Trust, Security & Privacy

Our commitments

• Your conversations are yours: never sold, never shared with employers or recruiters, never used to advertise to you.
• We only claim what we can show: everything in our security practices below traces to evidence in our engineering records.
• If something goes wrong, we tell you: suspected breaches are assessed within 30 days and, if serious harm is likely, we notify affected users and the OAIC, in line with Australia's Notifiable Data Breaches scheme.

Information we collect

Conversation data

• Scout conversations: Your chat messages with Scout, our AI career guide
• Career information: Details about your work experience, skills, concerns, and career goals that you share during conversations
• Account information: Email address and basic profile information through our authentication provider

Feedback on Scout's replies

• Ratings: If you tap ❤️ or 👎 on one of Scout's replies, we save your rating and which reply it was on, as well as any written feedback you provide via the feedback button.

Technical information

• Usage data: How you interact with our platform, pages visited, time spent
• Device information: Browser type, operating system, IP address for security purposes
• Session data: Login times and platform usage patterns

How we use your information

Primary uses

• Career guidance: Analysing your conversations to provide personalised career transition advice
• Platform improvement: Understanding how users engage with Scout to enhance the experience
• Account management: Managing your access, saving conversations, and providing support
• Improving Scout: Reading your ratings and notes on Scout's replies to see what works and what needs changing

We do NOT

• Sell or trade our database: We never sell, rent or trade your personal information or our database, and we never share them with anyone for marketing or financial gain
• Share your conversations: Your Scout conversations are never shown to other users, employers or recruiters
• Use for marketing: We don't use your career information for advertising or marketing purposes

Security practices

Data storage

• Location: Your data is stored locally and securely using Supabase's Sydney region infrastructure with enterprise-grade security and encryption
• Retention: Conversations are kept for as long as your account is active, plus 90 days after account deletion
• Backups: Encrypted backups are maintained for disaster recovery purposes

Third-party services

AI processing

• Claude API: Your conversations are processed by Anthropic's Claude API (United States) to generate Scout responses
• AI request routing: Requests to Anthropic are routed through Vercel's AI Gateway, which acts as secure transit infrastructure. We enable its zero-data-retention and no-model-training options, so the gateway does not keep or learn from your conversation content
• Data handling: Anthropic processes conversations according to their privacy policy, does not train models on this data, and does not store your data permanently
• Backup AI providers: We maintain a tested backup set of models from other providers, so that if Anthropic is unavailable, or we ever have to move away from it at short notice, Scout keeps working end to end. Scout runs on Anthropic unless that happens. Because an outage gives no warning, the backup can be switched on without notice. While it is on, conversation content is processed by Microsoft Azure, Baseten, DeepInfra or Particle.AI (United States), or Together AI (North America), instead of Anthropic, under the same zero-data-retention and no-model-training options we enforce today. Every host the backup can route to is named on this page before it is ever needed, not after
• AI quality monitoring: We monitor the reliability and cost of our AI features using Langfuse (hosted in the European Union). This monitoring records technical measurements only (token counts, response times, model names, and pseudonymous identifiers that cannot be traced back to you without keys we hold). It does not record the content of your conversations

Authentication

• Clerk: We use Clerk for secure user authentication and account management
• Information shared: Only basic account information necessary for authentication

Analytics

• Usage analytics: We use privacy-focused analytics to understand platform usage
• Product analytics: We use PostHog (hosted in the European Union) to understand how people move through Career Convoy (for example, whether someone starts a Scout conversation, reaches the paywall, or views a report). This involves a pseudonymous identifier and standard technical metadata (device, browser, page) that cannot be traced back to you without keys we hold. It never includes your conversation content.
• Session recording: We use Sentry to record a sample of sessions (currently 10%, plus any session where an error occurs) with all visible text masked, to help us diagnose technical problems.

Services we rely on

These providers process data on our behalf. Each one is tracked in our internal vendor register with its agreements and an exit plan.

• Vercel: Application hosting. Data touched: Request traffic, plus operational logs recording technical events against a one-way hash of your account ID.
• Supabase: Database. Data touched: Account-linked conversation and profile data, and your ratings and notes on Scout’s replies.
• Clerk: Sign-in and account management. Data touched: Name, email, authentication identifiers.
• Stripe: Payments (hosted checkout). Data touched: Payment and billing details (held by Stripe, not us).
• Loops: Sending email to customers. Data touched: Your name, email address and account ID, copied from our sign-in provider. Once we send email, whether you open it and which links you click.
• Anthropic: AI processing (Scout runs on Claude). Data touched: Conversation content, transiently, to generate responses.
• Vercel AI Gateway: Routing Scout’s requests to whichever AI provider is serving them. Data touched: Conversation content in transit only. We switch off storage and model training on every request we send.
• Microsoft Azure: Backup AI processing (fact extraction), only if Scout has to move off Claude, for example during an Anthropic outage. Data touched: Conversation content, transiently (only while the backup is switched on, which happens without notice if Claude becomes unavailable). The same no-storage, no-training terms apply.
• Baseten / DeepInfra: Backup AI processing (career directions), on the same condition. Data touched: Conversation content, transiently (only while the backup is switched on, which happens without notice if Claude becomes unavailable). The same no-storage, no-training terms apply.
• Particle.AI / Together AI: Backup AI processing (Scout chat, your report, and a quality check), on the same condition. Data touched: Conversation content, transiently (only while the backup is switched on, which happens without notice if Claude becomes unavailable). The same no-storage, no-training terms apply.
• Sentry: Error monitoring. Data touched: Technical error reports.
• Langfuse: Monitoring Scout’s quality, speed and cost. Data touched: Technical measurements such as timings and token counts, against a one-way hash of your account ID. Conversation content is blocked from this in production.
• PostHog: Product analytics (which features people use and how they found us). Data touched: Feature-usage events against a one-way hash of your account ID, plus checked campaign labels and the referring site's hostname from tagged links (potentially personal information), and, before you sign in, anonymous page views (the page address without its query string, plus browser and device type) and one landing event per tagged arrival, all of which may merge into your profile on sign-in. No IP address, no conversation content.
• Slack: Internal operations notifications. Data touched: Pseudonymous session activity signals (one-way aliases, counts, timestamps) and alerts that a reply was rated or a note was sent. Never conversation content or the words of a note.
• Cloudflare Turnstile: Bot protection on forms. Data touched: Challenge tokens.

How we use AI with your data

• Scout, our career guide, runs on Anthropic’s Claude models. Your conversation content is sent to Anthropic’s API, routed through Vercel’s AI Gateway, solely to generate Scout’s responses, career directions, and your report.
• Under Anthropic’s commercial terms, data sent to their API is not used to train their models. We also switch off storage and model training explicitly on every request we send.
• We keep a tested backup set of models from other providers so that if Claude is unavailable, or we ever have to move away from it at short notice, Scout keeps working end to end. Scout runs on Claude unless that happens. Because an outage gives no warning, it can be switched on without notice, which is why every host it can route to is already named in the list above, and why it runs under the same no-storage, no-training terms as Claude.
• Scout’s guidance is exactly that, guidance to inform your own decisions. It is never an automated decision made about you, and it is never shared with employers or recruiters.
• If you have questions about how Scout produced something, contact us and a human will answer.

Your rights & control

Access & management

• View conversations: Access all your Scout conversations through your account
• Download data: Request a copy of all your personal data
• Correct information: Update or correct any personal information in your account

Privacy controls

• Delete conversations: Remove individual conversations or all conversation history
• Account deletion: Delete your entire account and all associated data
• Data portability: Export your data in a machine-readable format

Exercising your rights

Contact us at privacy@careerconvoy.com.au to:

• Request access to your personal data
• Correct or update your information
• Delete your account and data
• Ask questions about this privacy policy

Data sharing & disclosure

Service providers

To run Career Convoy, some companies process your information on our behalf. Anthropic generates Scout's replies from your conversation, Supabase stores it, and every other provider is named on this page. Each one processes your information only to provide our service, under its agreement with us.

Other sharing

Beyond those service providers, we only share your information when:

• Legal requirement: Required by law, regulation, or legal process
• Safety concerns: Necessary to protect the safety of our users or others
• Business transfer: In the event of a merger, acquisition, or sale of assets (with privacy protections maintained)

Never sold or shared for gain

• Conversation content: Your Scout conversations are only processed by the service providers above, to run Scout. They're never shared for any other reason
• Career information: Your personal career details, concerns, and goals remain confidential
• Identity information: We do not share identifying information with advertisers, data brokers, or other third parties for marketing purposes
• Employers and recruiters: Your conversations, career information, and waitlist details are never shared with employers, recruiters, or any related business, including any recruitment firm connected to Career Convoy's founder. Nothing you share here flows to a recruiter, ever.

Children's privacy

Career Convoy is for users 18 and older. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected such information, we will delete it promptly.

International users

Career Convoy's application runs on servers located in Australia (Sydney). Some of the service providers named above process data overseas: conversation content is processed by Anthropic in the United States (in transit via Vercel's AI Gateway with retention and training disabled), our authentication and payment providers (Clerk, Stripe) process account data internationally, and our AI quality monitoring (Langfuse) processes technical telemetry, never conversation content, in the European Union. By using our platform, you consent to these transfers.

Automated decision-making

Scout is an AI guide. The career directions and the Career Transition Report you receive are generated by an automated system based on what you share in the conversation. These are intended as guidance to inform your own decisions, not as a determination made about you. You can contact us with any questions about how Scout generates its guidance.

Changes to this page

We may update this page periodically. When we make changes:

• Email notification: We'll email you about significant changes
• Platform notice: Important changes will be highlighted when you log in
• Effective date: Changes take effect on the date listed at the top of this page

Contact us