This Privacy Policy explains how Polynomial OÜ, a private limited company registered in Estonia (registry code 14630064), operating the CareerPlan brand at careerplan.io ("CareerPlan", "we", "us"), collects and processes your personal data. We are the data controller under the EU General Data Protection Regulation (GDPR). For any privacy question or to exercise your rights, contact [email protected].
We're a European company: we have to, and want to, comply with the GDPR — for every user, wherever they live.
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Provide the service: match jobs to your CV, score and rank them, track applications | Performance of a contract |
| Auto-apply on your behalf (only roles you approve) | Consent / contract |
| Notifications via email or Telegram | Consent / legitimate interest |
| Security, fraud prevention, service improvement | Legitimate interest |
| Billing and tax | Legal obligation / contract |
Matching, scoring, and document generation are performed on our own infrastructure. Your CV and profile are not sent to third-party AI providers (e.g. OpenAI, Google) for these features. This keeps your data within our control.
We share personal data only as needed to run the service:
We do not sell your personal data.
We are based in the EU (Estonia), and your data is stored and processed in the EU — our servers are in Germany and our AI models run in the Netherlands. Where a sub-processor processes data outside the EEA (for example Cloudflare's global network or Paddle), we rely on adequacy decisions or Standard Contractual Clauses.
We keep your account and CV data while your account is active. You can delete a CV, or your whole account, yourself at any time from your Profile page (“Your data”): deleting the account immediately removes your profile, CVs (including the files), saved answers, applications, tracker and connected site accounts from our systems, and anonymises usage statistics. Accounts with no activity for 6 months are deleted automatically; we email you two weeks before, and signing in keeps the account. Applications you have already sent stay with the employers you sent them to, under their own policies. Payment records are kept by our payment provider Paddle as required by law.
Under the GDPR you have the right to access, rectify, erase, restrict, port, and object to processing of your personal data, and to withdraw consent at any time. You can download all the data we hold about you, and delete your account, yourself from your Profile page; for any other request, email [email protected]. You also have the right to lodge a complaint with your supervisory authority — in Estonia, the Data Protection Inspectorate (Andmekaitse Inspektsioon).
We use technical and organisational measures (encryption in transit, access controls, encrypted storage of sensitive credentials) to protect your data. No system is perfectly secure; please use a strong, unique password.
We use only cookies/local storage that are strictly necessary for sign-in and core functionality. We do not use advertising trackers.
CareerPlan is for users aged 18 and over. We do not knowingly collect data from children.
We may update this policy; the "Last updated" date will change and, for material changes, we will notify you.
Polynomial OÜ (registry code 14630064) · Estonia · operating the CareerPlan brand · [email protected]