Privacy Policy

1. Who We Are

CareerFrank is operated by Mandeville Digital Ltd, a UK company registered in England and Wales.

2. Information We Collect

Personal Information

• Name and email address (when you create an account)
• Payment information (processed securely by Stripe)
• Assessment responses and personality data
• Chat conversations with our AI mentor (Premium users)
• Usage analytics and platform interactions

Technical Information

• IP address and browser information
• Device type and operating system
• Cookies and similar tracking technologies
• Page views and navigation patterns

3. How We Use Your Information

Primary Purposes

• Assessment Services: To calculate personality scores and provide career recommendations
• Report Generation: To create personalized PDF reports with your results
• AI Insights: To generate personalized career guidance and mentoring
• Account Management: To manage your subscription and provide customer support
• Platform Improvement: To enhance our services and develop new features

Legal Basis (UK GDPR)

• Contract Performance: Providing assessment services you've requested
• Legitimate Interest: Improving our platform and preventing fraud
• Consent: Marketing communications and optional features
• Legal Obligation: Compliance with financial and data protection laws

4. Data Sharing and Third Parties

Service Providers

• Supabase: Database hosting and authentication (EU-based servers)
• Stripe: Payment processing (PCI DSS compliant)
• OpenAI: AI-powered insights and chat features
• Vercel: Website hosting and performance analytics

5. Your Rights (UK GDPR)

6. Data Security and Retention

Security Measures

• End-to-end encryption for all data transmission
• Secure database hosting with regular backups
• Access controls and authentication requirements
• Regular security audits and vulnerability assessments
• Staff training on data protection best practices

Data Retention

• Account Data: Retained while your account is active
• Assessment Results: Stored indefinitely for your access (unless you request deletion)
• Chat Conversations: Retained for 2 years or until account deletion
• Payment Records: Retained for 7 years for tax and legal compliance
• Analytics Data: Anonymized after 26 months

7. Cookies and Tracking

We use cookies and similar technologies to improve your experience. For detailed information, please see our Cookie Policy.

Types of Cookies

• Essential: Required for platform functionality
• Analytics: Help us understand how you use our platform
• Preferences: Remember your settings and choices

8. International Transfers

Your data may be transferred to and processed in countries outside the UK/EEA, including the United States (for OpenAI services). We ensure appropriate safeguards are in place:

• Standard Contractual Clauses (SCCs) with service providers
• Adequacy decisions where applicable
• Additional security measures for sensitive data

9. Children's Privacy

CareerFrank is not intended for children under 16. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us immediately at info@mandeville.digital.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by email or through a prominent notice on our platform. Your continued use of CareerFrank after such changes constitutes acceptance of the updated policy.