Privacy Policy

1. Who We Are

Calibrate is operated by Olugbenga Gabriel Odeyemi, based in Alberta, Canada. For the purposes of data protection law, Calibrate is the data controller for the personal information collected through calibrateresume.com.

Contact information:

• General inquiries: hello@calibrateresume.com
• Privacy inquiries and data rights requests: privacy@calibrateresume.com
• Mailing address available upon request to privacy@calibrateresume.com

2. Scope of This Policy

This Privacy Policy applies to:

• The Calibrate website at calibrateresume.com and its subdomains.
• The AI-powered resume optimization service.
• The Application Management Service, where Calibrate's team submits job applications on your behalf.
• All communications between you and Calibrate.

This policy does not apply to third-party websites or services you access through links on our site. Those services have their own privacy policies, which we encourage you to review.

3. Information We Collect

3.1 Information You Provide Directly

When you use Calibrate, we collect information you give us, including:

• Account information: name, email address, password (hashed, never stored in plaintext).
• Professional information: resume content, work history, education, skills, certifications, cover letter content.
• Job search preferences: target roles, target industries, geographic preferences, salary expectations, companies to exclude.
• Application Management data (if you subscribe): pre-written answers to common application questions, proof points and accomplishments, work authorization status, diversity-related responses (only if voluntarily provided).
• Payment information: processed by Stripe. Calibrate does not store complete payment card details. We retain only the last four digits of your card, cardholder name, and billing zip code.
• Communications: messages you send us through contact forms, email, or support channels.

3.2 Information Collected Automatically

• Usage data: pages viewed, features used, time spent on the service, referring URL.
• Device and technical data: IP address, browser type, operating system, device identifiers.
• Cookies and similar technologies: see Section 10 below.

3.3 Information Generated By The Service

• AI-optimized resume outputs based on inputs you provide.
• Application logs: records of applications submitted on your behalf, including company name, role, timestamp, and confirmation screenshots.
• Email correspondence received at your Calibrate application address (yourname@apply.calibrateresume.com).

4. How We Use Your Information

Purpose	Data Used	Legal Basis
Deliver resume optimization	Resume content, target role information	Contract performance
Submit job applications	Full application profile, authorization document	Contract performance + explicit consent
Process payments	Name, email, payment information	Contract performance
Provide customer support	Contact information, service history	Contract performance
Improve the service	Aggregated usage data (not personal data)	Legitimate interest
Comply with legal obligations	Account records, transaction data	Legal obligation
Send marketing communications	Email address, communication preferences	Consent (opt-in only, revocable)

5. How We Share Your Information

Calibrate does not sell your personal information. We share data only in these specific circumstances:

5.1 With Our Associates (Application Management Service Only)

If you subscribe to the Application Management Service, Calibrate's Application Services Associates access your data to submit applications on your behalf. Associates are:

• Bound by a written Independent Contractor Agreement requiring strict confidentiality, indefinite post-termination.
• Permitted access only through Calibrate-approved systems.
• Prohibited from downloading, copying, or transmitting your data outside those systems.
• Located in Nigeria and potentially other countries. We will disclose the full list of associate locations upon request.

5.2 With Service Providers

We use third-party service providers to operate Calibrate. These providers process data only on our instructions and are bound by data protection agreements:

Provider	Purpose	Data Location
Stripe	Payment processing	United States
Vercel	Website hosting	United States and global edge network
Hostinger	Email and domain hosting	European Union
Missive	Shared email management	Canada
1Password	Secure credential storage (opt-in only)	Canada and United States
Anthropic	AI-powered resume optimization	United States
Google (Drive)	Application screenshots storage	United States

5.3 With Prospective Employers

When we submit applications on your behalf, the employer and their application system receive the information necessary for the application (resume, contact details, responses to their application questions). This is the purpose of the service you have purchased.

5.4 For Legal Reasons

We may disclose information if required by law, court order, or government request, or to protect our rights, your safety, or the safety of others. We will notify you of such disclosures unless legally prohibited from doing so.

5.5 In Business Transfers

If Calibrate is involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.

6. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence, including Canada, the United States, the European Union, and Nigeria. When we transfer personal data from the EU/UK to countries without an adequacy decision, we use Standard Contractual Clauses or equivalent safeguards. Upon request, we will provide a copy of the safeguards used for any specific transfer.

7. Data Retention

Data Category	Retention Period
Account information (while active)	Duration of your account
Application history after cancellation	90 days, then deleted unless you request otherwise
Payment and transaction records	7 years (tax and accounting requirements)
Signed consent documents	Account duration + 7 years
Email correspondence	90 days after subscription ends
Marketing preferences	Until you opt out or delete your account
Aggregated analytics	Indefinitely (not personal data)

8. Your Rights

Depending on your country of residence, you have the following rights regarding your personal data:

• Right to access: request a copy of the personal data we hold about you.
• Right to rectification: request correction of inaccurate data.
• Right to erasure (right to be forgotten): request deletion of your data, subject to legal retention requirements.
• Right to restriction: request that we limit how we process your data.
• Right to data portability: request your data in a machine-readable format.
• Right to object: object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent: withdraw any consent you have given at any time.
• Right to not be subject to automated decision-making: we do not use solely automated decision-making that produces legal or significant effects.
• Right to lodge a complaint: file a complaint with your local data protection authority.

8.1 Specific Rights for California Residents (CCPA/CPRA)

California residents have additional rights including the right to know what personal information is collected, the right to delete personal information, the right to correct inaccurate information, the right to limit the use of sensitive personal information, and the right to opt out of the sale or sharing of personal information. Calibrate does not sell personal information. To exercise any of these rights, contact privacy@calibrateresume.com.

8.2 Specific Rights for EU/UK Residents (GDPR)

EU and UK residents have the rights listed in Section 8 under the General Data Protection Regulation and UK GDPR. You have the right to lodge a complaint with your local Data Protection Authority if you believe your rights have been violated. Calibrate does not have a mandatory EU representative at this time, as processing volume does not meet the threshold; we will appoint one if and when required by law.

8.3 Specific Rights for Nigerian Residents (NDPA 2023)

Nigerian residents have rights under the Nigeria Data Protection Act 2023 including the rights to be informed, access, rectification, erasure, and objection. The supervisory authority is the Nigeria Data Protection Commission.

9. Security

We implement reasonable technical and organizational measures to protect your data, including:

• Encryption in transit (TLS 1.2 or higher) for all data moving between your browser and our systems.
• Access controls limiting who can view customer data, with role-based permissions.
• Credential isolation: customer passwords stored only in 1Password Business, never in Calibrate's own databases.
• Regular security reviews and dependency updates.
• Logging and monitoring of administrative access.

No system is 100% secure. If we detect a security breach affecting your personal data, we will notify you and, where required, the relevant data protection authorities, within the timeframes required by applicable law.

10. Cookies and Tracking

Calibrate uses cookies and similar technologies for:

• Essential functionality: authentication, session management. Cannot be disabled.
• Analytics: understanding how users interact with the site. Can be disabled through your browser or cookie consent banner.

We do not use advertising or cross-site tracking cookies. You can control cookies through your browser settings. Blocking essential cookies may prevent the service from working.

11. Children

Calibrate is not intended for users under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact privacy@calibrateresume.com and we will delete it.

12. Automated Decision-Making and AI

Calibrate uses AI systems (specifically Anthropic's Claude models) to generate resume optimizations, cover letter drafts, and application responses. These AI outputs are:

• Reviewed by you before submission when you use the self-service resume tool.
• Reviewed by a Calibrate Associate before submission when you use the Application Management Service.
• Never the sole basis for decisions that produce legal or significant effects on you.

You have the right to request human review of any AI-generated output that affects you.

13. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be:

• Posted on this page with an updated "Last Updated" date.
• Communicated to account holders by email at least 14 days before taking effect.
• Require renewed consent if the change materially affects how we process your data.

Your continued use of Calibrate after a change takes effect constitutes acceptance of the updated policy.

14. Contact and Complaints

If you are not satisfied with our response, you have the right to contact your local data protection authority. This policy is provided in English. Translations are available upon request but the English version governs in the event of conflict.