Legal
Privacy Policy
Last updated: October 15, 2026
This Privacy Policy explains how 7INNDC, LLC handles personal information in Job Hunt OS, a web application for organizing a job search and preparing career materials. It applies to the public website and the signed-in app.
Job Hunt OS is a personal tool for organizing your job search and preparing your own career materials. It is not a recruiter, employment agency, employer, applicant tracking system, staffing firm, law firm, immigration adviser, or financial adviser, and it does not send your information to employers.
A shorter, job-search–specific summary is in the Job-Seeker Data Notice. How we use AI is explained in AI Disclosures. Cookies are covered in the Cookie Policy.
1. Who is responsible for your data
The controller of your personal information is 7INNDC, LLC, a New Mexico, USA limited liability company doing business as Carvex (“Carvex”, “we”, “us”), with its principal office in San Francisco, California, USA (street address: XXX) and an office in Seville, Spain (street address: XXX).
Privacy requests: XXX (privacy email pending confirmation). Postal mail: 7INNDC, LLC, XXX (mailing address pending confirmation).
Data protection officer: XXX (whether a DPO is designated is pending confirmation). EU representative under Article 27 GDPR: XXX (pending confirmation of whether the Seville office constitutes an EU establishment).
2. Information we collect
We collect only what is needed to run the features you use. Most of it is information you choose to enter or upload.
| Category | Examples | Source |
|---|---|---|
| Account data | Name, email address, password (stored only as a hash by our authentication provider), sign-in timestamps, accepted terms and policy versions | You; generated when you sign up |
| Contact and profile data | Full name, email, phone, city, region, country, profile links, headline, summary | You |
| Career history | Roles, employers, dates, achievements, metrics, education, certifications, skills, languages, projects, publications, awards, interview stories | You, or extracted from text or files you provide and then confirmed by you |
| Job-search preferences | Target functions, industries, seniority, work modes, employment types, relocation preference, time zone | You |
| Optional work-authorization note | A free-text note about your authorization to work, if you choose to add one | You (optional) |
| Uploaded documents and text | Résumés/CVs you upload (PDF, DOCX, TXT) and text you paste, and the text we extract from them | You |
| LinkedIn files you import (optional) | Your LinkedIn profile PDF (“Save to PDF”) or selected files from LinkedIn's data export: profile name, headline, summary, location, positions, education, skills, languages, certifications. We do not read messages, connections, birth date, address, or any other export file, and we do not store export ZIP/CSV files — only the extracted rows | You, from files you download from LinkedIn yourself |
| Generated materials | Résumé versions, design settings, exported PDFs, outreach and thank-you drafts, suggestions and your decisions on them | Created in the app at your request |
| Job-search records | Opportunities, job descriptions you paste, requirements, stages, applications, tasks, companies, interviews, interview notes and reflections, offers (including compensation you enter) | You |
| Information about other people | Names, roles, contact details, and notes about professional contacts you add | You |
| Voice recordings | Audio and transcripts. Voice intake is currently not available; if enabled in the future, recordings would be handled as described in section 7 | You (not currently collected) |
| Usage and security records | Records of actions such as exports, deletions, plan changes, and AI feature runs (identifiers, timestamps, status, and structured outputs — not keystrokes or browsing behavior); server request logs kept by our hosting provider (IP address, user agent, URL, time) | Generated automatically |
| Privacy requests | Export and deletion requests, their status and dates | You |
| Partnership inquiries (business contacts) | Company name, your name, work email, company website, and your message, when you ask to become a partner | You, via the Become a partner form |
Information we ask you not to provide
Please do not upload or enter Social Security numbers or other government identifiers, date of birth, photographs, health or disability information, religious or political beliefs, sexual orientation, racial or ethnic origin, criminal records, financial account numbers, or immigration documents. The service does not need them and does not ask for them. If such information appears in a document you upload, it is stored privately with that document; delete it or redact it if you do not want it kept.
We do not collect payment card data (there are no paid plans), precise geolocation, biometric data, or contacts from your address book. We do not buy data about you.
3. How we use your information
- To create and secure your account, authenticate you, and send service emails such as sign-up confirmation and password reset.
- To build your career profile, extract suggested facts from text, documents, or LinkedIn files you provide (you confirm each one), and generate résumé versions, PDFs, and drafts you request.
- To compare a job description you add with your confirmed profile and show an explained, rule-based alignment view and suggestions.
- To organize your pipeline, tasks, contacts, interviews, and offers, and to show analytics computed only from your own records.
- To fulfil export and deletion requests and to keep records needed to prove we did so.
- To keep the service secure, prevent abuse, debug errors, and enforce our Terms of Use and Acceptable Use Policy.
- To reply to partnership inquiries from companies (business contact details only).
- To comply with legal obligations and respond to lawful requests.
We do not use your content to train AI models, we do not use it for advertising, we do not sell personal information, and we do not share it for cross-context behavioral advertising. We do not use analytics, advertising, or session-replay tools.
4. Legal bases (EEA, UK, and Spain)
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Providing the account and the features you use, including processing documents and generating materials you request | Performance of a contract (Art. 6(1)(b)), including steps you ask for before signing up |
| Security, fraud and abuse prevention, debugging, audit records, defending legal claims | Legitimate interests (Art. 6(1)(f)) in operating a secure, reliable service |
| Storing information you add about other people (professional contacts) | Our legitimate interest in providing the networking feature you use; you are responsible for having an appropriate reason to store it |
| Keeping voice recordings beyond the default period (if voice intake is enabled in the future) | Your consent (Art. 6(1)(a)), which you can withdraw at any time |
| Optional cookies or similar technologies (none are used today) | Consent (Art. 6(1)(a) and Spanish LSSI-CE art. 22.2) |
| Replying to partnership inquiries | Legitimate interests (Art. 6(1)(f)) in responding to business requests, and steps before a contract |
| Complying with law, tax, and accounting rules | Legal obligation (Art. 6(1)(c)) |
If you choose to include information that reveals special categories of data (for example, health or immigration-related details in a document), it is processed only to store and display it to you as part of the service you requested, and you can delete it at any time. We do not use it to profile you.
We do not send marketing emails. If we ever offer them, they will require a separate, optional opt-in that is never needed to use the product.
5. AI and automated processing
When AI assistance is on (the default), the text needed for the feature you start — for example, text or a résumé you submit for fact extraction, a job description you paste, or your confirmed facts and a résumé version when you ask for suggestions — is sent to Anthropic, PBC (Claude) for processing. Under Anthropic's commercial API terms, your content is not used to train its models; Anthropic may keep it for a limited period for safety and abuse monitoring (XXX days, pending confirmation). Your work-authorization note, your contacts' details, and your sign-in data are never sent. You can turn AI assistance off in Settings; the built-in, rule-based assistant is then used and nothing is sent to Anthropic. Details by feature are in the AI Disclosures.
The app shows an “alignment” view comparing a job description with your confirmed profile. It is a transparent, rule-based heuristic shown only to you, with its formula and weights visible. It is not an applicant-tracking (“ATS”) score or a prediction of hiring outcomes.
Job Hunt OS does not make decisions about you that produce legal or similarly significant effects (GDPR Art. 22). No employer, recruiter, or third party receives any score, ranking, or recommendation about you.
7. International transfers
Job Hunt OS is hosted in the United States. If you use it from Spain, the EU, or elsewhere, your information is transferred to and stored in the United States, where data protection law may differ from your country's.
For transfers from the EEA, UK, or Switzerland we rely on the data processing terms of our providers, which include safeguards such as the European Commission's Standard Contractual Clauses and/or the providers' certification under the EU-U.S. Data Privacy Framework (verification of each provider's current mechanism: XXX). You can request a copy of the relevant safeguards by contacting us.
8. How long we keep information
| Information | Retention |
|---|---|
| Account, profile, career facts, résumé versions, exported PDFs, job-search records, contacts | Until you delete them or delete your account. Deleted items are removed from the live database immediately. |
| Uploaded documents and pasted text | Until you delete them (Settings → Your data) or your account. Facts you confirmed from them stay in your profile until you delete those too. |
| Voice recordings (if voice intake is enabled) | Raw audio deleted 72 hours after the transcript is ready, or 7 days after a failed transcription, unless you choose to keep it; transcripts until you delete them. |
| Data-export bundles | Deleted 7 days after creation; download links last 60 seconds. |
| Account deletion | Completed 7 days after you confirm the request (you can cancel during that period). All rows and files are then permanently deleted. |
| Security and audit records | Stored without your identity once your account is deleted, and deleted after 24 months. |
| Completed deletion requests | Kept without your identity to prove completion, and deleted after 24 months. |
| Partnership inquiries | Deleted 24 months after they are received (earlier on request). |
| Hosting request logs | Kept by our hosting provider for its standard log period (XXX days, pending confirmation). |
| Backups | Deleted data may persist in our database provider's backups until they expire (XXX days, pending confirmation of the backup schedule) and is not restored except to recover from an incident. |
Inactive accounts: we do not currently delete accounts for inactivity. Before introducing an inactivity period, we will update this policy and notify affected users in advance.
9. Security
We use encryption in transit (HTTPS), database row-level security so each account can access only its own records, private file storage with download links that expire after 60 seconds, password re-entry before data exports and account deletion, secrets kept only on the server, and logs that exclude your content. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
If we learn of a security incident affecting your personal information, we will notify you and the authorities where the law requires.
10. Your rights and choices
- Access and portability: download everything in Settings → Your data → Export everything.
- Correction: edit your profile and records at any time.
- Deletion: delete documents, recordings, and résumé versions individually, or delete your account in Settings → Your data.
- AI assistance: turn it off in Settings (the built-in assistant is used instead).
- See all controls in Privacy Choices.
You can also contact us at XXX. We respond within the time the law requires (for example, one month under the GDPR, extendable where permitted, and 45 days under California law). We may need to verify your identity, usually by asking you to sign in. You will not be discriminated against for exercising your rights.
11. Additional information for the EEA, the UK, and Spain
You have the right to access, rectify, erase, restrict, and object to processing, to data portability, and to withdraw consent at any time without affecting earlier processing. Where processing is based on legitimate interests, you may object on grounds relating to your particular situation.
You may lodge a complaint with your local supervisory authority. In Spain this is the Agencia Española de Protección de Datos (AEPD), www.aepd.es. We encourage you to contact us first so we can try to resolve your concern.
Providing account data is necessary to enter into the contract for the service; other information is optional, and not providing it only limits the related features.
12. Notice for California residents
This section supplements the policy for California residents under the California Consumer Privacy Act as amended (CCPA). Whether the CCPA applies to 7INNDC, LLC depends on thresholds that are under review (XXX); we provide this notice as a precaution.
| Category (CCPA) | Collected | Disclosed for a business purpose to |
|---|---|---|
| Identifiers (name, email, phone, account ID, IP address) | Yes | Hosting and database providers |
| Customer records (contact details) | Yes | Hosting and database providers |
| Professional or employment-related information | Yes | Hosting and database providers |
| Education information (as you enter it; not regulated school records) | Yes | Hosting and database providers |
| Internet or network activity (server request logs, in-app action records) | Limited | Hosting provider |
| Audio information | Not currently (voice intake unavailable) | — |
| Inferences used to profile you | No | — |
| Sensitive personal information: account log-in credentials; citizenship or immigration status only if you choose to include it in the optional work-authorization note or a document | Yes (log-in); only if you provide it (immigration) | Hosting and database providers |
Sources, purposes, and retention are described above. We do not sell or share personal information (as those terms are defined in the CCPA), have not done so in the past 12 months, and do not knowingly sell or share the information of consumers under 16. We use sensitive personal information only to provide the service you request, so a “right to limit” does not apply.
Your rights: to know and access, to delete, to correct, to opt out of sale or sharing (none occurs), and to non-discrimination. You may use an authorized agent with written permission; we may verify your identity directly. We honor Global Privacy Control signals as an opt-out of sale or sharing, although no sale or sharing takes place.
Do Not Track: Job Hunt OS does not track you across third-party websites and does not use third-party trackers, so browser “Do Not Track” signals do not change how the service operates (CalOPPA disclosure).
Shine the Light: we do not disclose personal information to third parties for their direct marketing purposes.
13. Children
Job Hunt OS is intended for people aged 18 or older. We do not knowingly collect information from anyone under 18. If you believe a minor has created an account, contact us and we will delete it.
14. Changes to this policy
We will post any changes here with a new “Last updated” date. If a change is material, we will notify you in the app or by email before it takes effect and, where required, ask for your agreement again.
15. Contact
Privacy requests: XXX (privacy email pending confirmation). Postal mail: 7INNDC, LLC, XXX (mailing address pending confirmation).
See also the Legal Notice for company details.