Privacy Policy

01. Who we are

CareerHeap is a Canada-first career-planning service operated from Ontario, Canada. This policy applies to our website, the Career Switch Planner, and related tools (the “Service”).

02. Information we collect

• Account details — your name and email when you create an account (authentication is handled by our infrastructure provider, Supabase).
• Planner inputs — the situation, skills, education, location, timeline, and goals you enter to generate a plan.
• Browser-saved plans — when you choose Save Plan, the plan and its draft inputs are stored in that browser’s local storage so you can reopen it. Saving that browser copy does not by itself upload it.
• Résumé content — if you choose to upload a résumé, we process it to extract structured skills, certifications, and experience. We do not retain the uploaded file or full raw text as permanent profile data. For signed-in paid users, the structured extraction may be saved so it can populate planner inputs.
• Contact messages — when you use the contact form, we collect your name, email, selected topic, message, language, and consent record so we can assess and respond to the request.
• Partnership proposals — if you submit a business proposal, we collect your name, work email, company, product or service URL, proposed relationship, optional budget range, proposal details, and consent record.
• Usage data — pages visited and tools used, to improve the product (privacy-respecting analytics).
• Billing details — if you upgrade, payment is processed by Stripe. We never see or store full card numbers.

03. How we use your information

• To generate your plan — matching your inputs against occupation and wage datasets to build roadmaps, skill gaps, and recommendations.
• To save plans in your browser and, for supported signed-in paid features, sync plan progress across devices.
• To improve matching — using only aggregated, de-identified signals (for example, which starter steps people complete first). We never replay one person’s plan into another’s.
• To assess, route, and respond to support, account, billing, privacy, and general contact requests.
• To assess and respond to partnership proposals, including reader fit, evidence, availability, and disclosure requirements.
• To process payments, provide support, and send essential service messages.

04. The datasets behind your plan

Your recommendations are built on public and licensed reference data, including O*NET (occupations and skills), Job Bank and ESDC (Canadian wages and employment outlook), and Skilled Trades Ontario (trade requirements). Where a number is an estimate rather than a sourced figure, we label it as such inside your plan.

05. How we share information

We do not sell your personal information. We share data only with service providers who help us run CareerHeap, under contract and only as needed:

• Supabase — authentication and database hosting.
• Stripe — payment processing for paid plans.
• Email delivery provider — when configured, to notify our private inbox about a contact request and help route a response.
• Privacy-respecting analytics — aggregate usage measurement.
• Legal — if required by law or to protect rights and safety.

06. Data retention and your controls

We keep personal information only as long as needed for the purposes described above, subject to legal and operational retention requirements. Current controls include:

• Choose manual entry instead of uploading a résumé.
• Export a generated plan from the planner dashboard.
• Remove a saved browser copy from the planner’s restore card, or clear CareerHeap site data in your browser.
• Contact messages receive a retention review after 12 months. We may delete them sooner when they are no longer needed, or retain them longer when an active support, business, or legal requirement applies.
• Partnership proposals receive a retention review after 12 months. We may delete them sooner when they are no longer needed, or retain them longer when an active business or legal requirement applies.
• Use the Privacy topic on our contact page to ask what personal information we hold, request access or correction, or request deletion where applicable.

07. Security

We use encryption in transit, access controls, and reputable infrastructure providers. No system is perfectly secure, but we work to protect your information and to limit what we collect in the first place.

08. Cookies and analytics

We use essential cookies to keep you signed in and a lightweight analytics layer to understand which features help people. We do not use advertising trackers.

09. Your rights under Canadian law

Under PIPEDA and applicable provincial laws, you have the right to access, correct, and delete your personal information, and to withdraw consent. If you are outside Canada, your data may be processed in Canada and other countries where our providers operate.

10. Children

CareerHeap is not directed at children under 16, and we do not knowingly collect their personal information.

11. Changes to this policy

If we make material changes, we’ll update the date above and, where appropriate, notify you in the product. Continued use after an update means you accept the revised policy.