Career Traction is operated by Sarah McLeod People & Culture (SMP&C). This policy explains how we collect, use, store, and protect your personal information.
What we collect
- Account information: your email address and password (password is encrypted and never stored in plain text)
- Profile information: your first name and professional function
- Job search data: applications, activities, connections, goals, and anything else you enter into the tool
- Activation code: if provided by your organisation, the code you used to sign up
Why we collect it
To provide the Career Traction service. Your data powers the features you use: tracking applications, logging activities, managing connections, and viewing your dashboard. We do not use your data for any other purpose.
Who can see your data
- Your employer or the organisation that provided Career Traction cannot see your data. They receive only a count of how many activation codes have been redeemed.
- SMP&C has database administrator access for technical support purposes. We commit to not accessing individual user data except to resolve a technical issue you have reported to us.
- We do not share your data with any third party.
- We do not sell your data.
- We do not use your data to train AI models.
How your data is stored
- Database: Supabase, hosted in Sydney, Australia. Supabase is SOC 2 Type II certified.
- Security: Data is encrypted at rest and in transit (HTTPS/TLS). Row-level security ensures each user can only access their own data.
- Hosting: The application is hosted on Netlify. No user data is stored on Netlify.
- Backups: Managed by Supabase with point-in-time recovery.
Cookies and tracking
Career Traction does not use cookies, analytics tools, advertising pixels, or any third-party tracking. Authentication tokens are stored in your browser's local storage to keep you signed in. That is the only data stored on your device.
How long we keep your data
Your data is retained for as long as your account exists. If your organisation's arrangement with Career Traction ends, your account and data persist. You can continue using the tool.
Your rights
Under the Privacy Act 2020 (NZ), you have the right to:
- Access your personal information — you can see and export everything in the app
- Correct your personal information — edit anything at any time
- Delete your personal information — use Reset All Data in Settings, or contact us to delete your account entirely
- Complain to the Office of the Privacy Commissioner if you believe your privacy has been breached: privacy.org.nz
Aggregated data
We may compile aggregated, non-identifying statistics (for example: "70% of users created more than 3 applications"). These statistics cannot identify any individual user and may be shared with pilot organisations or used to improve the service.
Changes to this policy
If we make material changes to this policy, we will notify users via the app. The "last updated" date at the top reflects the most recent revision.
Contact
If you have questions about your privacy or want to request access to or deletion of your data:
Sarah McLeod
Sarah McLeod People & Culture
sarah@smpc.nz