Career Transition Plan

Privacy Policy

Version: 2026-06-23-v1

CareerTransitionPlan.com

Privacy Policy

Last updated: 23 June 2026

1. Scope of This Privacy Policy

This Privacy Policy explains how Career Transition Plan LLC, a Wyoming limited liability company doing business as CareerTransitionPlan.com (“CareerTransitionPlan,” “Company,” “we,” “us,” or “our”), collects, uses, stores, shares, retains, and protects information in connection with CareerTransitionPlan.com and its related services, software, pages, tools, outputs, subscription features, workflows, documents, account features, and support channels (collectively, the “Service”).

This Privacy Policy applies to account creation, subscription management, resume upload and analysis, enrichment workflows, job-description assessment workflows, resume-draft generation, support communications, billing-related account records, and other interactions with the Service.

The Service is intended only for users physically located in the United States. It is not offered to persons located outside the United States.

2. Information We Collect

We collect information you provide directly, information created through your use of the Service, information from our payment and infrastructure providers, and technical information needed to operate and secure the platform:

  • Account information, such as email address, password (stored only in hashed form), authentication status, account status, subscription status, and related account identifiers. We do not require your Social Security number or government identification number to create an account.

  • Billing-related information, such as subscription plan, purchase status, renewal status, cancellation status, paid-through date, and payment-processor customer identifiers. We do not store full payment card numbers; those are handled by our payment processor.

  • User-submitted content, such as resumes, career history, job-description text, enrichment answers, support messages, and other materials you upload, paste, or send to us.

  • Generated outputs and workflow records, such as produced resume files, enriched resume drafts, job description-optimized resume drafts, analysis results, enrichment status, job-assessment results, and workflow state.

  • Records of your interactions with our AI features, including the text you submit to those features and the responses generated for you. See Sections 5 and 12.

  • Technical and security information, such as IP address, approximate location signals, device and browser information, log data, authentication events, error logs, security events, access timestamps, cookie or session information, and fraud-prevention signals.

  • Support and communication records, such as emails, support requests, billing questions, account-recovery requests, abuse reports, and legal or security communications.

Some of this technical information, including IP address and connection details, is collected automatically at the network and content-delivery layer of our infrastructure (for example, by our content delivery network) rather than by our application software. It is used to route and deliver traffic, secure the Service, prevent abuse, investigate incidents, and restrict access to locations within the United States. These infrastructure logs are stored at the infrastructure level and are accessed only for security, fraud-prevention, traffic-management, legal-compliance, or incident-investigation purposes; our application does not use your IP address to build a user profile.

3. Sensitive Career and Resume Information

Resumes and career-transition materials may contain personal information, employment history, education history, compensation-related information, location information, credentials, professional achievements, and other career-related details.

Please submit only information that is necessary for the requested workflow. Do not submit Social Security numbers, government identification numbers, bank account numbers, medical records, protected health information, passwords, personal account credentials, highly sensitive personal information unrelated to career-transition planning, or confidential third-party information.

4. How We Use Information

We use information to provide, operate, secure, support, improve, and administer the Service, including to:

  • Create, authenticate, and manage accounts.

  • Process subscriptions, billing, cancellations, renewals, and account access.

  • Receive, validate, analyze, and process resume files, enrichment answers, and job-description text.

  • Generate career-transition outputs, enriched resume drafts, job description-optimized resume drafts, enrichment questions, and job-description assessments.

  • Provide customer, account, billing, security, and accessibility support, and send operational communications and legal notices.

  • Monitor, debug, secure, and improve the Service.

  • Detect, prevent, investigate, and respond to abuse, fraud, unauthorized access, security events, system misuse, policy violations, and unlawful activity.

  • Maintain security, audit, and compliance records as described in Section 12.

  • Comply with legal obligations, enforce our Terms and Usage Policy, and protect the rights, safety, and property of the Company, our users, our vendors, and the public.

5. AI, Automated Processing, and Output Generation

The Service uses automated processing, software logic, and third-party AI model providers to analyze submitted content and generate outputs. This processing may include extraction, classification, summarization, transformation, comparison, scoring, enrichment, and generation of career-transition materials.

Third-party AI model providers process submitted content and related workflow information as our service providers, only to provide the functionality you request. We do not authorize these providers to use personal information submitted through the Service to train their general-purpose AI models, where their controls and our contractual terms allow us to disable that use. The text you submit to our AI features and the responses generated for you are also retained as part of our security and audit records, as described in Section 12.

Outputs may be incomplete, inaccurate, unsuitable, unsupported, or outdated. You are responsible for reviewing all outputs before relying on, submitting, sharing, or using them.

6. Resume Draft Generation

If you use an enriched resume draft or job description-optimized resume draft feature, we process your saved profile information, uploaded resume materials, enrichment answers, job-description text you provide, generated outputs, subscription status, and available market-context information to create a draft.

We do not send your resume, profile, job-description text, or generated draft to employers, recruiters, job boards, or job-posting platforms as part of this feature. You are responsible for deciding whether to download, edit, submit, or otherwise use any generated draft.

7. Payment Processing

Subscription payments are processed by a third-party payment processor. We receive and store payment-related account records such as plan, subscription status, renewal status, cancellation status, payment-processor customer identifiers, and transaction status.

We do not store full payment card numbers. Payment card handling is performed by the payment processor under its own security and privacy practices, and you should review that processor’s privacy policy for how it handles your payment information. Our payment processor may change from time to time.

8. Service Providers and Vendors

We share information with service providers and vendors that help us operate the Service, which may include hosting providers, security providers, payment processors, email providers, analytics providers, logging providers, support tools, and AI model providers.

Service providers are permitted to process information only as reasonably necessary to provide services to us, support and protect the Service, comply with law, or perform the functions described in this Privacy Policy. Where state privacy law applies, we contractually require these providers to act as service providers or contractors and to limit their use of personal information accordingly.

9. Cookies, Logs, Do Not Track, and Third-Party Tracking

We use cookies, session storage, server logs, security logs, and similar technologies to operate the site, authenticate users, maintain sessions, secure accounts, prevent abuse, understand service performance, and troubleshoot issues. Disabling cookies or similar technologies may prevent the Service from working correctly.

Some browsers transmit Do Not Track signals. Because there is no single uniform industry standard for responding to such signals, we do not currently respond to browser Do Not Track signals. We do not permit third parties to collect information through the Service for cross-context behavioral advertising.

10. Legal, Safety, and Compliance Disclosures

We may disclose information if we believe disclosure is reasonably necessary to comply with law, legal process, court orders, subpoenas, regulatory requests, law-enforcement requests, or tax or accounting obligations.

We may also disclose information where we believe it is necessary to detect, prevent, investigate, or respond to fraud, abuse, security incidents, unauthorized access, unlawful activity, threats, policy violations, or harm to the Company, our users, our vendors, our systems, or the public.

11. Security and Incident Response

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information, which may include access controls, encrypted transmission where appropriate, monitoring, backup practices, vendor controls, and logging. Our data is hosted in the United States.

No internet-based service can be guaranteed to be completely secure, uninterrupted, or error-free. Despite reasonable safeguards, security events may occur.

If we identify a security incident that may involve personal information, we will investigate and respond based on the nature of the incident, the information involved, the likelihood of misuse, and applicable legal requirements. Where required by law, we will notify affected individuals, regulators, or other parties within the time periods those laws require.

12. Data Retention

We retain information for as long as reasonably necessary to provide the Service, maintain accounts, administer subscriptions, comply with legal obligations, resolve disputes, enforce our agreements, protect the Service, and maintain our security and audit records.

Security and audit retention. In addition to the information we maintain to operate your account, we keep secured internal records for risk-management, security, fraud-prevention, dispute-resolution, and legal-compliance purposes. These records may include copies of content you submit to the Service (such as uploaded resumes, enrichment answers, and pasted job descriptions), outputs the Service generates for you, and logs of your interactions with our AI features (including the text you submit and the responses you receive).

Retention periods. We apply defined retention limits to the data we store, enforced through automated deletion controls, and we do not retain personal information for longer than reasonably necessary for the purposes described in this Privacy Policy or as required by law. In general: uploaded resumes and source files, generated resume outputs, and related processing outputs are retained for up to three years; AI enrichment audit records and job-description draft audit records, which include submitted content and records of AI interactions, are retained for up to seven years; infrastructure and content-delivery access logs, including IP address, are retained for up to one year; short-lived processing, delivery, and test data and AI model-processing logs are retained for periods ranging from one day to thirty days; and recovery backups are retained for up to thirty days. We may retain particular records longer where required or permitted by law, for example under a legal hold or for tax, accounting, or audit obligations.

We do not retain personal information for longer than we reasonably believe is necessary for the purposes described in this Privacy Policy or as required by law. These security and audit records are stored separately from the account-facing Service, on a restricted, access-controlled basis, and are used for the purposes described above rather than to provide day-to-day account features. As explained in Section 13, these records are subject to limited retention even after you delete your account, to the extent permitted by applicable law.

Infrastructure and content-delivery logs. Our infrastructure and content delivery network automatically log connection data, including IP addresses, as part of delivering and securing the Service and enforcing United States-only access. These logs are retained at the infrastructure level for up to one year and are accessed for security, fraud-prevention, traffic-management, and legal-compliance purposes. Because they are organized by network request rather than by user account, they are not individually deleted in response to a user request, and are retained under the security and legal-compliance bases described above.

Other workflow data. Assessment results, market analytics, reports, calculated projections, intermediate analysis, and temporary workflow state may not be persisted within the account-facing Service after the applicable workflow or subscription period, and may be deleted, overwritten, or made unavailable there. Generated resume outputs are retained for up to three years after they are produced, in line with the retention limits above; you are responsible for downloading and saving any output you wish to keep.

Payment and transaction records. We do not store full payment card numbers or detailed payment-transaction records. Those records are held by our payment processor as its system of record and are retained under the processor’s practices and applicable tax and accounting law. Within the Service we keep only your subscription status, the product and price history needed to manage your entitlement, and the account email used to associate your account with its subscription.

13. Your Privacy Choices, Deletion Requests, and Account Deletion

You may update certain account information through the Service where available, and you may cancel your subscription through the billing controls we provide.

How to make a request. Where applicable law gives you a right to request access, correction, deletion, or portability of personal information, you may submit a request by sending an email from the email address registered to your account to privacy@careertransitionplan.com, with the subject line “Privacy Request” or “Deletion Request.” Because the platform does not currently offer an automated self-service deletion control, email from your registered account address is the designated request method at this time.

Verification and conditions. We require that a request be sent from, or confirmed through, your registered account email address so that we can verify it is you. We may decline, delay, or request additional information if we cannot reasonably verify the requester. Because we cannot close an account that is still receiving paid services, you must first cancel your subscription and allow any remaining paid subscription period to expire before we can process an account-deletion request.

What deletion does. A verified deletion request will result in deletion or deactivation of your account profile information, uploaded resume files, job-description text, enrichment answers, generated outputs, and workflow records within the account-facing Service, to the extent required by applicable law and technically feasible.

What we may retain. As described in Section 12, we may retain certain information after deletion where reasonably necessary or legally permitted, including our security and audit records and records needed for fraud prevention, legal compliance, accounting, tax, payment history, dispute resolution, enforcement of our Terms and Usage Policy, backup integrity, and to document that a request was received and honored. Where law permits us to retain such records despite a deletion request (for example, audit records retained for up to seven years and infrastructure logs retained for up to one year), those records remain subject to the retention periods in Section 12 and are not used to provide ordinary account features.

Timing. We will acknowledge your request within 10 business days of receipt and describe how we will process it. Our operational target is to complete verified deletion requests within 45 days after receipt. If additional time is reasonably necessary, we may extend the response period once by up to an additional 45 days and will notify you of the extension within the initial 45-day period. We will confirm when the request is completed, denied, or limited because an exception applies.

14. California and Other State Privacy Notices

The Service is intended only for U.S. users, and some U.S. state privacy laws may give residents of particular states rights regarding personal information, including rights to know or access personal information, request correction, request deletion, obtain a copy of certain information, and not be discriminated against for exercising applicable privacy rights. To exercise an available right, use the request method in Section 13.

Sale and sharing. We do not sell personal information for money, and we do not share personal information for cross-context behavioral advertising.

California residents. California’s online privacy law requires operators of commercial websites that collect personally identifiable information from California residents to post a privacy policy identifying the categories of information collected, the categories of third parties with whom information may be shared, the process for reviewing and requesting changes to information (where maintained), how changes to the policy are communicated, the effective date, and disclosures regarding Do Not Track signals and third-party tracking. This Privacy Policy is provided to support those notice functions. Certain additional California privacy requirements apply only to businesses that meet statutory thresholds (such as annual gross revenue or volume of consumers’ personal information processed); if and when those thresholds apply to us, we will provide the additional disclosures and controls those requirements call for.

15. Children

The Service is intended only for individuals who are at least 18 years old. We do not knowingly collect personal information from anyone under 18. If you believe a person under 18 has provided personal information to us, please contact us so we can review and take appropriate action.

16. United States Processing

The Service is intended for use only in the United States. Information is processed and stored in the United States by us and our service providers. The Service is not designed for, offered to, or intended to comply with privacy or data-protection laws outside the United States.

17. Business Transfers

If we are involved in a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar transaction, information may be transferred or disclosed as part of that transaction, subject to applicable law.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised “Last updated” date. If changes are material, we may provide additional notice through the Service, by email, or by other reasonable means. Your continued use of the Service after the updated Privacy Policy becomes effective means you acknowledge the updated Privacy Policy.

19. Contact

Career Transition Plan LLC

30 N Gould Street, Suite N, Sheridan, WY 82801, United States

Support: support@careertransitionplan.com

Privacy requests: privacy@careertransitionplan.com

CareerTransitionPlan.com Privacy Policy | Page