Privacy Policy

Effective date: October 3, 2026 (previous versions: August 19, 2026 and July 3, 2026). What changed on 3 October: the CareerLift Android app, purchases inside it, reporting a result, deleting your data yourself, and the follow-up emails after an emailed review, which this policy did not mention before. See Cookies and Analytics for what changed on 19 August and why.

Who We Are

CareerLift (“we”, “us”) operates careerlift.agency and provides AI-powered resume analysis reports. For any question or request about this policy or your data, email support@careerlift.agency.

Information We Collect

  • Contact details: your name and email address, provided when you order a report.
  • Resume content: the resume text you submit for analysis.
  • Job description content: the job description text or job posting URL you optionally provide.
  • Payment confirmation: your Gumroad order number and payment status. Payments are processed entirely by Gumroad — we never receive or store your card or bank details.
  • Purchases in the Android app: when you buy inside the CareerLift Android app, Google Play processes the payment. We receive Google’s order number, the product, the time and the country of the purchase, never your card details, your name or your Google account.
  • Reports about a result: if you report a result, the reason you chose, any note you added, the text of the result, and your email address only if you give it.
  • Technical data: your IP address and basic server logs, used for security and abuse prevention.
  • Website analytics: we run Google Analytics 4 (measurement ID G-112TLTVZN8) on the public pages of this site. That includes the free job-match check page, which is the page where you paste your resume. It records page views and the pages you move between, the site you arrived from, an approximate location derived from your IP address, and your device and browser type. It also records five events we defined ourselves: that a check finished, that a paid rewrite was unlocked, that a lead form was completed, that you created a share link, and that you clicked through to our Gumroad checkout. The resume text and the job description you paste are never sent to Google Analytics — those events carry only the name of the thing that happened and, for a checkout click, which product it was.
  • Where you came from: a cookie we set ourselves, named cl_attr, records on your first visit the campaign tags in the link you clicked (utm_source, utm_medium, utm_campaign) or, if there are none, the hostname of the site that referred you, plus the path of the page you landed on. It lasts 30 days. We use it to know which channels bring people who go on to run a check.

How We Use Your Information

  • To generate your resume analysis report.
  • To email your report to you (sent from support@careerlift.agency).
  • To verify your payment and process refunds.
  • To respond to your support requests.
  • To prevent fraud and abuse of the service.

We send transactional email — report delivery, payment or refund confirmations, and replies to your messages. If you request the emailed resume review, we may also send up to two follow-up emails in the week after it, with resume tips and a description of our paid products. Each has a one-click unsubscribe link, and unsubscribing or deleting your data stops them. We do not sell or share email addresses.

AI Processing (Automated Analysis)

The resume text and any job description you provide are sent to Anthropic’s Claude API, the artificial-intelligence service that produces your analysis. Under Anthropic’s commercial API terms, data submitted through the API is not used to train Anthropic’s models. Your report is produced by automated processing; no human reads your resume as part of the standard service.

Storage and Retention

The free job-match check is a separate path from a paid order and stores less. Its result is kept for up to 30 days so that re-running the identical check returns the identical answer without using up one of your free checks. That stored copy is encrypted with a key derived from the resume and job description you pasted, which has two consequences worth stating plainly: the resume text itself is not kept, and the stored report cannot be read back by us or by anyone else without the original resume and job description being pasted in again. Alongside it we keep a run log holding the date, how long the run took, how many characters went in and out, and a one-way hash of your IP address used for the three-a-day free limit — no resume text and no email address.

Order records for paid reports are stored in this website’s database on our hosting provider’s servers. Resume and job-description text is normally removed from the order record once your report has been generated and delivered; if a report fails to generate, the submitted text is kept temporarily so delivery can be retried, and is removed on request. Your name, email address, generated report, and Gumroad order reference are retained so we can re-send your report, provide support, and honor refunds.

Messages sent through our contact form, and refund requests, are stored in this website’s database for 90 days and then deleted. They hold your name, email address and message, and for a refund request the product, your Gumroad order number if you gave one, and the first 8 characters of your licence key. When you send one, we email you a single automatic confirmation; we do not add you to any mailing list.

Deleting Your Data

You can delete your data yourself, at any time, on our Delete my data page, from the website or inside the Android app. Nobody has to read a request first:

  • By licence key: paste the key you used for the full rewrite, and every rewrite stored under it is deleted at once, with the purchase email recorded with it.
  • By email address: we email a confirmation link to the address; when you open it and press Delete, we delete your emailed reviews and their reports, your messages, refund requests and result reports, our record of emails we sent you, any rewrites whose purchase email is that address (within the hour), and the address on our mailing list.
  • On your device: one button clears the resume, posting, result and key that the tool saved in your browser or app.

What stays: a one-way hash of a deleted licence key with the number of rewrites it used (so its limit still applies); a one-way do-not-email record for a deleted address; for a purchase in the Android app, Google’s order number and a one-way hash of the key, so refunds and Google’s refund notices still work; and Gumroad’s and Google Play’s own records of a purchase, which they keep under their own policies. You can also email support@careerlift.agency from the address you used.

The CareerLift Android app

The CareerLift app on Google Play (package agency.careerlift.app) opens this website inside Chrome as a Trusted Web Activity, so everything in this policy applies to it in the same way: the same pages, the same tool, the same storage and the same analytics. The app itself reads nothing from your phone: no contacts, no location, no photos, no files other than a resume file you choose to upload. Android lists a notification permission for apps of this kind; CareerLift never sends notifications.

Inside the app, a purchase is made through Google Play billing. Google charges you and keeps its own record of the order; we keep Google’s order number, the product, the time, the country and a one-way hash of the licence key the purchase created, so that the key works, can be recovered from the order number, and stops working if Google refunds the order.

Reporting a Result

Every result on careerlift.agency and in the app has a Report this result control, and any result can also be reported on our Report a result page. A report holds the reason you chose, any note you added, the text of the result you reported, and your email address only if you give one for a reply. We use reports to review results and to decide which rules we add to the checks that filter what the tool writes, and we keep them for 90 days.

Sharing of Personal Data

We do not sell personal data, and we do not share it for advertising. Your data is shared only with the service providers needed to run CareerLift:

  • Anthropic — AI analysis of the resume and job-description text you submit.
  • Gumroad — payment processing for purchases on the website.
  • Google Play — payment processing for purchases inside the Android app.
  • Google — website analytics, as described above. Google receives your IP address and the page-view and event data listed under “Website analytics”. It does not receive your resume, your job description, or your report.
  • Our web hosting provider — database, website, and email infrastructure.

We may disclose information if required to do so by law or a valid legal process.

Cookies and Analytics

This site sets three kinds of cookie, and they are set on every public page including the job-match check page where you paste your resume:

  • Functional — security and page caching.
  • Google Analytics — _ga and _ga_112TLTVZN8, set by Google’s gtag.js script, which distinguish a returning browser from a new one.
  • Ours — cl_attr, 30 days, recording where you first arrived from, as described above.

We do not run advertising or retargeting cookies, we do not run advertising pixels, and we do not sell or share your data for advertising. We do not currently show a cookie consent banner, so the analytics cookies above are set when the page loads.

What changed on 19 August 2026, and why. Until this date this section read: “This site uses only minimal, functional cookies (for security and page caching). We do not use advertising cookies or cross-site tracking.” Google Analytics was live on this site at the time, including on the resume-paste page, so the first sentence was wrong and the second was only half right — we run no advertising cookies, but Google Analytics is a third-party script from Google and describing this site as free of third-party tracking was not accurate. An internal review found it, and this is the correction. We have not removed the analytics; we have written down what it actually does. If you would rather not be measured, a browser-level tracker blocker or a Do Not Track / Global Privacy Control setting will stop it, and nothing on this site is withheld from you if you block it.

Your Rights

You may request a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it. You can delete it yourself on the Delete my data page; for anything else, send the request to support@careerlift.agency.

Changes to This Policy

If we change this policy, we will post the updated version on this page with a new effective date.

Contact

Questions, data requests, or complaints: support@careerlift.agency