies
  • Protected characteristics are collected only with your explicit consent. They stay private. They are used only for support and inclusion reporting you consent to.
  • We do not share data with third parties for commercial purposes
  • We do not use your data to train AI models without your explicit consent

Your rights

Under UK GDPR and the Data Protection Act 2018, you have the right to:

  • Access the data we hold about you
  • Correct inaccurate data
  • Request deletion of your data
  • Withdraw consent at any time
  • Data portability — export your full CareerID by emailing contact@careerid.co.uk. We will provide your data in structured JSON format within 30 days. (Self-service export coming soon.)

To exercise any of these rights, contact contact@careerid.co.uk.

Data storage & third-party services

CareerID uses four services that process personal data:

  • Airtable (Formagrid Inc., United States) — profile data, waitlist signups, and consent records. Data is transferred to the US under Standard Contractual Clauses (SCCs). Airtable provides a Data Processing Agreement and is GDPR-compliant.
  • Netlify (United States) — site hosting and serverless functions. Standard server logs only; no persistent personal data stored at Netlify.
  • Anthropic (United States) — AI processing for skills extraction, evidence summarisation, and coaching reflection. Personal data is sent to Anthropic’s API for processing. Anthropic does not train on API data by default. Transfer mechanism: Standard Contractual Clauses.
  • Resend (United States) — transactional email delivery (welcome emails, consent notifications). Standard Contractual Clauses apply.

No personal data is stored in browser localStorage — only accessibility preferences (theme, font size) are stored locally.

Contact

For any privacy enquiry: contact@careerid.co.uk