Start free

Privacy policy

Effective October 24, 2026

CareerStudioIQ is operated by AppleSeedIQ (“we”, “us”). This policy explains what we collect when you use CareerStudioIQ, the CareerStudioIQ Capture browser extension and our programs console (together, the “service”), how we use it, who we share it with, and the choices you have. If you have questions, write to privacy@careerstudioiq.com.

The short version

  • You own your Record and everything you put in your studio. You can export it or delete it at any time.
  • We use your information to run the service. We don’t sell it, we don’t use it for advertising, and employers can’t pay to see or rank you.
  • AI features send the text needed for each task to our AI provider (OpenAI or Anthropic, directly or through Vercel’s AI Gateway), which doesn’t use it to train its models.
  • If you join a program, nothing is shared until you switch it on, and you can read a log of when its staff look.
  • Connected apps (Gmail, Outlook, Google Drive, OneDrive, Slack, Teams) are off until you connect them. We read only mail from companies you’re pursuing, and only the sender, subject and a short preview.

1. Information we collect

Information you give us

  • Account details: your name, email address and password (stored only as a secure hash), or the name, email address and profile image Google shares if you sign in with Google. With Google sign-in we also store the tokens Google issues, encrypted, and use them only to sign you in. If you turn on two-step verification, we store its secret and backup codes in protected form.
  • Your studio: your profile (headline, location, summary, preferences such as work mode and whether you hold a security clearance), campaign settings, Record items (roles, projects, wins, stories, skills, credentials, education), résumés you upload or paste, job postings you capture or paste, fit briefs, résumé versions, letters, notes, the contacts you add, interview practice answers and transcripts, offer details, and outcomes you record.
  • Information about other people: if you add contacts (for example, a recruiter’s name and email), you’re responsible for having the right to share it with us. We use it only to show it back to you.
  • Purchases: what you bought and when. Payments are handled by Stripe; we never receive or store your full card number. We keep the Stripe customer reference needed to manage your subscription.
  • Messages to us: anything you send to our support addresses.

Information collected automatically

  • Security and session data: the IP address and browser information attached to your sign-in sessions, and a security log of significant account actions (such as sign-ins, password and two-step verification changes, purchases, data exports and program actions).
  • Usage records: counts we need to apply plan limits, such as AI requests, fit briefs and voice practice minutes.
  • Cookies: we use only the cookies needed to keep you signed in and secure. We don’t use advertising or third-party analytics cookies.
  • Public page measurement: on our public pages we count visits and a few actions (such as running a Quick Scan) with Vercel Web Analytics, and measure page speed with Vercel Speed Insights. Neither uses cookies or tracks you across other sites.
  • Quick Scan: the posting and résumé text you paste into the Quick Scan on our home page are processed in your browser. They aren’t sent to us or stored.
  • Pilot requests: if you ask about a pilot for a program, the name, work email, organization and details you send. We use them only to reply to you, and keep them for up to two years.

Voice practice

When you practice by voice, your microphone audio is streamed in real time to OpenAI so the interviewer can listen and respond. We don’t record or store the audio. We store the written transcript of the session and the feedback on your answers so you can review them.

Dictation and spoken practice use your browser’s built-in speech features. Depending on your browser, its maker (for example Google for Chrome or Apple for Safari) may process the audio to turn it into text; we receive only the text. Questions read aloud use voices on your device.

Connected apps

You choose which apps to connect in Settings, Connected apps, and you can disconnect any of them there at any time. Each connection is used only for the features described here.

  • Gmail and Outlook: we send the messages you write and send from the studio, from your own address. To log replies, we look only for messages from the companies and contacts in your active pursuits, and we keep only the sender, recipient, subject, a short preview, the date and which pursuit it belongs to. We don’t read the rest of your mailbox, message bodies or attachments, and we never delete or change your mail.
  • Google Drive and OneDrive: we open a file only when you pick it to import, and we save the résumés and letters you choose to a CareerStudioIQ folder. With Google Drive, access is limited to files you pick or the studio creates. An imported file is handled like a résumé you upload: we keep the Record items you confirm, not a copy of the file.
  • Slack and Teams: we post messages to the channel or chat you choose: your daily moves, interview reminders and coach comment alerts, or, for programs, counts and links with no participant names or content. Your own messages include move titles, company names and interview times, and Slack and Microsoft handle them under their own terms. When a program’s daily summary counts what you share with it, that’s recorded in your access log. We don’t read messages in your workspace.
  • Tokens: the access tokens these services issue are encrypted on our servers and never sent to your browser, except a short-lived Google Drive token that the Google file picker needs while it’s open. Disconnecting revokes Google and Slack tokens; you can also remove access from your Google, Microsoft or Slack account settings.
  • No AI, ads or sale: information from your mailbox and drives isn’t sent to AI providers, used for advertising, sold, or read by people at CareerStudioIQ, except with your permission, for security, or as the law requires.

CareerStudioIQ’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

The browser extension

The extension reads the page you’re viewing only when you open it, and sends the posting to your account only when you click to send it. It stores your studio address and capture token on your device.

2. How we use information

  • To provide the service: build and show your Record, fit briefs, résumé versions, letters, practice feedback, moves and insights.
  • To run AI features: for each task, we send our AI provider what that task needs, such as the relevant parts of your Record and profile, the posting, your request and, where the task calls for it, your name, a contact’s name or offer figures. We check the result against your Record before showing it.
  • To apply plan limits, process purchases and manage subscriptions.
  • To keep the service secure: prevent abuse, protect accounts, investigate problems and enforce our terms.
  • To send service emails, such as email confirmation, password resets, receipts and program invitations. We don’t send marketing email without your permission.
  • To comply with law and respond to lawful requests.

We don’t use your Record or documents to train AI models, and we don’t estimate your chance of being hired.

3. How we share information

  • Service providers that process information for us under contract, only to provide the service: hosting and infrastructure (Vercel and our database host, Neon), AI processing (OpenAI or Anthropic, directly or through Vercel’s AI Gateway), payments (Stripe), email delivery (Resend), sign-in (Google, if you choose it), and the apps you connect (Google, Microsoft, Slack), which receive only what each feature needs. Text tasks go to one of these AI providers; with OpenAI, response storage is turned off. Voice practice is processed by OpenAI in real time, with a pseudonymous identifier instead of your name or email to help prevent abuse. Under their API data policies, these AI providers don’t use this data to train their models and may keep it for a limited period to monitor for abuse.
  • Programs you join. A workforce program, school or employer you join sees your name and email and only what you switch on: progress (the roles and companies you’re pursuing, their stage, and counts of applications and completed moves), documents, practice rehearsals, and outcomes. Everything starts switched off. Your private notes are never shared. Staff views are recorded in an access log you can read in Settings: every time they open something you share, and once a day when your shared progress or work appears in their lists. A program uses what you share under its own policies.
  • Employer introductions. A program can propose introducing you to one of its employer partners. Nothing is sent unless you approve that introduction.
  • Legal reasons: when required by law, legal process or to protect the rights, safety and property of our users, the public or us.
  • Business changes: if AppleSeedIQ is involved in a merger, acquisition or sale of assets, information may transfer as part of that deal, and this policy will continue to apply to it.

We don’t sell personal information, and we don’t share it for cross-context behavioral advertising.

4. How long we keep information

  • Your account and studio content: for as long as your account is open. When you delete your account, your profile, Record, pursuits, documents, rehearsals, contacts, sharing settings and usage records are removed from our live database right away. Copies in our database host's encrypted backups are overwritten as those backups roll over.
  • Security and audit logs: 2 years, then deleted automatically. These are kept for that period even after an account is deleted, so we can investigate abuse and meet security obligations.
  • Program access logs: 2 years, or until the account is deleted, whichever comes first.
  • Usage records used for plan limits: about 25 months, then deleted automatically.
  • Expired sign-in sessions: 30 days after they expire. Email confirmation and reset links: 7 days after they expire.
  • Program invitations: 1 year after they're accepted, or 30 days after they expire unused.
  • Connected apps: tokens are deleted the moment you disconnect or delete your account. Mail details logged to a pursuit stay with that pursuit until you remove them, delete the pursuit or delete your account.
  • Payment records: Stripe keeps transaction records as required for tax and accounting. We keep only the references needed to manage your purchases while your account is open.

5. Your choices and rights

  • Access and portability: download everything in your studio as a file from Settings → Data, including program sharing, coach comments, the program access log, usage records and your security log.
  • Correction: edit your profile and Record at any time.
  • Deletion: delete your account from Settings → Data. Active subscriptions are cancelled as part of deletion.
  • Program sharing: change what each program sees, or leave a program, from Settings → Programs and sharing.
  • Capture tokens: revoke them from Settings → Data.

Depending on where you live, you may have additional rights, such as the right to know what we hold about you, to request deletion or correction, to opt out of sale or targeted advertising (we do neither), and to appeal a decision about your request. Residents of the European Economic Area and the United Kingdom may also object to or restrict certain processing and complain to their data protection authority. To exercise any right, use the tools above or write to privacy@careerstudioiq.com. We’ll verify the request comes from the account holder and respond within the time the law requires. We won’t treat you differently for exercising your rights.

6. Legal bases (EEA and UK users)

We process your information to perform our contract with you (running your studio), for our legitimate interests in keeping the service secure and improving it, to comply with legal obligations, and with your consent where we ask for it (such as sharing with a program). You can withdraw consent at any time.

7. Security

We protect information with encryption in transit, hashed passwords, optional two-step verification, strict access controls scoped to each account, security headers, rate limits, and audit and access logs. No system is perfectly secure; if we learn of a breach that affects you, we’ll notify you as the law requires. Read more on our Trust page.

8. Where information is processed

We operate in the United States, and our providers may process information in the United States and other countries. Where the law requires, we use appropriate safeguards for international transfers.

9. Children

The service is not for children under 16, and we don’t knowingly collect their information. If you believe a child under 16 has given us information, contact us and we’ll delete it.

10. Changes to this policy

If we make material changes, we’ll tell you by email or in the service before they take effect. The date at the top shows when this policy last changed.

11. Contact

AppleSeedIQ, College Park, Georgia, United States. privacy@careerstudioiq.com