1. Who is responsible
- Trading name
- Career Command
- Operator
- Mathew Yesudsa
- careercommandcc@gmail.com
- Correspondence address
- Coimbatore, Tamil Nadu 641045, India
- Customer support phone
- +91 8095902942
- Grievance contact
- Mathew Yesudas · careercommandcc@gmail.com
2. Information you provide
We record the policies and notices you accept, their versions, the server-recorded time, sign-in provider and your optional marketing preferences. We process account identity and sign-in details through Firebase Authentication; profile details; applications, job descriptions, recruiter contact details, dates, notes, interviews, follow-ups, CV version metadata and documents or drafts you choose to save. Payment records include order/payment references, amount, plan, payment status and customer name/email. We do not need your payment PIN, OTP, full card number or CVV.
3. CV and job-description analysis
Standard CV writing checks run in your browser. A paid CV–JD analysis sends the extracted CV and JD text to our server for rule-based comparison. This review does not use Gemini or a generative AI provider.
The server stores analysis results, evidence excerpts, analysis time, usage information and input fingerprints to support access limits, retries and saved history. Evidence excerpts can contain personal information. The analysis record does not store the complete original CV/JD input, but documents or text you separately choose to save may contain it. Closing the review screen does not delete its server-side analysis record.
4. Why we use the information
We use it to authenticate you; save and display your workspace; create requested reviews and exports; manage entitlements and analysis allowances; verify payments, refunds and disputes; recover interrupted purchases; respond to support requests; and maintain security. Optional reminder emails require the reminder feature and its delivery service to be configured.
5. Service providers and optional connections
Google Firebase supplies authentication and database services; Render hosts the application; Razorpay processes payments. GitHub hosts the website source code and is not the application’s customer database. If email reminders are enabled, reminder delivery uses Resend. Providers may process information outside India under their own infrastructure arrangements. We do not claim India-only storage.
If you connect the Career Command extension, it processes job details from pages you choose to use and exchanges data with your signed-in workspace. Manage permissions in your browser and disconnect when no longer needed. A portal’s content and availability are controlled by that portal.
6. Browser storage and sharing
Browser storage supports sign-in persistence, preferences and session behaviour. Shared devices can retain your session; sign out when finished. No advertising-cookie feature is introduced by these pages. Service providers may use their own essential storage. We do not sell your CV or application data. Authorised administration, support, security work and legal obligations may require access to relevant records.
7. Retention and deletion
Workspace records remain while your account is maintained unless you delete them. Analysis results remain until their deletion through available controls or an account-data deletion request; there is currently no automatic expiry-based purge of all analysis records. A pass expiring does not delete your data.
Use Account Settings → Data & Privacy to request account deletion, or contact support for access, correction, deletion or a retention question. Account deletion removes operational workspace data and saved career review data through the application workflow. Minimal deletion-recovery records are kept to complete requests and prevent accidental account recreation. Account policy-acceptance history is removed with workspace deletion; purchase-specific acceptance evidence is retained with the payment record. Payment, refund, dispute, security and audit records may remain where needed for legal obligations or legitimate dispute/security handling. Financial records are not erased simply because the account is deleted. Deletion can require reauthentication and may need a retry or support if an operation fails; it is not a promise of immediate erasure from every provider log or backup.
8. Your choices and security
You can correct profile and application information, export application reports, delete available saved records, stop using optional features and contact us about your data. You can change optional marketing choices or withdraw workspace-processing consent under Account Settings → Data & Privacy. Marketing is optional, starts unchecked and does not affect Free or Pro access. Withdrawing workspace consent stops workspace access; you can still export your records or delete your account. Withdrawal does not itself erase previously stored records. We verify requests to protect account ownership. No system can guarantee absolute security. Do not send passwords, OTPs, API secrets or card information to support.
9. Children
This service is intended for adults aged 18 and over. We do not offer a child-account or parental-consent workflow. Contact support if you believe a child’s information has been submitted so we can investigate and arrange appropriate deletion.
Optional referrals and learning links
Invite & Earn stores a random invitation code, the accounts connected by a claim, acceptance of referral rules, claim and reward timestamps, status and slot balances. We verify account creation time and email-verification status through Firebase Authentication. Sharing and claiming are optional and separately confirmed in Invite & Earn. A source referral code may be kept in your browser for up to seven days to carry it through signup, including Google sign-in. You can clear it; it does not grant a reward without a qualifying claim.
To deter repeat participation, we keep an HMAC digest of the verified email for 180 days after a claim. The digest record contains neither the raw email nor a UID. Gmail dot and plus aliases are treated as the same email identity. The digest is accessible only to privileged server administration, is not shared with other users, and may remain after account deletion for this limited abuse-prevention purpose. Expired digest records are scheduled for deletion through Firestore TTL; physical deletion can occur later than the expiry time. Operational referral links, balances and relationships are removed by account deletion.
Optional learning resources link to external provider websites. No CV or JD text is placed in those links. External providers control their own content, pricing and privacy practices. Current resource links are not affiliate links and no enrolment commission is earned through them. Review advice distinguishes missing CV evidence from skills you may need to learn.
10. Questions and updates
Contact the privacy/grievance contact above to raise a privacy concern. We will explain material changes to this notice. Where applicable law requires a particular notice, consent, response or remedy, that requirement takes precedence.