Privacy Policy
Our core promise: we understand you through your content, never monetize your identity.
OpenCareer makes money from AI compute you explicitly pay for (compute credits) — not from your data.
We do not sell data, do not run targeted advertising, do not share your contact details, and never reveal
your identity to employers.
1. What stays on your device (never uploaded)
- Your resume is stored in your browser's local storage (
localStorage), not on our servers. Editing, exporting, and deleting are entirely local.
- Your avatar preferences (directions you want, jobs you liked/rejected, calibration judgments, practice-interview notes) are also local-first.
2. What we process transiently (not stored)
- When you ask for matching, evaluation, or interview practice, a de-identified projection of your profile (skills, experience summaries) is sent to our servers and to AI model providers to compute results. Names, emails, and phone numbers are stripped before any AI call. Request bodies are not written to server logs.
3. What we store server-side (account, optional)
- An opaque random account key (UUID) with your credit balance and spending ledger.
- If you choose email login: your email address, used only for login, recovery, and the job-digest notifications you opt into. Login identifiers are additionally stored as salted hashes so a database leak alone cannot reverse them.
- Your tracked items (companies/directions you follow) — content preferences, not identity.
- Anonymous usage metrics (latency, feature usage, an opaque visitor id) — no resume text, no prompts.
4. Self-audit: see everything we have on you
Your account page includes a "self-attestation" view that returns the complete server-side record for your account — the same data we see. What you see there is all there is.
There is also a live "what the server actually sees" comparison table (computed from your own local resume, original vs. sent projection) on the Chinese privacy page.
5. Your rights (GDPR / applicable privacy laws)
- Access: the self-audit view above, any time, no request needed.
- Deletion: clear local data in one click (your device); delete your server-side account record in one click on the account page ("Delete account") — trackings, ledger, email mapping, and watch reports are all erased immediately and irrecoverably.
- Portability: your resume/avatar exports as JSON at any time ("your avatar belongs to you").
- Withdrawal: unsubscribe links in every digest email; tracking items removable in one click.
6. Sub-processors
- AI model providers (via our inference proxy) — receive de-identified profile projections and job descriptions to compute matching/evaluation results. No identity data.
- Resend — email delivery (login codes, opted-in digests).
- Hosting provider (Singapore) — runs our servers.
We sign data-processing terms with sub-processors and transfer only the minimum necessary.
7. Job data
Job listings shown on OpenCareer are collected from companies' public official career pages. We link back to the original posting; applications happen on the employer's site — we never sit between you and the employer.
8. Children
OpenCareer is a career tool intended for users 16 and older.
9. Contact
Privacy requests: privacy@opcareer.me. We aim to respond within 7 days.