Legal
Privacy Policy
Last updated: July 2026 · Governing jurisdiction: Florida, USA
AiProof CareersHub ("we", "us", or "our") is operated by Kinson Digital Hub LLC, Jacksonville, FL, USA. This policy explains what personal data we collect, why we collect it, how it is stored, and your rights regarding that data. We comply with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and applicable US data privacy standards.
1. What Data We Collect
- Email address — collected when you complete the career quiz and enter your email, subscribe to our newsletter, send us a message through the contact form, or buy a paid product (from your Stripe checkout).
- Contact form submissions — if you use the "Send a Message" form, we store the name, email address, reason for contact and full message you enter, so that we can reply to you and keep a record of the conversation. Sending a message does not subscribe you to our newsletter; that is a separate tick-box you must opt into.
- Newsletter profile tags — when you enter your email on the diagnostic results screen, we attach two non-identifying tags to your newsletter record: which persona you selected (student, professional or manager) and your AI-exposure band (lower, moderate or high). We use these only to send relevant career content. We do not attach your job title, tasks or score.
- Career quiz answers — your job title or field of study, task descriptions, years of experience, skills, and location. For the free score, these are saved in your browser's
localStorage and sent to Anthropic's API for analysis, but are not retained on our servers. If you purchase a Personalised 90-Day AI Career Action Plan, the details you entered and the generated report are stored on our servers (hosted on Netlify) so that your private report link keeps working on any device.
- Payment information — if you purchase a paid product, payment is processed by Stripe. We do not store card numbers or payment credentials. We receive and store a confirmation that payment was successful and the email address you used at checkout (to prevent duplicate charges and to help you recover your purchase).
- Analytics data — Google Analytics 4 (GA4), measurement ID
G-B7HWQ0TSL8, collects usage data including pages visited, time on page, referring site, device and browser type, and approximate geographic location derived from your IP address. GA4 does not load at all until you press "Accept Analytics" on our cookie banner — if you decline, or ignore the banner, no Google Analytics script is loaded and no analytics cookies are set. This processing is subject to Google's own privacy policy.
- Account data — if you create an account after purchasing a paid report, Clerk stores your email address and payment confirmation status.
2. Why We Collect It (Legal Basis)
- Email address — collected with your consent to deliver your diagnostic report and, if opted in, our career intelligence newsletter. Legal basis: consent (GDPR Art. 6(1)(a)).
- Payment confirmation — processed to fulfil the paid service contract. Legal basis: performance of a contract (GDPR Art. 6(1)(b)).
- Analytics — used to improve the platform. Legal basis: legitimate interest (GDPR Art. 6(1)(f)) for aggregated analytics; consent for cookies where required.
3. Third-Party Data Processors
We use the following third-party services to operate the platform. Each is a data processor acting under our instructions:
- MailerLite (mailerlite.com) — stores your email address and handles newsletter delivery. Servers in the EU. MailerLite Privacy Policy.
- Stripe (stripe.com) — processes one-time payments. Stripe Privacy Policy.
- Netlify (netlify.com) — hosts the website and serverless functions, and stores purchased diagnostic reports (including the career details you entered) so your report stays retrievable, payment-confirmation records (a Stripe session reference and your checkout email), and any message you send through our contact form. Server logs (IP addresses, request paths) are retained for 30 days. Netlify Privacy Policy.
- Anthropic (anthropic.com) — powers the AI diagnostic report. Your quiz answers are sent to Anthropic's API to generate a personalised report. Anthropic does not use API inputs for model training by default. Anthropic Privacy Policy.
- Google Analytics (google.com/analytics) — collects website usage analytics (GA4 property
G-B7HWQ0TSL8), and only after you have given consent on our cookie banner. Google Privacy Policy.
- Calendly (calendly.com) — used to schedule your session if you purchase the paid consultation. When you book, Calendly collects your name, email address and chosen time slot directly. We only send you to Calendly after Stripe confirms your payment. Calendly Privacy Policy.
- Clerk (clerk.com) — provides user authentication and account management for users who create an account after purchasing a paid diagnostic report. Stores your email address, account details, and payment confirmation status. Clerk Privacy Policy.
4. Cookies
We use the following cookies:
- _ga, _gid, _ga_* — set by Google Analytics 4 (property
G-B7HWQ0TSL8) for traffic analysis, and only after you accept analytics on the cookie banner. Duration: up to 2 years. Decline, and these are never set.
- apch_state_v2 (and legacy apch_state, apch_lite_state, apch_result) — set by our own site in browser
localStorage (not cookies). Used to save your diagnostic progress across the Stripe payment redirect. You can clear them at any time by restarting the diagnostic or clearing site data. They do not leave your device except as described in section 1.
- Cookie consent preference — stored in
localStorage to remember your analytics consent choice.
You can control or delete cookies through your browser settings at any time. Disabling analytics cookies will not affect your ability to use the diagnostic tool or receive your report.
5. Data Retention
- Email address — retained in MailerLite until you unsubscribe or request deletion.
- Free quiz answers — not retained server-side; they live only in your browser's localStorage.
- Purchased reports — the report and the career details inside it are retained on our servers so your report link keeps working. Email aiproofcareershub@gmail.com at any time to have a report and its data deleted.
- Payment records — retained by Stripe per their standard retention policy (typically 7 years for financial records).
- Contact form messages — retained for up to 24 months so we have a record of the conversation, then deleted. Email aiproofcareershub@gmail.com to have your message deleted sooner.
- Server logs — retained by Netlify for approximately 30 days.
- Analytics data — retained in Google Analytics for 14 months from your last visit, then automatically deleted by Google.
- Consultation bookings — retained by Calendly until you or we cancel the booking; your calendar record is kept for our own scheduling history.
- Account data (Clerk) — retained until you request account deletion. Email aiproofcareershub@gmail.com to delete your Clerk account and all associated authentication data.
6. Your Rights (GDPR — EU/EEA Users)
If you are located in the European Union or European Economic Area, you have the following rights:
- Right to access — request a copy of the data we hold about you.
- Right to erasure — request deletion of your personal data (email address from MailerLite, etc.).
- Right to rectification — request correction of inaccurate data.
- Right to portability — receive your data in a machine-readable format.
- Right to object — object to data processing for legitimate interest or direct marketing.
- Right to withdraw consent — withdraw consent at any time (e.g., unsubscribe from the newsletter).
To exercise any of these rights, email us at aiproofcareershub@gmail.com. We will respond within 30 days.
7. Your Rights (CCPA — California Residents)
If you are a California resident, you have the right to:
- Know what personal information we collect and how it is used.
- Request deletion of your personal information.
- Opt out of the sale of personal information. We do not sell personal information.
- Non-discrimination for exercising these rights.
To submit a CCPA request, email aiproofcareershub@gmail.com with the subject line "CCPA Request".
8. Data Security
We implement industry-standard security measures including HTTPS encryption on all pages, server-side storage of all production secrets (Anthropic API key, Stripe secret key, MailerLite key — stored exclusively in Netlify environment variables), HMAC-signed payment tokens, and CORS restrictions limiting API access to our domain. A non-secret site identifier is embedded in client-side JavaScript by design to authenticate frontend calls to our serverless functions; it is not a credential and does not provide access to any third-party systems. However, no method of electronic transmission or storage is 100% secure. We encourage you to use strong, unique passwords and report any security concerns to us promptly.
9. International Data Transfers
Our service providers (Netlify, MailerLite, Stripe, Anthropic, Google, Clerk) may process your data in the United States and the European Union. We rely on Standard Contractual Clauses and the Data Privacy Framework where applicable to ensure lawful transfer of data from the EU.
10. Children's Privacy
Our platform is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected such data, please contact us immediately at aiproofcareershub@gmail.com.
11. Changes to This Policy
We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the platform after changes constitutes acceptance of the updated policy.
12. Contact
For any privacy questions, data requests, or concerns: