Privacy Policy
Last updated: September 2026
This Privacy Policy explains what personal data is collected through the CareerPilotAI website and service, why we use it, and the choices you have. Jian Yang, an individual seller in Shanghai, China, trading as CareerPilotAI is the controller for personal data collected through the CareerPilotAI website and service. Our principal place of business is Shanghai, China. For any privacy request, contact us at support@careerpilotai.site.
Information we collect and why
We collect and process the following categories of personal data for the purposes described below.
- Account and profile data — your name and email address, used to create and maintain your account and deliver the service to you.
- Authentication and session data — access tokens and related session identifiers used to keep you signed in, secure your account, and restore your session.
- Resume and career content — pasted resume text, job descriptions, target roles, LinkedIn profile text and related inputs you submit so we can provide the AI results you request. The current tools accept text; they do not require uploading original resume or cover-letter files.
- Saved resumes and version history — resumes and results you choose to save, so you can revisit and manage them within your account.
- AI requests and results — submitted text is processed to create a prompt for the AI provider. Our generation records store a request fingerprint, generated outputs and operational metadata. Outputs can repeat information from your input. Text you separately save in Resume Storage & History is stored with its versions.
- Support communications — details you share when contacting us, such as your name, email, and message, used to respond to and resolve your request.
- Usage and service-operation data — request metadata and usage signals used to operate, monitor, and keep the service running reliably.
- IP, device, and security logs — IP addresses, device and technical information, and security logs used for security, fraud prevention, and abuse prevention.
- Credit ledger — records of credit balances and transactions used to administer access to AI features.
- Paddle-derived identifiers — Paddle customer, subscription, and transaction identifiers, together with plan and subscription status and webhook-derived billing records, used for billing, provisioning, support, accounting, fraud prevention, and legal compliance.
Legal bases we rely on
Where applicable, we process personal data on the following legal bases:
- Performance of a contract — for account creation, the AI services you request, saved resume history, subscriptions, and support, where processing is necessary to provide those services to you.
- Legitimate interests — for security, fraud prevention, reliability, troubleshooting, and service improvement, balanced against your rights and reasonably expected uses of the service.
- Consent — for optional, non-essential cookies, personalized advertising, or marketing where consent is required. Consent is not the basis for all processing merely because you visit the site.
- Legal obligation — for tax, accounting, fraud, dispute, and regulatory records where we are required to retain or disclose information.
AI processing and Moonshot AI
Payments and Paddle
Who we share data with
We share personal data with the following recipients, only as needed for the purposes described above:
- Moonshot AI — for requested AI processing of the career content you submit.
- Hostinger and technical hosting or infrastructure providers — for hosting, delivery, and operation of the service.
- Paddle — as an independent merchant of record and controller for checkout, payment, subscription management, tax, invoicing, and fraud prevention.
- Professional advisers and authorities — where legally required or reasonably necessary for compliance, disputes, or protection of rights.
CareerPilotAI does not receive or store full payment-card details.
How long we keep information
- Account, saved-resume, AI-result, and credit records are kept while needed to provide and operate your account and the service.
- Deleting a saved resume removes that resume and its associated saved versions from the active database. This does not also delete separate AI-generation, billing, credit or security records, or copies in backups.
- On a verified deletion request, we delete or anonymize your data when it is no longer needed, except for records retained for legal obligations, accounting or tax, fraud or security, dispute resolution, or enforcement.
- Security and diagnostic data is retained only as long as reasonably needed for those purposes.
- Paddle retains payment data under Paddle's own privacy terms.
Retention periods are determined by the purposes described above, account status, technical needs, and applicable legal, accounting, tax, fraud-prevention, security, and dispute-resolution requirements.
The current application does not automatically expire saved resumes or AI-generation records after a fixed number of days. Contact support to request deletion beyond the saved-resume controls. Backup and provider copies are separate from the active database; deleting a saved resume does not promise immediate erasure of those copies.
Your privacy rights
International transfers
Security
Cookies and advertising
CareerPilotAI uses essential authentication and session cookies that are necessary to keep you signed in and secure your account. These are used to operate the service and do not require separate consent where essential.
Google AdSense is not active on this site at this time. Before non-essential analytics or advertising cookies are activated, we will present consent choices and a cookie notice where required, and you will be able to manage your consent preferences later. You can also manage cookies directly through your browser settings.
When Google AdSense or other Google advertising services are enabled, third-party advertising vendors, including Google, may use advertising cookies and similar technologies such as web beacons, IP addresses and device or browser identifiers to deliver, measure and protect advertising. Personalized ads may reflect activity on this and other sites. Non-personalized ads use contextual information rather than an interest profile, but may still use cookies or identifiers for measurement, fraud prevention or frequency limits; they are not necessarily cookie-free.
No non-essential analytics tracker is currently enabled in this website build. If analytics is introduced, its provider and data use will be disclosed before activation, with consent controls where required. Browser cookie settings are separate from a site's consent choices and may also affect sign-in.
Users can manage personalized advertising through Google Ads Settings. Read How Google uses data on partner sites and apps and Google's advertising technologies information. These Google controls do not replace consent choices required on this site.