Privacy Policy

1. Who We Are

AI Career Copilot is a product of UNYFO, INC. ("we", "us", "our"), a Delaware corporation. Contact us at privacy@unyfo.com for any privacy-related questions.

Mailing address: UNYFO, INC., 8 The Green, Suite A, Dover, DE 19901, USA

2. Information We Collect

• Account data: your email address when you sign up.
• Profile data: name, phone, location, skills, certifications, awards, and links you enter or import from a resume.
• Resume content: text you paste or upload. We send this to OpenAI to generate responses; we do not sell or share it otherwise.
• Usage data: pages visited, features used, and AI action counts — used to enforce plan limits and improve the service.
• Payment data: handled entirely by Stripe. We store only a Stripe customer ID and subscription status — no card details touch our servers.
• Cookies & local storage: session cookies required for authentication, and preference keys in local storage (cookie consent choice, API key for BYOK subscribers).

3. Cookies We Use

We do not use advertising or third-party analytics cookies. Declining cookies in our banner disables non-essential cookies; essential auth cookies remain active.

4. How We Use Your Information

• To create and manage your account.
• To generate AI-tailored career materials on your behalf.
• To enforce usage limits based on your subscription plan.
• To process payments and manage your subscription via Stripe.
• To send transactional emails (e.g., email verification, billing receipts).
• To improve the service and fix bugs.

We do not sell your personal data. We do not use your resume content to train AI models.

5. Third-Party Services

• OpenAI: resume text and job descriptions are sent to OpenAI's API. OpenAI does not use API inputs to train models by default. See OpenAI Privacy Policy.
• Supabase: account and profile data stored in AWS us-east-1.
• Stripe: payment processing. See Stripe Privacy Policy.
• Vercel: hosting. Request logs (including IP addresses) retained up to 30 days.
• Tolt: affiliate referral tracking. Only a referral code is shared — no personal data.

6. Data Retention

We retain your account and profile data while your account is active. You may request deletion at any time — we will delete your data within 30 days, except where retention is required by law (e.g., billing records for 7 years under US tax law).

7. Your Rights (GDPR / UK GDPR)

If you are in the EEA or UK, you have the right to:

• Access — request a copy of your personal data.
• Rectification — correct inaccurate data.
• Erasure — request deletion ("right to be forgotten").
• Portability — receive your data in a machine-readable format.
• Restriction — request we limit processing of your data.
• Object — object to processing based on legitimate interests.

To exercise any right, email privacy@unyfo.com. We will respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority.

8. California Privacy Rights (CCPA / CPRA)

California residents have the right to:

• Know what personal information we collect and how it is used.
• Delete personal information we hold about you.
• Opt out of the sale or sharing of personal information.
• Non-discrimination for exercising your rights.

We do not sell or share your personal information with third parties for their own marketing purposes. We have no financial incentive program tied to your data.

To submit a CCPA request, email privacy@unyfo.com with the subject line "CCPA Request".

9. Data Export

To request an export of all personal data we hold about you, email privacy@unyfo.com with the subject "Data Export Request". We will send a JSON or CSV file within 30 days.

10. Security

We use TLS in transit, row-level security in our database, and scoped API keys. In the event of a data breach affecting your rights, we will notify you within 72 hours as required by GDPR. No system is 100% secure — use a strong, unique password.

11. DMCA / Copyright

If you believe content on our platform infringes your copyright, send a written notice to privacy@unyfo.com with: (1) identification of the copyrighted work, (2) identification of the infringing material and its location, (3) your contact information, (4) a good faith belief statement, and (5) a statement of accuracy under penalty of perjury.

12. Children

AI Career Copilot is not directed at children under 13. We do not knowingly collect data from anyone under 13.

13. Changes to This Policy

Material changes will be communicated via email or an in-app notice at least 14 days before they take effect. Continued use after that constitutes acceptance.

14. Contact

UNYFO, INC.
8 The Green, Suite A, Dover, DE 19901, USA
privacy@unyfo.com