Security & Privacy

Your career information.
Private by design.

CHNGE is built so your profile, salary preferences, CVs, role assessments and application work stay inside your account unless you choose to share them.

What protects my information?

Account-owned records are protected by database access controls. Source and generated documents are stored privately, and document downloads require the signed-in owner and an active session. Sensitive service operations run through server-side controls rather than exposing privileged credentials to the browser.

CHNGE uses Supabase for authentication, database services and private document storage. The production database project is hosted in London. Website and application processing run on Vercel over HTTPS.

No online service can credibly promise zero security risk. CHNGE combines preventive controls with logging, access restrictions, monitoring and remediation of identified issues.

Can my employer or a recruiter see my profile?

No. CHNGE currently has no employer or recruiter account area with access to candidate profiles, salary information, CVs, searches or applications. Candidate workspaces are private to the account owner.

If you download a document and send it to an employer, recruiter or job site, that recipient's handling of the information is separate from CHNGE.

What does AI receive?

When you use an AI feature, CHNGE sends only the career material, vacancy information and instructions needed for that request. For example, a tailored application can use your saved career evidence, master CV and the target vacancy.

The current implementation routes AI requests through Vercel AI Gateway to OpenAI models. Generated drafts remain editable and separate from confirmed career facts. CHNGE does not automatically submit applications or silently add generated claims to your Career Profile.

Other service providers include Resend for email, PostHog EU for consent-gated analytics and Stripe for payments when purchasing is available. CHNGE stores payment references and status, not card details. See the privacy notice for purposes and data categories.

Is my data sold or used to favour employers?

No. The current product has no candidate-data sale, advertising-profile or recruiter-export integration. Employers cannot pay CHNGE to receive candidate records or to improve their position in a candidate's match results.

If CHNGE introduces an employer-facing service in future, it would require separate published terms and permissions. It would not retrospectively grant access to private candidate records.

What control do I have?

You can manage notifications in Account, download saved CVs and cover letters from My CV, and request access, correction, export or deletion of personal data from Account or by emailing info@chnge.life.

Paid access ending does not delete your saved career work. Data rights do not depend on having a paid plan.

For the full description of purposes, lawful bases, retention criteria, service providers, international processing and your rights, read the privacy notice.