Privacy
Who holds what
A practice is the entity that collects assessment data from its clients. CareerAlign processes that data on the practice’s behalf. A client’s responses belong to the client, are visible to their own practitioner, and are never visible to any other practice.
What we collect
From a client: their name and email address, supplied by their practitioner in order to send an invitation; their answers to the assessment; and the scores, career matches, reports and career plans derived from those answers. From a practitioner: their name, email address, practice details and subscription status.
We collect this to deliver the assessment, produce results and reports for the practitioner, and administer the practitioner’s subscription. We do not use client responses for advertising, and we do not sell personal information.
Consent is the practitioner’s responsibility
CareerAlign does not currently capture consent from clients directly. The practitioner who invites a client is responsible for obtaining that client’s informed consent to complete an assessment and to have their responses processed through this platform, in line with their own professional and legal obligations.
We intend to add in-product consent capture. This page will be updated when it exists, not before.
Access, correction and deletion
You can ask us what personal information we hold about you, ask us to correct it, or ask us to delete it. Email hello@careeralign.com.au with “Privacy” in the subject line. These requests are currently handled manually rather than through a self-service tool, so please allow a few business days.
If you completed an assessment as a client, please also tell us which practice invited you, so we can locate your records. If you would prefer to raise the request with your practitioner instead, that is usually faster — they can act on their own client records directly.
Where your data is processed
We use the following providers. Some process data outside Australia.
- Supabase — database and authentication. Assessment responses, scores, reports and account records are stored in Sydney, Australia.
- Vercel — application hosting. Requests are served from Vercel’s global edge network, which includes servers outside Australia.
- Resend — sends invitation emails, which contain the client’s email address and their practice’s name. Processed in Tokyo, Japan.
- Stripe — subscription payments for practitioners. Stripe handles card details directly; CareerAlign never receives or stores them. No client assessment data is sent to Stripe.
- Microsoft — hosts our hello@careeralign.com.au mailbox, so anything you email us is processed there.
Artificial intelligence
No language model is involved in producing your results. Scoring and career matching are entirely deterministic: the same answers always produce the same scores and the same matches, and every figure can be traced back to the responses that produced it.
CareerAlign Coach is an optional tool for practitioners. It reads results that have already been calculated and writes a plain-English explanation of one career direction, to help a practitioner prepare for a conversation. It cannot change a score, a career match or a plan, and it is not shown to clients.
When a practitioner uses Coach, the assessment figures for that client and the career direction they selected are sent to an external AI provider. Your practitioner’s private notes are never sent. Any figure the model produces that does not appear in the stored results causes the explanation to be discarded rather than shown.
Security
Each practice’s data is isolated at the database level by row-level security, so a query made on behalf of one practice cannot return another practice’s records. Traffic is served over HTTPS. Access to client records requires an authenticated practitioner account belonging to that practice.
No system is immune to compromise. If a data breach occurs that is likely to cause serious harm, we will notify affected practices and act in accordance with our obligations under Australian law.
Retention
We retain client records for as long as the inviting practice holds an account with us, so that a practitioner can revisit a client’s history. We have not yet set a fixed retention period beyond that, and would rather say so than publish a number we do not enforce. You can ask us to delete records at any time using the contact above.
Cookies
We set cookies to keep you signed in and to carry a client through an assessment session. We do not run advertising or analytics trackers, and there are no third-party tracking cookies on this site.
Questions or complaints
Email hello@careeralign.com.au. We will acknowledge your message and tell you how we intend to deal with it. If you are not satisfied with our response, you can refer the matter to the Office of the Australian Information Commissioner at oaic.gov.au.