GDPR / CCPA Privacy Rights

1. Your GDPR Rights

• Access: request a copy of the personal data we hold about you.
• Rectification: correct inaccurate data, directly in the app or by request.
• Erasure: request deletion of your data (“right to be forgotten”).
• Portability: receive your data in a structured, machine-readable format.
• Objection & restriction: object to certain processing or ask us to restrict it.
• Withdraw consent: withdraw consent for AI processing at any time.

2. Lawful Bases for Processing

• Contract: processing needed to provide the service you subscribed to (storing resumes, tracking applications).
• Consent: sending your content to AI providers for generation features.
• Legitimate interests: security, fraud prevention, and aggregate product analytics.
• Legal obligation: retaining records required by law.

3. Your CCPA Rights

• Know: request disclosure of the categories of personal information collected and how they are used.
• Delete: request deletion of your personal information.
• Opt out of sale: we do not sell personal information — no opt-out is needed.
• Non-discrimination: exercising your rights will never affect the price or quality of your service.

4. Exercising Your Rights

You can view, edit, and delete most of your data directly in the app. For anything else, email legal@careerguard.app from the address on your account. We respond to verified requests within 30 days (GDPR) or 45 days (CCPA). We may ask for information to verify your identity before acting on a request.

5. International Transfers

Your data may be processed in the United States and other countries where our service providers operate. Where required, transfers are protected by standard contractual clauses or equivalent safeguards.