Privacy Policy

Last updated: August 2026

What we collect

EmployMD collects information you provide and limited technical data needed to run the service. Categories include:

  • Identifiers — name, email address, account ID
  • Professional / survey data — specialty, training level, preferences, geography interests, and other survey answers
  • Documents — CV/resume files you upload and text extracted from them
  • Derived career data — preference profiles, career guides, job evaluations, and related AI outputs we generate for you
  • Usage / diagnostics — page views, session tokens, approximate device/browser info, and error/performance signals (including analytics providers such as Vercel Analytics)
  • Communications — messages you send to our support or privacy inboxes

How we use it

We use your data to authenticate your account, generate your Preference Profile and Career Guide, evaluate jobs you submit, improve product reliability, and respond to your requests. We do not sell your personal information.

If you authorize placement or representation in the survey (for example, sharing your profile with prospective employers), we may share relevant preference and contact information for that purpose only. You can withdraw that authorization by updating your survey answers or contacting us.

AI processing

Survey responses and resume text are sent to AI providers (such as OpenAI and/or Anthropic) to generate your career analysis. Those providers process data under their own terms. Whether providers may use inputs for model training depends on the specific API plan and contractual settings we use — we configure providers to avoid training on customer content where the product option exists, but you should not assume a blanket “never trains” guarantee unless we confirm it in writing for your plan.

Data storage & security

Application data is stored in a Postgres database hosted by Supabase. Supabase (the infrastructure vendor) maintains SOC 2 Type II reports for its platform; that describes Supabase’s controls, not a SOC 2 certification of EmployMD itself. Resume files are stored in a private Supabase Storage bucket and are accessed via short-lived signed URLs, not public links. We retain your data while your account is active, and delete or de-identify it when you delete your account or when we no longer need it to provide the service (subject to legal retention requirements).

Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to withdraw consent where processing is consent-based. You can export or delete your account from Settings, or email privacy@employmd.com.

Contact

Questions about this policy? Email privacy@employmd.com or visit our contact page.