Privacy Policy

AltairPath ("we," "our," or "us") is committed to protecting your personal information. This Privacy Policy explains what data we collect, why we collect it, how we use it, and your rights regarding your data. By using AltairPath, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please discontinue use of the Service.

We collect the following categories of information: Account & Identity Data • Name, email address, and password (hashed) provided during registration • Profile information you voluntarily add (job title, industry, location, career goals) Career & Application Data • Job applications you track, including company, role, status, and notes • Resume content you upload or paste for analysis • Interview preparation responses and coaching session data • Job descriptions you paste or import via URL Usage & Technical Data • Pages visited, features used, and interaction patterns within the app • Device type, browser, operating system, and IP address • Session timestamps and duration • Error logs for debugging purposes Payment Data • Subscription and billing information is processed by Stripe. We do not store full credit card numbers. We receive only transaction status, plan tier, and billing period from Stripe. Job Discovery Data • Job searches and discovery interactions, including which job sources you browse and click on • Job match scores and AI-generated recommendations based on your profile

We use the information we collect to: • Provide, maintain, and improve the AltairPath platform and its AI features • Generate personalized job match scores, resume recommendations, and interview coaching • Send account-related notifications (password resets, subscription confirmations) • Respond to your support requests or feedback • Monitor and analyze usage patterns to improve platform performance and UX • Comply with applicable legal obligations We do not use your personal data for advertising, profiling for third-party marketing, or any purpose not described in this Policy.

We only share your data in limited and specific circumstances: Anonymized & Aggregated Data Only We may share anonymized, aggregated, statistical data with partners, researchers, or the public for purposes such as market research, industry benchmarking, and platform improvement. This data cannot be used to identify you individually. We do not share personally identifiable information — including your name, email, resume, or specific job applications — with any third party without your explicit consent. Service Providers We work with trusted third-party service providers who help us operate the platform: • Firebase / Google Cloud — database, authentication, and cloud functions • Stripe — payment processing • Resend — transactional email delivery (notifications, account-related communications) • Google Gemini — AI-powered analysis (job descriptions and prompts are processed; your identity is not transmitted) These providers are contractually bound to handle your data securely and only as instructed by us. Legal Requirements We may disclose your information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of AltairPath, our users, or the public. We do not sell your personal data. Ever.

AltairPath uses AI (powered by Google Gemini) to generate career insights, match scores, interview questions, resume suggestions, and coaching feedback. When you submit job descriptions, resume content, or answers for AI analysis: • The content is sent to Google Gemini's API to generate a response • We do not send your name, email address, or account identifiers with AI requests • AI-generated outputs are returned to you and stored in your account for your reference • We do not use your resume or application data to train third-party AI models AI outputs are guidance only and do not constitute professional legal, financial, or career advice.

We retain your data for as long as your account remains active or as needed to provide you with the Service. • Account data: Retained until you delete your account • Application and career data: Retained in your account until you delete it or close your account • Usage logs: Retained for up to 12 months for analytics and debugging • Payment records: Retained as required by financial regulations (typically 7 years) You may request deletion of your data at any time by emailing [email protected]. We will process your request within 30 days.

We implement industry-standard security measures to protect your data: • All data transmitted to and from AltairPath is encrypted via TLS (HTTPS) • Passwords are hashed using Firebase Authentication — we never store plaintext passwords • Database access is restricted to authenticated services and authorized personnel only • Payment data is handled entirely by Stripe and never stored on our servers While we take reasonable steps to protect your data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

AltairPath uses cookies and similar technologies to: • Maintain your authenticated session • Remember your preferences (theme, view settings) • Analyze usage patterns via anonymized analytics We do not use third-party advertising cookies or behavioral tracking cookies. You can manage cookie preferences through your browser settings. Disabling cookies may affect some functionality of the Service.

Depending on your location, you may have the following rights regarding your personal data: • Access: Request a copy of the personal data we hold about you • Correction: Request that we correct inaccurate or incomplete data • Deletion: Request that we delete your account and associated data ("right to be forgotten") • Portability: Request a machine-readable export of your data • Objection: Object to certain types of data processing • Restriction: Request that we limit how we use your data To exercise any of these rights, email us at [email protected]. We will respond within 30 days. If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is sold or disclosed and to opt out of any such sale. We do not sell personal information.

AltairPath is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us at [email protected] and we will delete it promptly.

We may update this Privacy Policy periodically. When we make material changes, we will notify you via email or a prominent in-app notice at least 14 days before the changes take effect. The "Effective date" at the top of this page reflects when the policy was last updated. Your continued use of AltairPath after the effective date of any changes constitutes your acceptance of the updated policy.

For any questions, data requests, or privacy concerns, please contact us: Email: [email protected] AltairPath United States We aim to respond to all privacy-related inquiries within 5 business days.