Privacy Policy

Last updated: 2026-07-08

CanCareer is operated by 1566673 B.C. Ltd. (doing business as CanCareer), 5307 Victoria Drive #1366, Vancouver, BC V5P 3V6. This policy describes what we collect, how we use it, and the choices you have. Our Privacy Officer is responsible for our compliance with privacy law; reach them at privacy@cancareer.com.

1. What We Collect

• Your email address and, if you sign in with GitHub, your GitHub account ID and username.
• Resumes you upload, and the master-resume facts we extract from them at your request.
• Job application records you create: company, role, status, dates, notes.
• Results of analyses and documents you generate, and interview transcripts and scores (see Section 3).
• If your access is provided through an organization’s program: your enrollment record (name, placement stage, employer, dates), responses and signatures on your program’s consent forms, and any optional, self-identified demographic information (e.g. gender, Indigenous identity, racialized or newcomer status, disability, 2SLGBTQI+ status) and income you choose to share for your program’s outcomes reporting. You can skip any of it, and it never affects your access.
• If you subscribe: a Stripe customer reference. Your card details go directly to Stripe and never touch our systems.
• First-party product events (Section 8) and basic request metadata (IP address, user agent).

2. How We Use It

Your data is used to provide the Service to you: storing your applications, building and tailoring your resumes, running the analyses and interviews you request, sending sign-in and service email (plus job-match digest emails, which carry an unsubscribe link you can use at any time), and billing if you subscribe. We do not sell your data, do not share it with advertisers, and do not use your content to train AI models.

3. Voice Interview Practice

When you start a practice interview, your microphone audio is streamed to our AI provider and transcribed in real time. The raw audio is not retained after transcription, no voiceprint or biometric identifier is created, and your voice is never used to identify you. The text transcript and your interview scores are saved to your account so you can review them, and they follow the retention and deletion rules in Section 9.

4. AI Processing

Resume generation and scoring, cover letters, job matching, and interview practice run on Cloudflare Workers AI. The content needed for each feature (for example, your resume text and a job description) is sent to the model when you use that feature. Cloudflare’s terms state that customer content is not used to train its AI models, and we do not use your content to train models either. AI output is generated automatically and can be inaccurate — it is assistance, not a decision about you.

5. Automated Job Matching

Job matches are selected by an automated system based mainly on your profile and skills, your work history, your stated preferences, and job location. No employer sees your profile through matching. Everything matching uses is yours to edit in the app — update your profile, skills, work history, or preferences and your matches follow. You can also ask us to explain the main factors behind a match, or ask for a human review of any match result — a person with authority to change the outcome will respond. Contact privacy@cancareer.com.

6. Organization Programs and Pilots

If you use CanCareer through a partner organization (including a pilot program), that organization runs its program and CanCareer processes your participation data on its behalf under a written agreement. Program staff can see your roster record, application progress, resumes they coach you on, and scorecard data. Demographic information is always optional, collected only with your express opt-in, and used only for your program’s aggregate outcomes reporting to its funder — reports contain no per-person demographic data, and small groups are suppressed so individuals cannot be identified. Where your organization directs it, program outcome data is sent to systems the organization designates (for example, its Salesforce). You can withdraw consent or request deletion at any time (Sections 9–10).

7. Service Providers

• Cloudflare — hosting, database, file storage, and AI processing.
• Stripe — subscription payments. Stripe handles your card details under its own terms.
• GitHub — OAuth provider if you choose “Continue with GitHub.”
• Email delivery — delivers sign-in links and service email.

Each provider receives only the minimum needed for its role, under contracts requiring protection comparable to this policy.

8. Analytics & Event Data

We record a small number of first-party product events in our own database — no third-party analytics or advertising trackers. Event rows may contain an event name, a non-identifying label, an anonymous browser ID, the page path, and request metadata (IP, user agent) used for abuse protection. Signed-in actions are associated with your account so we can measure the product accurately. Event rows are kept for 12 months, then purged. Our only cookie is the session cookie that keeps you signed in.

9. Retention and Deletion

You can request deletion of your account and associated data at any time by emailing privacy@cancareer.com. We process deletion requests within 30 days, with these exceptions required or permitted by law: information used to make a decision that directly affects you is kept for at least one year after that use (a British Columbia legal requirement, so you can request access to it); records of security incidents are kept for 24 months; and billing and tax records are kept as tax law requires. Backups are purged on our infrastructure provider’s standard rolling schedule.

10. Your Rights: Access, Correction, Complaints

Most of your information is already in your hands: you can view and edit your profile, master resume, applications, and preferences directly in the app, and download the documents you generate. For anything the app does not cover — a copy of everything we hold about you, a correction, or withdrawing a consent (withdrawing may limit what the Service can do for you) — email privacy@cancareer.com, free of charge. We respond within 30 days; where the law allows, we may extend once by up to 30 more days and will tell you in writing why. If you are not satisfied, you can complain to us first, and then to the Office of the Information and Privacy Commissioner for British Columbia (OIPC) or the Office of the Privacy Commissioner of Canada. Residents of Quebec and other provinces may also contact their provincial regulator.

11. Where Your Data Goes

Your data is stored in our infrastructure provider’s North American region, and requests are processed at the provider location closest to you — for users in Canada, that normally means Canada or the United States. Because our providers are United States companies, your information may be subject to United States law and accessible to its courts, law enforcement, and national security authorities. We use contracts to require protection comparable to Canadian law.

12. If Something Goes Wrong

If a breach of our safeguards creates a real risk of significant harm to you, we will notify you and the appropriate privacy regulator as soon as feasible, and tell you what happened and what we are doing about it.

13. Security

Traffic is encrypted in transit (TLS) and data is encrypted at rest. Access is role-based: organization data is isolated per organization, and program staff see only their caseload. Contact information in sourced job postings is redacted at ingest, secrets live in a managed store, and our database supports point-in-time recovery for 30 days.

14. Children

CanCareer is not directed to minors. Accounts require the capacity to enter a contract; partner organizations are responsible for the eligibility rules of their own programs.

15. Changes

We may update this policy. The “Last updated” date reflects the most recent revision, and material changes will be summarized at the top of this page.

16. Contact

Privacy questions or requests: email our Privacy Officer at privacy@cancareer.com or write to 1566673 B.C. Ltd. (CanCareer), 5307 Victoria Drive #1366, Vancouver, BC V5P 3V6.