PRIVACY NOTICE · UPDATED OCTOBER 29, 2026

Privacy, with a clear purpose.

CareerLaunch AI is an AI-assisted résumé and cover-letter service. You can save application facts without a purchase; paid features depend on your active plan. The public sample outline runs in your browser and should use fictional data only.

Information we process

The workflow processes your email for sign-in; the name and contact line you choose for documents; employment, education, skills, target job information, uploads, revisions, approvals, and support messages. Do not provide SSNs, classified information, payment details, or unnecessary sensitive data.

Why it is processed

Information is used to authenticate access, prepare documents, apply your corrections, provide downloads, send transactional notices, and respond to support requests. AI output can be inaccurate; you must review it.

Providers and storage

Railway hosts the service and its persistent database. Applicant records and generated document payloads are encrypted using AES-256-GCM; encryption keys are configured separately. OpenAI receives the career and job text needed for drafting. The code omits the dedicated name and contact fields from AI requests, but uploaded or free-text content may still contain personal details. Resend receives the email address and transactional message. Provider policies and processing terms apply; we do not promise zero retention by providers.

Uploads

Text is extracted from supported uploads and shown for your review. Original files are not retained. DOCX/PDF processing requires an enabled malware scanner and bounded parsing. File screening cannot guarantee that every malicious document will be detected.

Retention and deletion

Active application records and documents are removed after the configured retention period (displayed at intake; default 30 days) from their last update. You can delete an application from the portal sooner. Sign-in links expire after 15 minutes; sessions after 12 hours; download links after five minutes and one use. The service keeps up to three daily encrypted local recovery snapshots. Deletions disappear from those snapshots as they rotate, normally within three days. These snapshots share the application volume and do not protect against loss of that volume. Backup recovery status is documented separately; do not rely on the service as your only copy of a final document.

Cookies and access

A necessary HttpOnly session cookie supports signed-in access. A first-party HttpOnly visitor cookie estimates public-page visits; recognizable bots are excluded, but counts are not verified individual people. Resume contents are not included in aggregate analytics. No third-party advertising is currently enabled. Unfinished builder details may be held in this browser tab for up to two hours after processing consent to recover refreshes, and are removed after final saving. Avoid shared devices for private information. Hosting providers may process request metadata. Do not forward private sign-in links.

Future advertising

Advertising is not enabled. Any future Google AdSense placements will require publisher approval and applicable consent and opt-out messages before activation. Advertising scripts are excluded from private application, account and payment workflows. We do not intentionally send résumé content or application records to advertisers.

Requests and contact

Use the private portal’s support form for access, correction, or deletion requests. You may also contact robertrichards45@gmail.com.

Payment and access records

Stripe Checkout processes payment details. Card details are not stored on this website. Billing customer, subscription, checkout and event identifiers are retained separately from applicant documents to manage renewals, access and payment disputes. Deleting an application does not cancel a subscription; use the billing portal to cancel renewal. Contact support for billing-account data requests.

Aggregate marketing measurement

Our browser-visitor estimates may record a fixed source category such as Facebook, LinkedIn, community, referral or video when you use a tagged link. We do not store arbitrary campaign text or résumé content in these metrics. Untagged traffic is not automatically labeled as Google traffic. Builder and plan-selection clicks are aggregate events, not proof of payment. Source attribution and optional click events are omitted when Global Privacy Control is sent.