CareerFlow Privacy Policy
CareerFlow ("the Service") is an open-source job-search tracker. This policy explains what personal data we collect, why we collect it, where it is stored, and how to delete it.
Who we are
CareerFlow is maintained by Joun Mikhail and the open-source contributors on GitHub. For privacy questions or data-deletion requests, contact gptmath55@gmail.com.
Data we store
When you create an account, the Service stores:
| Data | Source | Purpose |
|---|---|---|
| Email address | Signup | Account login |
| Password hash (bcrypt) | Your password | Authentication |
| Full name (optional) | Settings | Personalising the UI |
| Job-search records | You enter them | Applications, interviews, tasks, notes, offers |
| File attachments | You upload them | Resume and document storage |
| Session tokens | Server | Maintaining login |
| Audit log entries | Server | Security monitoring |
We do not collect device identifiers, advertising IDs, contacts, microphone or camera input, location data, or third-party analytics beyond Sentry (optional, error reporting only when enabled by the operator).
Where data lives
- Database — PostgreSQL on the operator's infrastructure.
- Attachments — server disk under the configured upload directory.
- Tokens — device localStorage (web) or platform key/value store (mobile).
We do not sell or share your data with advertisers or brokers.
How long we keep data
Account data is retained while the account exists. Audit logs are kept for 90 days in the reference deployment. Delete your account from Settings or email gptmath55@gmail.com.
Children
CareerFlow is intended for users aged 16 and over.
Security
Passwords are hashed with bcrypt. API traffic uses HTTPS. Auth endpoints are rate-limited. Report vulnerabilities via our Security Policy.
Your rights (GDPR / UK GDPR)
You may access, correct, delete, or restrict processing of your data, and lodge a complaint with your supervisory authority. Contact gptmath55@gmail.com.