Privacy Policy

Information we collect

• Account information. Email address, display name, and password (hashed via PBKDF2-SHA256 with per-user salt). Email-verification tokens. Optional avatar.
• Tenant membership. Which colleges or host organizations you belong to, and your role within each.
• Work records. If you are a student, the work you log on the platform: weekly timesheet hours, day-by-day entries, task completions, attestation signatures (your typed name + timestamp + originating IP), uploaded artifacts and links, supervisor reviews of your work.
• Skill profile. Skills earned through completed tasks; supervisor endorsements.
• Feedback. Structured feedback you give to or receive from supervisors, peers, or host representatives.
• Application data. If you apply to a project, the body of your application and the host's accept/decline decision and any comment they leave.
• BootCamp learning data. If you take the AI Fluency BootCamp: which modules you started and completed (and on which content version), the artifact text you wrote inside each module, tutor session counts, and the skill-profile evidence that earning a module produces.
• Public profile data. If you build a public learner profile: your chosen handle (used in careerlauncher.ai/p/<handle>), profile photo, headline, dream career, written goals, school / class year / major, internship placement (host, role, dates), social links (LinkedIn / GitHub / portfolio), and an uploaded PDF resume.
• Acquisition attribution. If you arrived via a marketing campaign: utm_* source/medium/campaign values from the URL, the referrer, and the landing path. Used for understanding what brought you here.
• Session and usage data. Login sessions (token, expiry, tenant scope), audit-log entries for sensitive actions (timesheet submission, supervisor decisions, exports), and anonymous-by-default product-analytics events when our analytics provider is enabled.

How we use information

• To deliver the core platform: route you to your tenant's portal, render dashboards, deliver email verification and password-reset links.
• To produce grant-compliance and audit reports that colleges, hosts, and funders need.
• To give every student a verified record of their work that they can take with them.
• To send transactional email (verification, password reset, application decisions, supervisor decisions).
• To detect abuse, debug issues, and improve the product. Aggregate usage data is reviewed; individual records are inspected only when troubleshooting a specific report.

We do not sell personal information. We do not show advertising.

Who can see your data

Access is scoped by tenant and role. Concretely:

• You can always see your own account, work, and profile.
• Your supervisor (the named supervisor on your enrollment / project) can see the work you log, approve or reject it, and leave feedback.
• Your college's program lead or coordinator can see cohort-level data for grant compliance and audit reporting. They cannot edit your work or your account.
• The host organization where you do your work can see the work you do for that org — across whichever colleges they host students from.
• Other students, peers, and people outside your tenants cannot see your profile, work, or feedback unless you and they share a project membership.
• CareerLauncher staff (currently just the founder) can access data when troubleshooting issues or fulfilling lawful requests.

We do not share personal data with third parties for marketing purposes. We do share data with the subprocessors below to operate the service.

AI Fluency BootCamp and public profiles

The BootCamp and the public profile feature have specific behaviors worth calling out so you can make informed choices.

When you take the BootCamp

• We record which modules you started + completed, the content version you completed against (so we can honestly attribute your learning to what you actually saw), and the artifact text you wrote inside each module.
• Conversations with the in-module AI tutor are sent to Anthropic to generate responses. We do not authorize Anthropic to train on these conversations, and we do not use them to train any model ourselves.
• Completing a module produces skill-profile evidence attached to your account (e.g., Basic level on "Prompt design"). This evidence is visible on your in-app profile to people who can already see your profile (your tenant, hosts you're placed with).
• We may review anonymized, aggregated bootcamp signals (completion rates per module, common stuck-points, time-on-step) to improve the curriculum. Individual artifacts and conversations are not used for product analytics unless we're troubleshooting a specific issue you've reported.

When you publish a public profile

• Your profile becomes accessible at careerlauncher.ai/p/<your-handle> to anyone with the link. Search engines may index it.
• The page can include: your name, photo, headline, dream career, written goals, school / year / major, internship placement, BootCamp module completions (with completion dates and content versions), skill-profile evidence, social links, and your uploaded PDF resume.
• Your AI Playbook capstone artifact is off by default. It only appears on the public page if you explicitly opt in via the editor.
• Photos and resumes you upload are stored in Cloudflare R2 under a per-user key. While your profile is unpublished, the photo / resume URLs are private — only you can fetch them. When you publish, they become publicly fetchable to anyone with the URL.
• You can unpublish at any time. Unpublishing immediately makes the public URL return 404 and stops serving your photo and resume publicly; the underlying records remain on your account until you delete them or your account.

What CareerLauncher can do with your content

We try to be specific so there are no surprises:

• Display what you publish. When your profile is published, we display the fields you filled in to anyone with the link.
• Improve the platform with anonymized aggregates. We may compute aggregate, de-identified statistics from BootCamp progress and profile data (e.g., "X% of learners list software engineering as a dream career", "median module completion time is N minutes") to improve curriculum and product. These aggregates never identify you.
• Operational use. We process your data to run the service (route you to the right tenant, render pages, send transactional email, render your profile, deliver your resume to viewers, etc.).
• What we will not do without your explicit consent. We will not use your individual prompts, tutor conversations, written artifacts, profile content, or resume to train AI models. We will not quote your profile content (your goals, dream career, name, etc.) in CareerLauncher marketing without your specific opt-in.
• What we will not do at all. We will not sell your personal information. We will not show advertising. We will not share your profile or work data with recruiters, third-party platforms, or marketing partners.

By publishing a profile or uploading a resume you grant CareerLauncher a non-exclusive, worldwide, royalty-free license to host, display, transcode (e.g., for thumbnails), and deliver that content for the specific purpose of operating your public profile. This license ends when you unpublish or remove the content.

Subprocessors

• Cloudflare — hosting (Workers, D1 database, R2 object storage). Data stays in the Cloudflare network.
• Resend — transactional email delivery.
• Anthropic (optional, when enabled) — AI weekly-note summarization. Only the explicit content you ask the platform to summarize is sent.
• PostHog (optional, when enabled) — product analytics. Identified by hashed user ID + role + tenant slug; no PII payload beyond what's needed to count actions.

Your rights

• Request a copy of your data.
• Request correction or deletion of your account.
• Withdraw consent for optional processing (analytics, AI summarization).
• Object to processing or request restriction; if you're a student in a funded program, some records may need to be retained for grant-audit purposes per the funding agreement.

To exercise any of these, email hello@careerlauncher.ai. We respond within 14 days.

Children and FERPA-adjacent data

CareerLauncher is intended for adult learners (16+) participating in college work programs. We do not knowingly collect data from anyone under 13. For students under 18, we recommend the supervising college ensure parental consent where required.

We treat student-work data with grant-audit-grade care but we are not a School Official under FERPA at this stage. Colleges using CareerLauncher are responsible for FERPA compliance regarding the data they share with the platform. We will sign a Data Processing Agreement on request.

Retention

• Account data: until you delete your account.
• Work records (timesheets, tasks, artifacts): retained for the lifetime of the project + grant-compliance retention period (typically 3 years post-program-end).
• Audit logs (timesheet submissions, supervisor decisions, exports): 5 years.
• BootCamp progress, module artifacts, skill-profile evidence: retained until you delete your account.
• Public profile fields, photo, and resume: retained until you remove them or delete your account; the public URL stops resolving the moment you unpublish.
• Session tokens: max 14 days, deleted on signout.
• Email verification + password-reset tokens: 24 hours (verification), 1 hour (password reset).

Security

Practices in place:

• Passwords hashed with PBKDF2-SHA256 (100,000 iterations, per-user salt).
• Sessions cookied HttpOnly, Secure, SameSite=Lax; scoped per subdomain.
• Email domain verification on signup (you can only sign up with a tenant-approved email domain).
• Cross-tenant data isolation enforced at the query layer.
• Attestation trail (typed signature + timestamp + IP) on every timesheet submission.
• Audit log on sensitive actions (approvals, rejections, exports).

No software is perfectly secure. Report a vulnerability to hello@careerlauncher.ai.

Changes to this policy

We'll notify the email on your account if we make material changes. The "Last updated" date at the top of this page always reflects the current version.

Contact

hello@careerlauncher.ai · CareerLauncher · Cupertino, CA