Privacy Policy

This Privacy Policy describes how Clevera Inc., a California corporation (“Clevera,” “Company,” “we,” “us,” or “our”), collects, uses, discloses, stores, and otherwise processes Personal Information in connection with Carir.ai, our job application lifecycle support platform, and any related websites, applications, browser extensions, tools, products, and services made available by us (collectively, the “Services”).

For clarity, Carir.ai is a product, service, and commercial offering of Clevera Inc. References in this Privacy Policy to the “Services” include Carir.ai and all related features, functionality, and supporting systems operated by or on behalf of Clevera.

By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy.

1. Scope and Application

This Privacy Policy applies to Personal Information processed by Clevera in connection with:

• visits to our websites and product pages relating to Carir.ai;
• registration for, access to, and use of the Services;
• use of resume-building, job-matching, job-tracking, networking, outreach drafting, browser extension, auto-apply, administrative, and related workflow tools;
• communications with us, including support requests, product inquiries, commercial discussions, and business communications; and
• interactions with integrated third-party platforms and services, where applicable.

This Privacy Policy does not apply to third-party websites, platforms, services, or applications that are not owned or controlled by Clevera, even if they are linked to or accessible through the Services. Such third parties maintain their own privacy practices, terms, and notices, and we encourage you to review them independently.

2. Nature of the Services

Carir.ai is an end-to-end job application lifecycle support platform operated by Clevera. The Services may enable users to:

• discover and review job opportunities;
• receive job matching outputs, fit signals, and alignment or match scores;
• create, store, update, optimize, and tailor resumes and related application materials;
• receive recommendations intended to improve resume alignment with job positions, including recommendations relating to skills, positioning, and profile development;
• organize and manage networking contacts, including relevant LinkedIn connections or similar professional contacts;
• draft networking, referral, or outreach communications;
• track application activity, statuses, offers, and related workflow information;
• use browser-based tools, supported integrations, and workflow-support features to assist with application-related activities; and
• access related reporting, analytics, administrative, and support functionality.

Any scores, rankings, recommendations, draft content, suggested edits, or similar outputs generated through the Services are provided for informational and assistive purposes only and do not guarantee employment, interviews, offers, compensation, career advancement, or any other particular outcome.

3. Categories of Information We Collect

We may collect the following categories of Personal Information, depending on how you interact with the Services.

3.1 Account and Registration Information

We may collect information such as:

• name;
• email address;
• phone number;
• account credentials;
• profile image, if voluntarily provided; and
• account settings, preferences, and configuration information.

3.2 Professional, Resume, and Profile Information

We may collect information you provide or upload in connection with your professional profile, including:

• resumes, CVs, cover letters, and related application documents;
• employment history;
• educational history;
• certifications, licenses, and qualifications;
• skills, competencies, endorsements, and areas of interest;
• salary preferences, work authorization information, preferred roles, target industries, locations, and work arrangements;
• portfolio links, GitHub links, LinkedIn URLs, websites, and similar professional profile information; and
• notes, comments, or other content you elect to store within the Services.

3.3 Job, Matching, and Application Information

We may collect and process:

• job postings, job descriptions, and related job data that you view, save, upload, import, connect, or apply to;
• job preferences, search criteria, and workflow settings;
• application records, application statuses, stage changes, notes, and pipeline information;
• match scores, alignment indicators, fit assessments, and related recommendation outputs;
• offer-related information you choose to store; and
• structured, extracted, or parsed job and application information derived from supported workflows.

3.4 Resume Builder and Document Processing Information

Where you use our resume builder or related tools, we may collect and process:

• files, text, and content uploaded to the Services;
• edited, generated, reformatted, or enhanced document content;
• version history and revision data;
• extracted or parsed information from uploaded files; and
• recommendations relating to document quality, positioning, alignment, readability, or skills.

3.5 Networking and Outreach Information

Where you use our networking or outreach features, we may collect and process:

• names, titles, organizations, profile links, and notes for contacts;
• manually entered contact details and relationship notes;
• professional connections you choose to import yourself - for example by uploading the connections export that LinkedIn provides to you (name, company, title, profile link, and the date connected). We never retrieve this information from LinkedIn or any other platform on your behalf, we do not scrape profiles, and we do not enrich imported contacts by searching for them. Imported contacts are visible only to you, are used only to show you where you have a warm path and to address outreach drafts you ask for, and can be deleted by you at any time, individually by source or all at once;
• outreach drafts, templates, messaging content, and related edits; and
• relationship-tracking or networking workflow information you choose to maintain.

3.6 Browser Extension and Workflow Information

If you use a browser extension or application-assistance workflow, we may collect information necessary to provide those features, including:

• relevant page or form metadata;
• information necessary to populate, assist with, or support application workflows;
• integration, diagnostic, compatibility, and performance information;
• usage logs and error data; and
• limited interaction data reasonably necessary to provide requested functionality.

We do not intend to collect browsing activity unrelated to the Services except as reasonably necessary to operate, secure, maintain, improve, or troubleshoot the relevant extension or workflow support.

3.7 Payment, Billing, and Subscription Information

Where applicable, we may collect and process:

• subscription plan and tier information;
• billing contact information;
• transaction metadata;
• payment and subscription status; and
• records relating to invoices, receipts, renewals, cancellations, and subscription management.

Payment card and similar financial information may be collected and processed directly by our third-party payment processors. We generally do not store full payment card numbers.

3.8 Communications and Support Information

We may collect information contained in:

• support tickets;
• email correspondence;
• chat messages;
• feedback and survey responses;
• product inquiries and commercial communications;
• meeting notes; and
• other communications submitted to us.

3.9 Device, Usage, and Technical Information

We may automatically collect technical and usage information, such as:

• IP address;
• browser type and version;
• device identifiers;
• operating system;
• language preferences;
• referral URLs;
• session information;
• feature interaction data;
• log files;
• error reports; and
• cookie and similar technology data.

3.10 Inferences and Generated Outputs

We may create or derive inferences, summaries, scores, recommendations, draft content, and other outputs based on information you provide or authorize us to process, including:

• match and fit assessments;
• resume alignment recommendations;
• skills recommendations;
• networking or outreach suggestions; and
• workflow prioritization outputs.

4. Sources of Personal Information

We may collect Personal Information:

• directly from you;
• automatically from your use of the Services;
• from documents, files, and content you upload;
• from third-party services, platforms, or integrations you connect or authorize;
• from service providers acting on our behalf; and
• from public or semi-public professional sources, to the extent permitted by applicable law and consistent with the Services you request.

5. Purposes of Processing

We may collect, use, disclose, and otherwise process Personal Information for the following business and commercial purposes:

5.1 To Provide and Operate the Services

Including to:

• create and administer user accounts;
• deliver core product functionality;
• enable job matching, scoring, tracking, and workflow support;
• support resume generation, resume tailoring, and related recommendations;
• support networking and outreach tools;
• support browser extension, auto-apply, and application-assistance features;
• enable integrations requested by users; and
• provide administrative and support functions.

5.2 To Personalize and Improve User Experience

Including to:

• tailor recommendations and outputs;
• improve relevance of job suggestions;
• personalize workflow experiences;
• improve interface design, usability, and product performance; and
• enhance recommendation quality and system effectiveness.

5.3 To Develop, Train, Test, and Improve the Services

Including to:

• analyze product performance;
• troubleshoot and debug errors;
• benchmark and evaluate feature quality;
• develop new product capabilities; and
• improve our systems, models, workflows, and service quality, subject to applicable law, contractual obligations, and any user-facing commitments we make.

We do not use your resume, your imported contacts, your email content, or your documents to train AI models, and we do not permit the AI providers we use to do so. When the Services send text to an AI provider to generate a score, a draft, or a summary, it is processed to produce your result and is not used to train that provider's models under our agreements with them.

5.4 To Communicate With You

Including to:

• provide transactional or administrative notices;
• send support responses;
• provide billing and subscription communications;
• notify users of product changes, platform updates, or security matters; and
• send marketing communications, where permitted by law and subject to applicable consent and opt-out requirements.

5.5 To Ensure Security, Integrity, and Compliance

Including to:

• detect, investigate, and prevent fraud, abuse, misuse, unauthorized access, and violations of our terms or policies;
• maintain system security and auditability;
• protect the rights, safety, and property of Clevera, Carir.ai, our users, and others; and
• comply with legal, regulatory, contractual, and enforcement obligations.

5.6 For Corporate and Operational Purposes

Including to:

• maintain business records;
• conduct audits and reviews;
• support financing, diligence, mergers, acquisitions, restructurings, or similar corporate transactions; and
• enforce our agreements and resolve disputes.

6. Legal Bases for Processing

Where applicable law requires a legal basis for processing, we may process Personal Information on one or more of the following grounds:

• performance of a contract or in order to take steps at your request before entering into a contract;
• compliance with legal obligations;
• our legitimate interests, including operating, securing, improving, supporting, and marketing the Services, except where such interests are overridden by your rights and interests; and
• your consent, where required by applicable law.

7. How We Disclose Personal Information

We do not sell your Personal Information, and we do not share it for cross-context behavioral advertising. We do not rent or trade your resume, your contacts, your application history, or any other Personal Information to data brokers, advertisers, recruiters, or employers. The only disclosures we make are the ones listed below.

We may disclose Personal Information to the following categories of recipients, subject to applicable law:

7.1 Service Providers and Contractors

We may disclose Personal Information to vendors, contractors, and service providers that perform services on our behalf, such as:

• cloud hosting providers;
• analytics providers;
• payment processors;
• communications providers;
• customer support tools;
• security and fraud-prevention vendors;
• document-processing vendors; and
• AI, automation, model, or workflow infrastructure vendors.

Such parties are generally authorized to use Personal Information only as necessary to provide services to us or as otherwise permitted by law.

7.2 Integrated Platforms and User-Directed Recipients

We may disclose Personal Information to third-party services, platforms, or integrations you choose to connect or instruct us to use, including job boards, employer systems, applicant tracking systems, payment services, professional networking services, and related platforms.

7.3 Employers, Recruiters, and Application Destinations

Where you direct us to assist with job application workflows or transmit your information, we may disclose relevant Personal Information to employers, recruiters, job platforms, or other recipients involved in that workflow.

7.4 Corporate Transaction Recipients

We may disclose Personal Information in connection with an actual or proposed merger, acquisition, financing, asset sale, reorganization, bankruptcy, dissolution, or similar corporate transaction involving Clevera or its assets.

7.5 Legal, Compliance, and Protective Disclosures

We may disclose Personal Information where we believe in good faith that such disclosure is necessary or appropriate to:

• comply with applicable law, regulation, legal process, or enforceable governmental request;
• enforce our agreements, policies, or terms;
• detect or prevent fraud, security issues, or technical issues; or
• protect the rights, property, safety, or security of Clevera, Carir.ai, our users, or others.

8. AI-Assisted and Automated Features

The Services may include automated, algorithmic, or AI-assisted functionality, including features that analyze documents, compare resumes to job descriptions, generate scores or recommendations, suggest skills, draft content, or prioritize workflows.

You acknowledge and agree that:

• such outputs may be probabilistic, inferred, incomplete, inaccurate, or otherwise imperfect;
• such outputs are intended to assist users and should be independently reviewed by the user before being relied upon;
• neither Clevera nor Carir.ai represents or warrants that any score, recommendation, draft, or output is accurate, complete, legally sufficient, non-infringing, or suitable for any particular purpose; and
• except where expressly stated, the Services do not make employment decisions on behalf of employers.

9. Cookies and Similar Technologies

We and our service providers may use cookies, pixels, SDKs, local storage, and similar technologies to:

• authenticate users;
• remember preferences;
• analyze usage and performance;
• improve product functionality;
• support marketing and attribution;
• measure effectiveness of communications; and
• maintain security and fraud prevention.

Where required by law, we will provide notice, obtain consent, or offer applicable choices regarding these technologies.

10. Data Retention

We retain Personal Information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, including for the duration of your account relationship, to provide requested Services, to comply with applicable law, to resolve disputes, to enforce our agreements, and to maintain appropriate business, tax, legal, accounting, and security records.

Retention periods may vary depending on the type of information, the purpose of processing, legal requirements, and operational necessity. We may delete, de-identify, anonymize, or aggregate information when it is no longer reasonably necessary for an identifiable purpose.

11. Data Security

We implement reasonable administrative, technical, and organizational safeguards designed to protect Personal Information against unauthorized access, acquisition, disclosure, alteration, and destruction. Such measures may include access controls, encryption where appropriate, logging, monitoring, secure development practices, and vendor oversight.

Notwithstanding the foregoing, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. International Transfers

Your Personal Information may be transferred to, stored in, and processed in jurisdictions other than your own, including jurisdictions that may not provide the same level of data protection as your home jurisdiction.

Where required by applicable law, we will implement appropriate safeguards for cross-border transfers.

13. Your Rights and Choices

Depending on your jurisdiction, you may have certain rights with respect to your Personal Information, including the right to:

• request access to Personal Information;
• request correction of inaccurate Personal Information;
• request deletion of Personal Information;
• object to or restrict certain processing;
• request portability of certain Personal Information;
• withdraw consent, where processing is based on consent; and
• opt out of certain marketing or targeted advertising practices.

You may also update certain account information directly through the Services where functionality permits.

To exercise applicable privacy rights, please contact us using the details provided below. We may need to verify your identity before acting on a request. We may deny requests where permitted by law.

14. California Privacy Notice

Clevera is a California corporation. If you are a California resident, you may have rights under applicable California privacy laws, including rights to know, access, correct, delete, and opt out of certain disclosures of Personal Information, subject to statutory exceptions.

If required for our operations, this Privacy Policy may be supplemented by a standalone California Notice at Collection and additional California-specific disclosures.

15. European Economic Area, United Kingdom, and Similar Jurisdictions

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction providing similar rights, you may have the right to lodge a complaint with your local supervisory authority. Where required, we may designate an EU or UK representative or provide supplemental notices addressing region-specific requirements.

16. Children's Privacy

The Services are not directed to children under the age of 13, and we do not knowingly collect Personal Information from children under 13 except as permitted by law. If we become aware that we have collected Personal Information from a child in violation of applicable law, we will take reasonable steps to delete such information.

17. Third-Party Links and Services

The Services may contain links to third-party websites, services, or tools. We are not responsible for the privacy, security, or data practices of such third parties. Your interactions with such services are governed by their own terms and privacy policies.

17b. Imported Contacts (LinkedIn Connections Export)

You may upload the connections export that LinkedIn provides to you (typically a Connections.csv file, delivered inside a ZIP archive). When you do, we read only the columns needed to recognise a warm path - first and last name, company, position, the public profile link, and the date connected - and store them on your account. We do not contact the people in the file, we do not show them to other members, we do not look them up elsewhere, and we do not sell, share, or otherwise disclose them. You can remove the imported contacts at any time from the Networking page, by source or entirely, and they are deleted when your account is deleted. You are responsible for ensuring you may upload the file; see the Acceptable Use Policy.

17a. Google User Data (Gmail Inbox Tracking)

If you choose to connect your Gmail account, Carir AI requests read-only access (the gmail.readonly scope) solely to identify job-application emails - interview invitations, rejections, and offers - from companies you already track, and to update your application tracker accordingly.

Carir AI's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically: (a) we only examine messages that match companies present in your tracker; (b) classification happens in memory and no email content - subjects, bodies, or snippets - is ever stored on our servers; (c) Google user data is never used for advertising, never sold, and never transferred to third parties except as necessary to provide the tracking feature you enabled; (d) limited email excerpts may be processed transiently by our AI service provider solely to classify a message's stage, and are not retained by us; (e) humans do not read your email except with your explicit consent for support, or as required for security or legal compliance; (f) disconnecting Gmail immediately and permanently deletes the stored access credential.

18. Changes to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time. If we make changes, we will post the updated version on the relevant site or service and update the “Last Updated” date above. Where required by applicable law, we will provide additional notice or obtain consent.

19. Contact Information

If you have questions about this Privacy Policy or wish to exercise applicable rights, you may contact us at:

Email: corporate@carir.ai
Support: corporate@carir.ai