1. Scope
This Notice explains how CandidNorth collects, uses, discloses, retains, and protects personal information through candidnorth.com, app.candidnorth.com, and the CandidNorth service. The service is operated from Arizona, United States, and is currently intended for adults in the United States.
2. Information we collect
- Marketing and beta information: name, email address, reason for requesting beta access, and any optional note you submit.
- Account information: email address, authentication records, account status, support communications, and legal-consent records.
- Career content: resumes, contact lines you choose for documents, work history, education, skills, achievements, career preferences, interview answers, approved and restricted claims, and revision feedback.
- Optional voice input: when you use a microphone button, your browser or operating-system speech service may process audio under that provider's terms. CandidNorth receives the resulting text entered into the field and does not intentionally receive or store the audio recording.
- Job-search information: job descriptions, role interests, match analyses, application status, generated documents, review decisions, and interview-preparation material.
- Technical and safety data: request metadata, device and browser information made available by standard web requests, usage events, token and cost estimates, security events, abuse categories, and limited redacted excerpts needed for review. A submitted problem report may include bounded workflow state and a privacy-filtered image of the visible workspace that conceals visible text, field contents, and media before upload.
- Payment information: customer, plan, subscription, transaction, tax, and payment-status information provided by Paddle. CandidNorth does not receive or store your full payment-card number.
3. How we use information
We use personal information to review beta requests; authenticate and administer accounts; store private career records; recommend career directions; analyze resumes and jobs; create and review documents; prepare for interviews; process and administer memberships; provide support; prevent fraud and misuse; enforce limits; monitor reliability and cost; comply with law; and improve the service using deidentified or aggregated learning where practical.
We do not make employment decisions and do not automatically apply to jobs. You decide what facts to approve, what documents to use, and where to apply.
4. AI and human review
When you request an AI-assisted workflow, CandidNorth sends the relevant submitted content and instructions to OpenAI through its business API. OpenAI states that API data is not used to train its models unless the customer opts in, but default abuse-monitoring logs may retain content for a limited period. Provider practices can change; consult OpenAI's published API data controls for current details.
Authorized CandidNorth reviewers may access career records and draft documents when needed for requested human review, support, safety, or quality control. Access is limited to a legitimate need and should be handled under confidentiality obligations.
5. Service providers and disclosures
We disclose information only as reasonably needed to operate the service, including to:
- Supabase for database, authentication, and private file storage;
- Vercel for hosting, network delivery, logging, and firewall protection;
- OpenAI for requested AI-assisted analysis and drafting;
- Resend and Google Workspace for transactional email, support, and operational mail;
- Paddle, as authorized reseller and Merchant of Record, for checkout, subscription administration, taxes, receipts, fraud prevention, cancellations, and refunds;
- your browser or operating-system speech provider when you choose optional voice input; and
- professional advisers, authorities, or transaction counterparties when reasonably necessary for legal compliance, security, claims, or a business reorganization.
We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We do not allow third parties to collect personal information through the service for their own targeted advertising.
6. Retention and deletion
We retain account and career content while your account is active and for as long as reasonably necessary to provide the service, resolve disputes, maintain security and audit records, and meet legal obligations. Legal-consent, transaction, and security records may be retained after account content is deleted when reasonably necessary to demonstrate compliance or prevent abuse.
You may request access, correction, export, or deletion by emailing support@candidnorth.com from your account email. After verifying the request, we will delete or deidentify eligible information from live systems. Residual copies may remain temporarily in protected backups until those backups expire under provider schedules. We may retain information when law or a legitimate security, fraud-prevention, or dispute need requires it.
7. Security
We use access controls, row-level database security, private storage, encrypted network connections, authenticated server routes, rate and cost limits, provider access restrictions, and review controls designed to protect customer data. No internet service can guarantee absolute security. Contact us promptly if you suspect unauthorized account access.
8. Cookies and similar technologies
CandidNorth uses essential browser storage and cookies for authentication, security, preferences, and reliable service operation. We do not currently use third-party advertising cookies or cross-site behavioral tracking.
9. Your choices and state rights
You can review and correct career claims in the service and can request access, correction, deletion, or an export by contacting us. Depending on where you live and whether a privacy law applies to CandidNorth, you may have additional rights and a right to appeal a denied request. We will not discriminate against you for exercising an applicable privacy right.
10. Children and international use
CandidNorth is not directed to anyone under 18, and we do not knowingly collect personal information from children. The service is not currently offered to individuals outside the United States. Contact us if you believe a child or an ineligible international user submitted information.
11. Changes and contact
We may update this Notice as the service and law change. We will post the new effective date and provide additional notice or request renewed acknowledgment when a change materially affects how existing customer information is used.
Privacy questions and requests: support@candidnorth.com.