Privacy Policy

The Career Machine ("we," "our," or "us") is operated by Cyber Toddler. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at thecareermachine.com and all related services. Please read this policy carefully. If you disagree with its terms, please discontinue use of our platform.

We collect information you provide directly to us: Account Information: When you create an account, we collect your name, email address, and authentication credentials. Billing and Transaction Data: When you purchase a subscription, payment transactions are handled directly by our certified third-party payment processors (PayU or PayPal). We retain basic transaction metadata (order IDs, currency, billing cycle, and expiration timestamps) to manage your subscription. We never store or process your full payment card numbers or banking passwords on our servers. Profile Information: Career profile data including your current job title, target role, years of experience, education, skills, portfolio links, and preferred coaching language. Resume Data: If you upload or build a resume, we process its contents to extract skills, calculate ATS scores, and provide optimization feedback. Usage Data: We collect information about how you interact with our platform, including features used, search queries, and session metrics. Job Application Data: If you use our application tracker, we store records of roles you have saved or applied to. AI Conversations: We store your conversations with our AI Career Coach to provide personalized, contextual career guidance across multiple sessions. We do NOT collect: • Social security numbers or national government IDs • Sensitive health or biometric data

We use the information we collect to: • Provide, operate, and maintain our career intelligence platform • Manage your active subscription, renewals, and billing records • Calculate your employability score, skill gap analysis, and market readiness • Match your profile with relevant job opportunities • Deliver personalized 24/7 AI career coaching • Generate tailored learning roadmaps to close specific skill gaps • Send payment confirmations, renewal reminders, and account alerts • Maintain platform security and prevent unauthorized access • Comply with statutory legal and accounting obligations We do NOT: • Sell or rent your personal data to third-party brokers • Use your private resume or career data for third-party advertising • Share your profile with employers without your explicit consent • Use your private career data to train public AI models

We do not sell, trade, or rent your personal information to third parties. We share information only with trusted service providers who assist in operating our platform under strict data protection agreements: • Supabase (encrypted database and authentication) • Vercel (frontend hosting and edge network) • Render (backend API hosting) • PayU & PayPal (PCI-DSS compliant payment processing) • Resend (transactional emails, payment confirmations, and alerts) • Google & Groq (AI model inference for coaching and analysis) All service providers are contractually obligated to protect your data and process it solely under our instructions. Legal Disclosures: We may disclose information if required to do so by applicable law, court subpoena, or governmental regulation. Business Transfers: If Cyber Toddler is involved in a merger, acquisition, or asset sale, your data may be transferred as a business asset. We will notify you before your data becomes subject to a different privacy policy.

We implement technical and organizational security measures to safeguard your personal information: • End-to-end encrypted data transmission using HTTPS/TLS • Supabase Row Level Security (RLS) policies for strict user-level data isolation • Secure session management via Supabase Auth • Regular infrastructure monitoring and vulnerability management • Role-based internal access controls limiting data access to authorized personnel While we maintain industry-standard security safeguards, no method of electronic transmission or cloud storage is 100% immune to risk. We encourage you to use a strong, unique password for your account.

Depending on your jurisdiction, you have the following rights regarding your personal data: Right to Access: Request a copy of the personal data we hold about you. Right to Rectification: Correct inaccurate or incomplete profile details at any time in your Account Settings. Right to Erasure: Request permanent deletion of your account and personal career data. Right to Portability: Request an export of your career profile and application history in a structured format. Right to Withdraw Consent: Opt out of non-essential communications or withdraw processing consent where applicable. To exercise any of these rights, email us at contact@cybertoddler.com. We review and process verified requests within 30 days. EU/UK Residents (GDPR): Our lawful bases for processing are the performance of our contract (providing your subscription), our legitimate business interests, and your consent. California Residents (CCPA/CPRA): We do not sell your personal information. You have the right to request disclosure and deletion of your data without discriminatory treatment.

We use cookies and browser storage technologies strictly to: • Authenticate your session and keep you securely logged in • Retain your selected preferences (e.g., UI theme, currency choices) • Monitor essential platform performance and usage metrics Essential Cookies: Necessary for the platform and billing systems to function. Analytics: Anonymous usage analytics to improve feature performance. We do not use third-party behavioral advertising cookies and do not track your activity across unrelated websites.

We retain your personal information for as long as your account remains active or as necessary to provide platform services. Upon account deletion or subscription cancellation: • Your active career profile, resume data, and AI chat history are purged within 30 days. • Statutory billing receipts and transaction IDs may be retained as required by tax and accounting laws. • Fully anonymized, aggregated market statistics may be retained to maintain platform scoring accuracy.

The Career Machine is intended for working professionals and students preparing for employment. We do not knowingly collect personal data from individuals under 16 years of age. If you believe a child under 16 has registered an account, please contact us immediately at contact@cybertoddler.com and we will delete the account and associated records.

We may update this Privacy Policy periodically to reflect enhancements to our services, payment options, or legal requirements. We will notify you of material changes by updating the "Last updated" date at the top of this page, displaying an in-app notice, or sending an email notification.

If you have questions or concerns regarding this Privacy Policy or our data protection practices, please contact our privacy team: Email: contact@cybertoddler.com Company: Cyber Toddler Product: The Career Machine Website: thecareermachine.com We respond to all privacy inquiries within 30 calendar days.