Information We Collect
Information you provide
- Account information: Email address, display name (optional), and profile photo when signing in via Google.
- Experience Bank entries: Work achievements in STAR format, timeframes, categories, and skill tags.
- Resume content: Generated and edited resume text, target company names, and job description inputs.
- Interview practice data: AI-generated questions, your responses, and feedback records.
- Salary negotiation data: Current salary, desired salary, target industry, job type, and key achievements.
- Scout reply data: Received scout messages and your drafted replies.
- Payment information: Credit card details for paid plans are processed by Stripe; we do not store card data on our servers.
- Support inquiries: Messages and attachments you send to our support team.
Information collected automatically
- Access logs: IP address, browser and OS type, access timestamps, and referrer URL.
- Usage data: Feature usage frequency and interaction logs via Google Analytics.
- Cookies and local storage: Session tokens, consent status, and user preferences.
- Error logs: System error details via Sentry.
How We Use
We use collected information for the following purposes:
- Providing, operating, maintaining, and improving the Service.
- Authenticating and managing user accounts.
- Delivering AI-powered features such as resume generation, mock interviews, consistency checks, and salary negotiation simulations.
- Processing payments and managing subscriptions.
- Providing customer support.
- Sending important notifications about changes, incidents, or policy updates.
- Sending marketing communications about new features or promotions only with your consent.
- Detecting and preventing unauthorized access and prohibited conduct.
- Generating aggregated, de-identified usage statistics.
- Complying with legal obligations.
Security
We implement industry-standard technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include encrypted data transmission (TLS), access controls, and regular security reviews. However, no system can guarantee absolute security.
Your Rights (GDPR/CCPA)
Depending on your location, you may have the following rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you.
- Correction: Request correction of inaccurate or incomplete information.
- Deletion: Request deletion of your personal information. You can delete your account and all associated data immediately via Settings.
- Restriction: Request that we limit the processing of your information.
- Data portability: Export all your data in JSON format from Settings at any time.
- Objection: Object to processing based on legitimate interests or for direct marketing.
- Opt-out of sale/sharing (CCPA): We do not sell personal information. California residents may still submit a request to confirm this.
- Withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any right not available directly in Settings, please contact us at support@careerbankai.com. We will respond within 5 business days after verifying your identity.
Children
The Service is not directed to children under the age of 13, or 16 in the EEA. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately so we can delete it.
Contact
For privacy-related inquiries or to exercise your rights, please contact us at:
| Data Controller | Koki Suetsugu (Sole Proprietor) |
|---|---|
| support@careerbankai.com | |
| Response time | Within 5 business days (Japan Standard Time) |
Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be notified via in-service notification or email before they take effect. Continued use of the Service after the effective date constitutes acceptance of the updated policy.
| Date | Changes |
|---|---|
| February 2, 2026 | Initial version |
| May 10, 2026 | Added third-party service details, AI processing transparency, cookie consent, data export, account deletion, and international transfers. |
| May 12, 2026 | English version published; added GDPR/CCPA rights and children’s privacy. |
This is the English translation of our Privacy Policy provided for reference purposes. In case of any discrepancy between this translation and the Japanese version, the Japanese version takes precedence as the legally binding document.