Last updated 11 September 2026
Privacy
MyCareerProof reads documents you give it and builds a professional profile from them. This describes what it keeps, where, and who else sees it.
What you give it
- Documents you upload — a résumé, a LinkedIn data export, a photograph or scan of either.
- A GitHub username, if you provide one, allows public repository analysis. If you install the GitHub App, analysis can also read the private repositories you grant: languages, tests and CI, commit history and contribution signals. Repository code is never executed. Code and private repository names or addresses are not published. Uninstall the App in GitHub Settings → Applications → Installed GitHub Apps to stop future access; previously computed profile information remains until you edit or delete it.
- Links you add, and any job posting you paste in.
- An email address, if you create an account.
From a LinkedIn export, only the profile files are opened — profile, positions, education, skills, certifications, projects and recommendations. A full export also contains your messages, your connections and every job you have applied to. Those files are never decompressed.
Pages fetched on your behalf. Links you add, the pages you name as your own, and a certification's verification link (from your export or typed in the studio) are opened by our server and read for what they say about you. Every page is treated as data: nothing on it becomes an instruction. A page you name as your own is read by a model for the projects, skills and credentials it states, as content. A proof page — a link added as evidence, a certification's verification page — is read by no model at all: it is searched for your name, and what is kept is the address, the time and the sentence that names you. LinkedIn itself is never fetched.
Where it is kept
- Uploaded files and rendered output are stored in Cloudflare R2, keyed so that no run's files are reachable from another's.
- The profile built from them is stored in Supabase (PostgreSQL), hosted in the United States.
Every record belongs to an account and answers only to it. Building one requires signing up — the free tier costs nothing, and an account is what makes the record yours: it is how you delete it, how you prove it is yours, and how we reach you if something in it is wrong. Records used to be creatable without an account, protected only by the secrecy of a link; that is no longer possible, and no such records exist.
Who else sees it
These are the services that process something of yours, and what each one processes. There are no others.
- Cloudflare runs the application. Your uploads and rendered files sit in Cloudflare R2; every request passes through Cloudflare's network; and a résumé in a script the built-in PDF exporter cannot shape (Arabic, Hebrew, Devanagari, Thai, CJK) is printed to PDF in a browser Cloudflare hosts, which sees that page's HTML for the length of the print.
- Supabase stores the profile built from your documents and your account, in PostgreSQL hosted in the United States.
- DeepInfra and OpenAI receive text from your documents to read and rewrite it: DeepInfra first, OpenAI when DeepInfra does not answer, and, when you ask for another version of your résumé, whichever of OpenAI or DeepInfra writes that version. Both publish API terms under which content sent to the API is not used to train their models; we rely on those published terms and have not audited either provider.
- Stripe handles payments if you subscribe. Card details never reach MyCareerProof.
- Resend delivers the transactional email this site sends you — billing and account notices, and the follow-up reminders and job alerts you ask for — and so receives your address and the text of each one. Nothing from your documents is in them. If an email to you does not arrive — it bounces, is refused or is reported as spam — Resend tells us, and we keep that report (your address, the subject and the reason) so the fault can be put right. It is removed with your account.
- Zoho Mail hosts the support mailbox. Anything you email to support is held there.
- Fantastic.jobs and Careerjet, two job search services, are sent the kind of job a record is about — a job title such as "registered nurse", never a name, a document or an address — to fill the job index with openings for it.
- GitHub, only if you connect it, is read for the repository signals described above.
Nothing is sold, and nothing is shared with advertisers or recruiters.
What becomes public
Only what you publish, and only when you press publish. The published page is built from a filtered copy of your profile, not the one you review:
- Phone numbers and postal addresses are never published, even if marked public.
- Private repository names and URLs are removed.
- Evidence notes and working material are removed.
Before publishing you are shown exactly what is being withheld. A published page is a fixed snapshot; changing your profile afterwards does not change it until you publish again.
What it will not say about you
The system may not state a fact your documents do not support. It does not invent employers, dates, titles, metrics, qualifications or results. Where something is unclear it asks you rather than guessing.
Job matching
MyCareerProof keeps a standing index of job postings crawled from company career pages. If you use matching, your profile is read against postings from that index to score how well you fit them. Nothing travels the other way: your profile is never sent to an employer, a recruiter or a job board, and no employer is told you looked. Applying is something you do yourself, from the employer's own page.
A search you save for job alerts is kept with your account and run against the index each morning. The email lists what is new, and every one carries the link that turns alerts off. Removing the search, or closing the account, removes it.
How long it is kept
Your record is kept until you delete it or close your account — this is a document you come back to, so nothing expires on you quietly. Runs never claimed by an account are swept automatically. When a record is deleted, the uploaded files, the parsed profile and any published page are removed through a staged cleanup process. If a stage fails, the remaining record is retained so cleanup can be retried.
Your choices
- Unpublish a site at any time, from your account.
- Delete your account and everything attached to it, from your account page. Uploads, profile, published pages and the names they were published at are removed together, and the name goes back into the pool for someone else to claim. You confirm by typing the address on the account; it is not reversible and no copy is kept. If anything fails part-way, some data may already be removed. The page reports the failure so you can retry.
- Ask for a copy of what is held about you, at the same address.
If you are in the UK, EU or California, the rights your law gives you — access, correction, deletion, portability, objection — are honoured whoever you are and wherever you live, because operating two standards is how the weaker one leaks.
Cookies
No advertising or analytics cookies. Your browser keeps your sign-in token in local storage so you stay signed in; clearing site data signs you out.
Counting visits. Each page reports, once, which page it was, which site sent you there — the site's name only, never the address or anything you searched for — and whether you are on a phone. It carries no name, no account and no identifier of any kind, sets nothing on your device, and is not sent at all if your browser asks not to be tracked. Cloudflare counts visits at its own edge in the same cookie-free way.
Changes
If this changes in a way that affects what is done with your information, account holders are told by email before it takes effect.
Which law applies
MyCareerProof is operated from the United States and these terms are governed by the law of the State of Florida, without regard to its conflict-of-law rules. Nothing here takes away a consumer protection your own country's law gives you and does not let you sign away — if you are in the UK or the EU, those rights stand whatever this page says.