Privacy Policy

Effective date: September 25, 2026

This policy explains what positioned.careers, operated by ACT Power, collects, why, and what your rights are. This policy is built to accurately describe what the product actually does, not generic boilerplate.

What we never collect

We never ask for, collect, or use, anywhere in your profile or any resume we generate; your age, photo, marital status, religion, race or ethnicity, national origin, disability or health status, Social Security number, criminal history, or salary history beyond one optional reference field you can decline to answer. This is a hard rule built into the product, not just a policy statement.

What we collect

Identifiers: WhatName, email, optional location; WhyAccount creation and login
Professional/employment information: WhatCareer story, uploaded resumes, extracted resume text, the structured profile built from them; WhyTo generate and tailor your resume
Preferences: WhatMinimum acceptable compensation, most recent salary (optional), target markets; WhyMinimum compensation is used only to flag whether a posting’s stated range meets it — never to filter, rank, or score your profile. Most recent salary is never used as a filter or shown anywhere.
Job-search content: WhatJob descriptions you paste or provide, and our analysis of them; WhyTo tailor your resume to that posting
Generated output: WhatYour generated resumes and the audit record of what was flagged and how it was resolved; WhyTo give you the resume and let you review what was checked
Commercial information: WhatPurchase and credit-pack history; WhyBilling and account history — we never receive or store your card number; Stripe handles that directly
Outcome data: WhatOptional, self-reported application/interview/offer status; WhyInternal product-improvement use only; never shown back to you as a feature

Category	What	Why
Identifiers	Name, email, optional location	Account creation and login
Professional/employment information	Career story, uploaded resumes, extracted resume text, the structured profile built from them	To generate and tailor your resume
Preferences	Minimum acceptable compensation, most recent salary (optional), target markets	Minimum compensation is used only to flag whether a posting’s stated range meets it — never to filter, rank, or score your profile. Most recent salary is never used as a filter or shown anywhere.
Job-search content	Job descriptions you paste or provide, and our analysis of them	To tailor your resume to that posting
Generated output	Your generated resumes and the audit record of what was flagged and how it was resolved	To give you the resume and let you review what was checked
Commercial information	Purchase and credit-pack history	Billing and account history — we never receive or store your card number; Stripe handles that directly
Outcome data	Optional, self-reported application/interview/offer status	Internal product-improvement use only; never shown back to you as a feature

Where this comes from

Directly from you (forms, uploads, your career story), and from Google if you sign in with Google OAuth (your name, from your Google account).

Who we share it with

We do not sell your personal information. We share it only with the service providers who help us run the product:

Supabase — hosting, database, authentication, and file storage
Anthropic (Claude API) — receives your career narrative, resume text, and job description text, server-side only, to generate and audit your resume. Per Anthropic’s commercial terms, your data is not used to train Anthropic’s models.
Stripe — payment processing (we never receive your card number)
Google — sign-in only, if you use Google OAuth
Plausible Analytics: privacy-friendly, cookie-free usage statistics (pages visited, sign-ups, product steps completed). It does not receive your name, email, resume content or job descriptions.

Security

Your data is protected by row-level security at the database level, in plain terms, your data is only accessible to you, not to other users, by design.

Retention

We retain your career content, uploaded files, and generated resumes for as long as your account is active. If you delete your account, this data is erased immediately and cannot be recovered, so download anything you want to keep first. While your account is active, self-reported outcome data (application, interview, and offer status) is retained in identifiable form for 12 months from collection, then anonymized rather than deleted. Purchase records are processed by Stripe and are subject to Stripe’s own retention practices.

Your rights

You can request access to, correction of, or deletion of your personal information, and you won’t be discriminated against for exercising these rights. To make a request, email support@positioned.careers. We aim to respond within 45 days.

General questions

For billing, account, or general questions (not a privacy rights request), email hello@positioned.careers.

Future use of aggregate data

If we ever publish anonymized, aggregate insights from usage patterns (for example, statistics about resume quality trends), we’ll do so only in a form that cannot identify you individually, and this policy will be updated first.

Children’s data

positioned.careers is not directed at, and we do not knowingly collect information from, anyone under 18.

Where this applies

positioned.careers currently operates for the US market. This policy is written for US privacy standards (CCPA/CPRA); we do not currently make representations about compliance with non-US privacy frameworks (e.g. GDPR).

Changes to this policy

We’ll update the effective date above whenever this policy changes materially.

Contact

Privacy rights requests: support@positioned.careers · General questions: hello@positioned.careers