Privacy Policy

1. Who we are

10xCareer.ai is operated by Social Protocol Labs LLC, a Delaware limited liability company (“Company,” “we,” “us”). This policy explains how we collect, use, and protect your information.

2. Information we collect

Information you provide:

• Email address when you sign up or purchase
• LinkedIn profile content (if you paste it or upload a PDF export)
• Resume or CV content (PDF, DOCX, or text)
• Answers to assessment questions
• Payment information (processed by Stripe — we do not store card numbers)
• Gift purchase details: purchaser email, recipient email, recipient first name, optional personal message

Information collected automatically:

• Device and browser information
• Pages visited and features used
• IP address and approximate location

3. How we use your information

• Generate personalized career assessments and recommendations
• Process payments and send receipts
• Deliver gift redemption emails to recipients
• Send transactional emails (account, assessment results, gift notifications)
• Improve the Service, fix bugs, and understand feature usage
• Comply with legal obligations

We do not use the substance of your resume, LinkedIn text, assessment answers, or chat messages to train our own AI models. If that changes, we will ask for separate opt-in consent first.

4. Gift Assessment data

When a Gift Assessment is purchased, we collect the purchaser’s email, the recipient’s email and first name, and an optional personal message. This data is used to deliver the gift, send redemption and confirmation emails, and process refunds.

The recipient’s assessment results, career paths, and coaching session content are private to the recipient. We do not share any recipient data with the purchaser unless the recipient explicitly opts in. The purchaser receives only: purchase confirmation, redemption notification, and (if the recipient consents) information the recipient chooses to share.

5. Third-party processors

We share data with these processors to operate the Service:

• OpenAI — AI analysis of profile, resume, questionnaire, job-scan, and chat content. Privacy Policy
• Google Gemini / Google Generative AI — Alternate AI provider for analysis of the same content categories; the model used may vary by configuration. Privacy Policy
• Google Cloud — Cloud Run hosting and Firestore rate-limiting/abuse prevention, including IP addresses and request metadata. Privacy Notice
• Stripe — Payment processing. We do not store card details. Privacy Policy
• Supabase — Authentication and database. Privacy Policy
• Resend — Email delivery. Privacy Policy

We do not sell your personal information or share it for cross-context behavioral advertising.

6. Data retention

• Account data: retained while active and up to 3 years after deletion
• Assessment results: 3 years from creation
• Payment records: 7 years (tax and legal compliance)
• Gift code records: 3 years from purchase date
• Email communications: 2 years

You may request deletion at any time by emailing legal@10xcareer.ai.

7. Cookies

We use essential cookies for authentication, security, CSRF protection, and checkout. We may use preference cookies for settings. We do not currently deploy third-party advertising or analytics trackers. You can control cookies through your browser settings; disabling essential cookies may affect functionality.

8. International transfers

The Service is operated from the United States, and many of our processors are US-based. If you access the Service from outside the US, your data may be transferred to and processed in the US. Where required, we rely on appropriate safeguards in our provider agreements and continue to review transfer requirements with counsel.

9. Security

We use encryption in transit (TLS), secure authentication via Supabase, access controls on a need-to-know basis, and regular security assessments. No system is perfectly secure; we cannot guarantee absolute security.

10. Your rights

Depending on your location, you may have the right to:

• Access a copy of your personal data
• Correct inaccurate data
• Delete your data
• Object to processing
• Port your data in a machine-readable format
• Withdraw consent for marketing at any time

To exercise any right, email legal@10xcareer.ai. We verify the request, usually by confirming control of the email address on file, and respond within one month unless the request is unusually complex.

Marketing emails include an unsubscribe link. Transactional account, purchase, assessment-result, gift, and support emails may still be sent when needed to provide the Service.

11. Children

The Service is intended for users 18 and older. Gift Assessment purchasers and recipients must confirm the recipient is 18 or older before redemption. Do not submit a minor's personal information through the Service. If you believe a child's data has been submitted, contact us immediately and we will review and delete it where appropriate.

12. Changes

We may update this policy by posting a revised version and updating the date above. For material changes we will notify you by email.

13. Contact

Social Protocol Labs LLC
Email: legal@10xcareer.ai