Privacy Policy

Why CareerCompass holds information about you

CareerCompass compares what you tell us about your education, work and skills with what a goal you choose requires, and returns a skills profile, a gap report and a suggested learning path. Producing that diagnosis is the reason everything listed below is collected. It is used to run the product for you — not sold to anyone, and not used to target advertising. CareerCompass carries no advertising network and no third-party analytics.

What you give us

Account and sign-in

• Your email address, and your name if you provide one.
• Your password, stored only as a cryptographic hash — nobody at TennenX can read it or set it for you; we can only send you a reset link you complete yourself.
• Your Google account identifier, if you choose to sign in with Google.
• The IP address each sign-in session was created from, recorded with that session.

About you

• Your date of birth. It is used to check that you are 18 or older; an intake without a readable date of birth, or from someone under 18, is refused.
• Your gender, chosen from a list or described in your own words.
• Where you currently live, where you are from, and where you would like to work.

Your education and work

• Qualifications, institutions, boards, streams, subjects and marks; certifications, projects, olympiads and extracurriculars; portfolio, code and publication links.
• Employment history, roles and tenure, and the salary expectations you enter.

Your own words

• Free-text answers in the intake, and the evidence you write to justify a skill rating. Free text is stored as you typed it, so it holds whatever you choose to put in it.

Inclusion lenses — only if you turn them on

• An optional part of the intake asks about physical condition, mental-health context and neurodivergence, including free text you type into those fields. It exists so guidance can take your circumstances into account.
• It is collected only when you switch on the inclusion-lens consent — in the intake itself, or later on your account's privacy and consent screen. You can switch it back off there, and that step asks you to confirm.

Documents

• Where the product offers document upload, the files you upload — a resume, a transcript, or a certificate submitted as evidence — and what is read out of them.

What the product works out about you

The diagnosis is itself information about you, and it is stored: skill ratings — both the ones you give yourself and the ones inferred from your evidence — how confident the product is in each, gap reports, learning paths and suggested role trajectories. Your submitted intake is also kept as you sent it.

Who processes it, and where it is stored

The database holding everything above runs on a server in Bangalore, India, and is not reachable from the internet. Backups are encrypted and kept on a rolling basis so the product can be restored after a failure.

Parts of the work are done by services outside TennenX:

• AI model providers, which generate the evaluations and reports. The product is configured for Anthropic, OpenAI and Google (Gemini), and can be pointed at other services that expose a compatible interface; which one runs a given step is an administrator's setting. Voyage AIturns text into the numeric representations used for matching. The relevant parts of your profile and evidence are sent to whichever provider is configured and processed on that provider's systems, outside India.
• ZeptoMail, for transactional email such as verification and password resets.
• Sentry, for error reports. Request bodies, cookies, headers, query strings and identity context are stripped before an error leaves our server, and email-shaped strings are redacted. Session or screen recording is not installed.
• DigitalOcean, which hosts the server. Where document upload is available, files are held in object storage in the Singapore region: the provider has disabled new object storage in Bangalore, so the India-resident option we wanted is not currently available to buy.

What you can do about it

• Account → Privacy & consent — review and change the consent choices your account carries, including the inclusion lenses.
• Account → Your data — request an export, and the product assembles your intake, evaluations, skill ratings, goals, reports and paths into a file you can download. Or delete your account: it is disabled and every session is signed out immediately, and a permanent purge of your product data then runs in the background. Deletion cannot be undone.
• Correcting something — you can edit your own intake and submit it again. There is no separate correction request to make.

One limit worth stating plainly: a deletion does not reach a copy of your data already captured in an encrypted backup. Those copies age out as the backup cycle turns over. How deletion and backups should be reconciled is one of the open questions below.

What has not been decided yet

These are genuinely open. We would rather name them than print a number or a legal term nobody here has committed to:

• How long information is kept. No retention period has been set for candidate records, uploaded documents or backups.
• Whether a deletion request must also reach backups, and how that is reconciled with keeping backups intact.
• The legal terms — the basis relied on, and the treatment of sensitive free text, data residency and cross-border transfers.
• The formal rights process and who to complain to. No grievance officer has been appointed or published.

Counsel is reviewing all of them. When they are settled this interim notice is replaced, and the date at the top of the page changes with it.

Questions

For anything about this notice or about your information, write to tennenx.official@gmail.com.