Privacy notice

This notice explains what personal data CareerLift AI collects, why, who it is shared with, and your rights, including under the Nigeria Data Protection Act 2023.

What we collect

• Account details: your name, email address and a securely hashed password (we never store your password itself).
• The career information you give us: what you type about your experience, the text of any CV you upload, the CVs we create, and any job descriptions you paste. We read the text of uploaded files and do not keep the original file.
• Job matches, cover letters, your application tracker and notes.
• Payment records: amounts, dates, status and Paystack references. We never see or store your card or bank details — Paystack handles them.
• Security and usage records: sign-in sessions, rate-limit counters, and logs of AI requests (size, cost and success — not their content).

Why we use it

• To provide the service you paid for: creating and improving CVs, matching jobs, writing cover letters and saving your results.
• To process payments and keep accurate financial records.
• To keep accounts secure and prevent abuse.
• To send essential emails, such as verifying your address or resetting your password. We don't send marketing emails.

Who we share it with

• OpenAI — the CV text and job descriptions needed for each AI request are sent to OpenAI to generate your CV, assess matches and write cover letters. We ask OpenAI not to store these requests for reuse.
• Paystack — your email and payment amount, to take payments.
• Our hosting, database and email providers, which store and process data on our behalf.
• Nobody else, unless the law requires it. We don't sell your data. Employers don't receive anything from us: you apply to them directly.

Some of these providers process data outside Nigeria. We use them only for the purposes above.

How we protect it

CV content, cover letters, uploaded text and your tracker notes are encrypted before they are stored, and database backups are encrypted too. Passwords are stored only as strong one-way hashes, and all connections use HTTPS. No online service can promise perfect security, but if a breach affected your data we would tell you and the Nigeria Data Protection Commission as the law requires.

Cookies

We use one essential cookie to keep you signed in. We don't use advertising or tracking cookies.

How long we keep it

• Your CVs, matches, letters and tracker stay in your account until you delete them or your account.
• When you delete your account, that content is deleted. Payment and wallet records are kept without your name or email, because financial records must be kept by law.
• Expired sign-in sessions and security counters are removed automatically.

Your rights

You can ask to access, correct, download or delete your data, and to object to or restrict how we use it. From your account page you can download all your data and delete your account at any time. You can also complain to the Nigeria Data Protection Commission.

Contact

Questions about your data: carrerliftai@gmail.com.