Privacy Policy

BrainyCareer is a product of Byteovation. Last updated: 9 November 2026.

This policy explains what personal information Byteovation ("we", "us") collects through BrainyCareer.com ("BrainyCareer", the "Service"), why we collect it, who we share it with, and the choices you have. By creating an account you confirm that you have read it. If you do not agree, please do not use the Service.

1. Who is responsible for your data

Byteovation is the controller (data fiduciary) of the personal data described here. You can reach us at contact@byteovation.com or through the Contact us form on the site.

2. What we collect

Account details: your name, your mobile number or email address (whichever you use to sign in, verified by a one-time code), and an optional email address and desired job role.
Your resume: the file you upload (PDF, DOCX or TXT) and the details we extract from it, such as contact information, skills, work history, education, projects and certifications.
Results we generate for you: ATS score and feedback, best-fit roles, learning plan, job matches, applications you record, and AI drafts such as cover letters and interview preparation.
Sign-in and security records: time and IP address of sign-ins and key account changes, and one-time-code requests (the codes themselves are stored only as a one-way hash).
Messages you send us: your name, email, subject and message from the Contact us form.
Basic, anonymous usage statistics: which page was opened, how long it was open, and the country it came from. This is not linked to you or your device and stores no device ID, IP address or city.
Detailed analytics, only if you turn it on (Account → Data and privacy): a random device ID stored in your browser, IP address, approximate location derived from the IP address, device type, browser, operating system, screen size, language, time zone, and the pages you open with the time spent on each. If you also choose "Share precise location" and allow it in your browser, we store the coordinates your browser provides.

We do not ask for payment details, government IDs, or passwords. Please do not put sensitive information in your resume that you do not want processed (for example, national ID numbers).

3. Why we use it

To create and secure your account and keep you signed in.
To analyse your resume, score it, suggest roles and learning, and match you to jobs.
To show live job listings and take you to the original employer or job-board page.
To prevent abuse and fraud (for example rate limiting and bot checks), and to investigate problems.
To answer your messages and provide support.
To understand how the Service is used and improve it.

We do not sell your personal data and we do not use your resume to train our own or third-party AI models.

4. Legal basis and consent

We process your account and resume data to provide the Service you asked for. We process analytics and precise location only with your consent, which you can give or withdraw at any time (Account page → Data and privacy → Analytics choice). Declining analytics does not limit any feature of the Service.

5. Who we share it with

We use service providers who process data on our behalf, only as needed to run the Service:

Vercel – website hosting and servers.
Supabase – database and private file storage for your profile and resume.
Anthropic – AI analysis. The text of your resume (and any job description you paste) is sent to Anthropic to produce your results.
Twilio or another SMS provider – delivery of one-time codes by SMS to your mobile number.
Resend or another email provider – delivery of one-time codes and contact-form emails.
Cloudflare Turnstile – bot protection on sign-up, where enabled.

When you click a job, you leave BrainyCareer and the employer or job board handles anything you submit there under its own policy. We do not send your resume to employers on your behalf unless you choose an action that says so. We may disclose information if the law requires it or to protect the rights and safety of users and the Service.

6. Who can see your data inside Byteovation

A small number of authorised Byteovation administrators can view account records, support messages and (for people who turned on detailed analytics) visit analytics, in order to run, secure and support the Service. Admin access is protected by a password and a sign-in lockout, and admin sign-ins are logged.

7. Cookies and similar technologies

Essential: a secure session cookie that keeps you signed in. It is needed for the Service to work.
Browser storage: your analytics choice and, only if you turned on detailed analytics, a random device ID. These stay on your device until you clear them.

We do not use advertising cookies.

8. How long we keep it

We keep your account data, resume and results until you delete your account. Deleting your account permanently removes your profile, resume file, analyses, matches, applications, AI drafts, sign-in records and linked analytics. One-time codes expire within minutes. Contact messages are kept while we deal with your request and are deleted on request. Backups held by our providers are overwritten on their normal cycle. We may keep limited records where the law requires.

9. Your rights and choices

Access and portability: download everything we hold about you from Account → Data and privacy → Download my data.
Correction: edit your name, email and desired role in Account → Profile, and upload an updated resume in Account → Resume.
Deletion: delete your account in Account → Data and privacy. This cannot be undone.
Withdraw consent: change your analytics choice at any time.
Complaints and other requests: email contact@byteovation.com. We aim to reply within 30 days. You may also have the right to complain to your local data protection authority.

10. Security

We protect data with encrypted connections (HTTPS), private storage with short-lived download links, hashed one-time codes, rate limiting, and access controls. No system is completely secure, so we cannot guarantee absolute security. Please tell us at once if you suspect unauthorised access to your account.

11. International transfers

Our providers may process data in countries other than your own, including the United States. Where required, we rely on appropriate safeguards offered by those providers.

12. Children

The Service is for people aged 18 and over. We do not knowingly collect data from children. If you believe a child has provided data, contact us and we will delete it.

13. Changes to this policy

We may update this policy. When we make material changes we will update the date above and, where appropriate, notify you in the Service. Continuing to use the Service after a change means you accept the updated policy.

14. Contact

Byteovation · contact@byteovation.com