Security

Last updated: October 6, 2026

This page says what we do to keep your data safe. It sticks to facts we can stand behind.

In transit

Everything your browser sends to Career-Manager, and everything Career-Manager sends to the services it uses, travels over an encrypted HTTPS connection.

Where your data is stored

Your account data lives in the app's own hosted database. Call recordings, transcripts and job documents are stored privately rather than on a public link, and they are opened through short lived links that expire. Resumes, cover letters, offer letters and profile photos are still stored at public links today, so anyone who has the link can open them. We are moving those to private storage too.

Who can open your data

  • Your records belong to your account, and the app shows you only your own. The database level access rules that enforce that are being added table by table, so until that work is finished the separation is done by the app rather than by the database.
  • Call recordings and transcripts are restricted to the account they belong to.
  • The person who operates Career-Manager has administrative access to the app, which is needed to run it and to help you when something goes wrong.
  • We do not sell access to your data, and we do not share it outside the providers listed in the privacy policy.

Google access

A Google account is connected through Google's own consent screen. You never share a password with us. We ask for read only access, so Career-Manager cannot send, delete or change anything in your Gmail or your calendar.

Turning access off

You can disconnect Gmail and Calendar detection in Settings, and you can remove Career-Manager's access from your Google account at myaccount.google.com/permissions. Deleting your account in Settings does the whole job in one run: it cancels the subscription, revokes our Google access, stops any booked notetaker and deletes the recordings held by the recording provider, and deletes every record you own across every table. The screen you land on lists what was removed. Stripe keeps the payment records tax rules require, and the stored contents of an uploaded file are deleted by hand, so write to support@career-manager.com if you want that confirmed.

Reporting a problem

If you think you have found a security problem, write to support@career-manager.com and tell us what you found. Please do not test anything against another person's account or data.