Privacy Policy

This policy explains what Karfolio collects, why we collect it, and the choices you have. We collect what the service needs to work, and not more.

What we collect

• Account details — the name and email address your identity provider gives us when you sign in. We never receive your password.
• Your Profile — the career information you provide: roles, employers, dates, achievements, target levels, and any resume you upload.
• Documents you generate — Drafts, Submissions and exported files.
• Billing records — what you purchased and when. Card details go to our payment provider and never reach our servers.
• Technical data — logs and error traces needed to operate and secure the service.

Why we use it

• To build your Profile and generate the documents you ask for.
• To take payment and maintain your Credit balance.
• To keep the service running, debug failures, and prevent abuse.
• To contact you about your account or a material change to the service.

We do not sell your personal data, we do not use it for advertising, and we do not use your Profile to train third-party models.

Who else sees it

We use third-party providers to run the service: cloud hosting and storage, an identity provider for sign-in, a payment provider, and model providers that process prompt content in order to generate and review documents. Each receives only what their function requires, and is bound to use it only for that. We may also disclose data where the law requires it.

Where it is stored, and for how long

Data is stored on cloud infrastructure and may be processed in countries other than yours, under appropriate safeguards. We keep your Profile and documents for as long as your account is open. Delete your account and we delete them, except records we must keep for legal or accounting reasons.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to or restrict certain processing, and to complain to your data protection authority. Ask us and we will act on it within the period the law allows.

Security

Access to your data is enforced in the database itself, not only in application code, so a query cannot return another user's rows. Files are private and reachable only through short-lived links issued to you. Traffic is encrypted in transit. No system is perfectly secure, but this is the standard we hold ourselves to.

Cookies

We use only what sign-in requires to keep you logged in. No advertising or cross-site tracking cookies.

Children

Karfolio is not intended for anyone under 16, and we do not knowingly collect their data.

Changes and contact

We will post any update here and change the date above. Questions, or to exercise a right: privacy@karfolio.app.