Privacy & consent
Career IP builds an evidence-based understanding of your career from what you choose to share, and turns it into documents you can use. This page explains exactly what we collect, why, where it lives, who processes it, and the controls you always have. Policy version: 2026-07-17.1.
Who is responsible
The specific name and contact details of the party responsible for your data are still pending owner (D2) confirmation, and will be published here before Career IP is used by real participants.
What we collect, and why
| Data | Why |
|---|---|
| Your email address | Delivering your finished Career IP, and letting you sign back in afterward to see your data — both use a 6-digit code, there is no password — plus the few emails we send. Emails never contain your career content. |
| What you share in your session — answers, pasted transcripts, corrections | Building your Career IP: evidence → tested interpretation → your package. |
| Your positioning and disclosure choices | Shaping your documents the way you choose. These never change your evidence. |
| One closing feedback answer, and a six-month reflection if you reply | Understanding how the session felt and how the package held up. Never treated as proof of accuracy. |
| Anonymous usage statistics | Improving the product. Never linked to you — they carry no identity at all and cannot be traced back. |
Nothing is collected without a purpose. Using Career IP never requires agreeing to research.
Where your data lives, and who processes it
Your data is stored with Supabase (Singapore region), isolated per person at the database level. Content-free emails are delivered by our email provider. And:
Your text is sent to the Claude API to run the session. Anthropic does not use it to train their models, and deletes it from their systems within up to 30 days. Our own deletion cannot reach that residual copy.
Human review during the early period
During this early period, Career IP's owner reviews each package before it is released to you. She may read your session and package to check that the work is accurate and responsibly prepared. She cannot alter the evidence you provided, and every access is logged.
Optional research — off unless you say otherwise
Two separate, optional permissions exist: helping improve Career IP (your session records, linked to you, studied internally), and anonymised research publication (your case informing published research after identifying details are removed — only available with the first). Both are off by default, recorded explicitly either way, and withdrawable at any time in My Data. Withdrawing the first stops future research use immediately and removes what was already collected for research. Findings already published cannot be recalled. Declining either changes nothing about your session.
How long we keep things
Up to 12 months after your package is released, then reduced to your final package and unlinkable statistics. Unfinished sessions are deleted after 90 days.
Deletion, export, and what honestly remains
From My Data you can export everything we hold about you, or permanently delete it: your sessions, evidence, package, research entries, consent history, files, and your sign-in itself. We also ask our email provider to delete delivery records, though the exact residual window is still pending verification (V2) and will be published here once confirmed. Deletion reaches our backups within a window that is still pending verification (V1) and will be published here once confirmed. What remains afterwards: statistics that were never linked to you, an access log with your identity removed, and an unlinkable record that a deletion happened. Text already processed by Anthropic is deleted by them within 30 days.
Six-month follow-up
About six months after your package, we'll email you once (with at most one reminder) to ask how it held up. Unsubscribe any time.
Policy changes
If we make a material change — anything that changes meaning, data use, processing scope, recipients, retention, or your rights — we will ask for your consent again before the affected processing continues. Minor wording fixes just appear in the version history below.
Version history
- 2026-07-17.1 — Initial consent policy.