Privacy Notice

1. Who We Are and Scope

Ace Career Coach is committed to protecting the privacy, confidentiality, and security of your personal data. This Privacy Notice explains how we collect, use, store, disclose, and protect personal data when you use acecareercoach.com and our application services.

For questions or data rights requests, contact our data protection team at privacy@acecareercoach.com.

2. Personal Data We Collect

We collect only the information necessary to provide evidence-grounded interview preparation:

• Account & Identity Data: Name, professional title, email address, and encrypted authentication tokens. Plaintext passwords are never stored.
• Career & Document Data: Uploaded CVs/resumes (PDF/DOCX), work history, titles, achievements, metrics, education, and target-role descriptions.
• Interview & Practice Data: Written practice answers, rubric evaluation scores, STAR behavioral stories, and user verification flags.
• Multimodal Live Audio & Video Data: Streaming microphone audio and camera frames (1 FPS) processed ephemerally during Live Video Interview Studio sessions solely to conduct conversational simulations. No biometric facial geometry or voiceprints are extracted or stored.
• Technical Data: IP address, device/browser type, and security logs. Optional analytics are disabled by default.

3. How and Why We Process Your Data

We process personal data under recognized lawful bases:

• Contractual Performance: Providing core features, structuring career profiles, matching evidence to job requirements, and simulating interviews.
• Legitimate Interests & Security: Automated antivirus scanning of uploaded CV files, protecting platform security, preventing abuse, and enforcing access controls.
• Explicit Consent: Camera and microphone permissions for the Live Video Interview Studio and optional telemetry analytics.

4. Artificial Intelligence & Model Governance

We use Google Gemini generative AI and multimodal streaming models to parse CV documents and generate interview feedback.

• No Foundation Model Training: We do not use your private CVs, career records, interview transcripts, or audio streams to train publicly accessible foundation AI models.
• Human-in-the-Loop: All AI suggestions remain marked as unverified until you review and confirm them. Readiness scores are qualitative coaching guidance, not automated employment decisions.

5. Third-Party Subprocessors

We partner with enterprise infrastructure providers bound by strict data processing agreements:

• Supabase Inc.: Managed PostgreSQL database, authentication, and secure document storage with Row Level Security.
• Google Cloud / Gemini API: AI analysis and real-time multimodal Live interview streaming.
• Cloudmersive: Zero-trust automated antivirus scanning of uploaded CV documents in transient memory.
• Transactional SMTP: Delivery of account verification and password reset notifications.

6. Data Retention and Deletion

• Account & Profile: Maintained while your account is active; deleted upon account closure.
• Uploaded CV Documents: Retained in private storage until deleted by the user via the CV Evidence interface.
• Live Audio/Video Streams: Ephemeral only; processed in real time during live sessions with zero persistent raw video storage.
• Security Logs & Backups: Security logs are retained for up to 90 days; encrypted disaster recovery snapshots rotate on a 30-day automated schedule.

7. Your Statutory Privacy Rights

Under applicable data protection legislation (including UAE Federal Decree-Law No. 45/2021 and GDPR), you have the right to access, rectify, or erase your personal data, restrict processing, receive a portable copy of your evidence, and withdraw consent at any time.

To exercise your rights, email privacy@acecareercoach.com. We will respond within 30 calendar days.

Facts awaiting confirmation

• Legal operator identity, registration details and address
• Privacy, support and legal contact details
• Minimum user age and supported countries
• Provider inventory, processing regions and transfer safeguards
• Retention, backup expiry, account deletion and export behavior
• AI-provider retention and training terms
• Pricing, refunds and governing law