Privacy Policy

1. Who we are

Concierge Career Services ("CCS", "we", "us") operates the Concierge Client Intake platform at intake.conciergecareerservices.com. We are the data controller for the personal information you provide.

2. What we collect

• Contact details: full name, email, phone, LinkedIn URL.
• Intake responses: target role, industry, salary expectation, desired outcome, current interest area.
• Resume: the PDF you upload, stored in private cloud storage; only signed, expiring URLs are issued.
• Account & auth: email-based one-time codes; we do not store your password.
• Purchase history: which assets you bought, when, and how much you paid (we never see card numbers — Stripe handles that).
• AI analysis output: the Professional DNA analysis generated from your resume.
• Support interactions: messages exchanged with our in-app assistant, stored server-side.
• Audit metadata: timestamps and the staff member who viewed your record, for security accountability. Personal identifiers are excluded from these logs.

3. Why we use it

• Deliver the career services you purchased.
• Generate your Professional DNA analysis and personalised recommendations.
• Process payments and provide refunds.
• Communicate about your account and services.
• Meet legal and tax obligations (financial records).
• Improve our services through aggregate, non-identifying analysis.

4. Third-party processors

We share the minimum data needed with these processors, each bound by their own privacy commitments:

• Supabase — database, authentication, file storage (EU/US regions).
• Vercel — application hosting and serverless functions.
• Stripe — payment processing. Stripe receives your name, email, and payment details directly; we never store card numbers.
• Resend — transactional email delivery.
• Google (Gemini) & Anthropic (Claude) — AI language models used to analyse your resume and power the in-app assistant. Prompts include your résumé content and intake responses for the duration of the request; the providers do not train on our API traffic.
• Cloudflare — bot protection (Turnstile) and tunnel for our AI service.

5. Retention

• Stale unconverted leads (registered but never paid, no submissions inside 180 days): deleted in full.
• Chat history: deleted after 365 days.
• Resumes for closed submissions: deleted 30 days after the submission is closed.
• Financial records (orders): retained for the period required by applicable tax law; subject identifiers are anonymised on account deletion.
• Audit logs: retained for security and compliance review; never contain direct identifiers in metadata.

6. Your rights

You may, at any time:

• Access your data — sign in, go to Privacy & Data, click "Download my data" to receive a JSON file containing everything we hold.
• Delete your account — same page, "Delete my account" with typed confirmation. Deletion is immediate and cascades across your records; financial records are retained per law with identifiers removed.
• Correct your data — email privacy@conciergecareerservices.com.
• Withdraw consent — deletion is the strongest form of withdrawal; you may also stop using the service at any time.

7. Security

Transport is HTTPS; database is access-controlled with row-level security; resumes are in a private bucket with short-lived signed URLs; staff PII access is audited; payment credentials are tokenised at Stripe and never reach our systems. We do not implement end-to-end encryption between you and our assistant — messages are protected by HTTPS in transit and access-controlled at rest.

8. Cookies & tracking

We use only the cookies strictly required to keep you signed in. We do not use third-party advertising trackers or analytics SDKs.

9. International transfers

Data may be processed in the United States and other jurisdictions where our providers operate. Where required, we rely on Standard Contractual Clauses or equivalent safeguards.

10. Children

The service is not directed to children under 16. We do not knowingly collect data from minors.

11. Changes

If we change this policy, we will publish the new version with a new effective date and require active consent on next sign-in.

12. Contact

Questions or complaints: privacy@conciergecareerservices.com.