Privacy Policy
Last updated: August 31, 2026
Felsoft Systems Limited (“CareerPilot AI”, “we”, “us”, or “our”) operates the CareerPilot AI website and application (the “Service”). This Privacy Policy explains what personal data we collect, how we use it, and your rights regarding that data.
1. Information We Collect
- Account information: name, email address, and password (stored as a salted hash) when you register.
- Content you provide: resumes, cover letters, job descriptions, interview answers, career goals, and similar content you upload or generate to use the Service's Features.
- Billing information: plan/subscription status and transaction history. Card details are collected and stored directly by our payment processors (Paddle and/or Stripe) — we do not store your full card number.
- Usage data: log data, device/browser information, and analytics about how you interact with the Service.
- Connected accounts: if you choose to connect Google or Microsoft for email sending/reminders, we receive the OAuth tokens and profile data those providers share, limited to the permissions you grant.
2. How We Use Your Information
- To provide, maintain, and improve the Service and its Features;
- To generate AI-assisted content (resume tailoring, cover letters, interview feedback, etc.);
- To process payments, manage subscriptions, and send billing-related communications;
- To send transactional emails (verification, password reset, reminders, notifications);
- To detect, prevent, and address fraud, abuse, and security issues;
- To comply with legal obligations.
3. Third-Party Service Providers
We share data with the following categories of service providers, solely to operate the Service:
- OpenAI — processes resume, job, and interview content to generate AI responses and content.
- Paddle.com Market Ltd. and Stripe, Inc. — process payments for subscriptions and credit packs. Paddle acts as Merchant of Record for orders it processes.
- SendGrid (Twilio) — delivers transactional and reminder emails on our behalf.
- RapidAPI / JSearch — powers job-board search results.
- Google and Microsoft — used only if you opt in to connect an email account for reminders/follow-ups.
- Hosting providers — our frontend is hosted on Vercel and our backend and database infrastructure on DigitalOcean.
We do not sell your personal data. We only share data with the providers above as necessary to deliver the Service, and each provider is contractually restricted in how it may use your data.
4. Data Retention
We retain account and content data for as long as your account is active. You may request deletion of your account and associated data at any time by contacting us; some billing records may be retained longer where required by law or by our payment processors.
5. Your Rights
Depending on your location, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at paddle@felsoftsystems.com.
6. Security
We use industry-standard measures — including encryption in transit (HTTPS), hashed passwords, and access controls — to protect your data. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
7. Children's Privacy
The Service is not directed to children under 16, and we do not knowingly collect data from them.
8. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date above.
9. Contact
Questions about this Privacy Policy can be sent to paddle@felsoftsystems.com or via our Contact page.