Trust Center

The Callings.ai Trust Center explains, in plain language, how we handle your career data: what we collect, how it is protected, which third parties we work with, how long we keep it, and the controls you have. It goes into more operational detail than our formal Privacy Policy so you can make an informed decision before adding sensitive materials.

We built Callings.ai to hold some of the most personal information in a job search: your resume, your work history, your goals, and your outreach. We treat that responsibility seriously, and we would rather tell you exactly how things work today than make broad claims.

Last updated: November 3, 2026.

This page describes our current practices. It is a companion to, and does not replace, our Privacy Policy, which remains the authoritative legal document.

Our Approach

We follow a simple principle: your data is yours, we use it only to power your experience, and we never sell it. Selling subscriptions, not data, is how we stay in business.

The Data We Handle

Callings.ai collects only what it needs to run your job search. The main categories are:

Category Examples
Account information Name, email, password (stored hashed, never in plain text)
Career materials Uploaded resumes, generated resumes, cover letters, job notes
Profile and preferences Job titles, target roles, city and state, writing preferences
Job-search activity Saved jobs, application statuses, contacts you choose to track
Work search log Only if you turn it on (Work Search Log, for people receiving unemployment benefits): that you turned it on, your state, the weekly number you follow, how often you certify and your certification day, which reminder emails you want, and the activities you add yourself (job fairs, workshops, networking events), along with how, when and with whom you applied to the jobs in your tracker. It is used only to show and export your own weekly record and, if you turn reminders on, to email it to you on the day you certify. It is never sent to a state agency, an employer or anyone else by us: you download or copy it and submit it yourself
Application answers Answers you save from application forms via the browser extension (opt-in), so future forms can be pre-filled. Each answer also notes how it got into the field: that you typed it on the form, that you wrote or chose it in the extension panel, that Callings filled it from what you had already told us, or that it came from an AI draft (and whether you edited that draft first). It is kept so your record shows what you wrote and what we wrote, and so we can measure how well the extension does its job. It is stored as part of that job in your tracker, it is never shared with employers or other users, and it is deleted with the job or with your account
Voluntary self-identification Demographic answers (such as sex, gender identity, ethnicity, race, veteran or disability status) you explicitly choose to store, so we can complete the voluntary self-identification questions on forms you apply through. Entirely optional, and you decide per question whether we answer it for you or leave it to you. We never infer any of these from your resume or anything else; we only use what you typed. They are stored privately in your application profile, and where you answer one on a form, your answer is kept in that job's own application record alongside everything else you filled, so your record is a complete copy of what you sent. They are never shared with other users or used to pre-fill anyone else's form, never shown to anyone at Callings, and never used for job matching, recommendations, fit scores, analytics or advertising. Leaving an answer blank never affects an application, and you can view, edit, or delete them at any time
Generated content AI outputs such as reports, tailored documents, and outreach drafts
Public profile reading Only in My AI (beta), when you open How AI sees me: an AI reading of how the public text in your sources (your resume, LinkedIn profile, public web pages and published posts) comes across, described in Big Five personality terms, with the lines it is based on and any reactions you add. When you have added other documents or answered the questionnaire, the same reading also compares your public profile with everything you shared in My AI (images excluded), to show whether the rest confirms or shifts the impression. It is a reading of your text, not a personality test, and it is never treated as a fact about you: it is not used by other features, job matching, fit scores or recommendations, and it is never shown to other users, to employers, or to an organization that pays for your access. Asking again replaces it, and it is deleted with your account
Security and abuse prevention At sign-up only, a one-way scrambled form of your IP address and browser identifier, plus the country, region, and city our network provider reports. Used solely to detect and prevent fraud and abuse of the service. The IP address itself is never stored, and this data is never used for advertising, profiling, or location matching
Public job page visits Counts of which public job page was opened, what was clicked on it, the site the reader came from, the country, and the browser family. No account, no IP address, no cookie and no visitor or device identifier, and kept as counts per page and day rather than as individual visits
Automated copying of our pages Our public job pages carry a hidden link, which people never see and our robots.txt tells crawlers to avoid, to a page that exists only to detect automated copying. When a program requests one, we record that request: its network address, the network it came from, its browser identifier, the time, and our network provider's reference for the request. If you reach our "This listing is not a real job" notice by clicking a copied listing on another website, we record only the site you came from, your browser family and country, and your answer if you choose to tell us where you saw it, never your IP address. Used solely to detect, document and report copying, and deleted after 180 days
Public job searches When anyone runs a search on our public job search page without signing in, we keep a standalone record of the search wording and how many results it returned, so we can see whether the search works. It carries no account, no IP address, no cookie, and no visitor or device identifier of any kind, so it cannot be connected to you, to your account, or to your other searches
Connected assistants If you connect an outside AI assistant, we store the connection itself (which app, what you approved, when you connected it, when it was last used) so you can see and revoke it, plus a record of the few paid actions it takes on your behalf: which action, when, and whether it ran. Never your conversation with it
Billing Handled by our payment processor; we do not store full card numbers

Encryption and Data Protection

All data is encrypted in transit and at rest.

We use established, US-based, tier-one cloud infrastructure. Databases are not exposed to the public internet and are reachable only by our application. Service credentials are held in a managed secrets store rather than in code.

AI Providers and Your Content

When you generate a resume, cover letter, or report, we send an established US-based AI provider only the content needed for that task, and that content is not used to train the provider's models.

A current list of the providers we work with is in the Subprocessors section below.

AI Assistants You Connect Yourself

If you connect an outside AI assistant to your Callings account, that assistant can read your job hunt on your behalf, and what it reads passes through the company that runs it. This is a different arrangement from the providers above, and it happens only when you set it up.

If your search is confidential, this is the section to weigh before connecting: the data is yours to route, and routing it into another company's product is a choice only you can make. Our own AI Assistants documentation sets out exactly what can be read and changed.

Cookies, Analytics, and Tracking

Your cookie choice controls what is stored on your device and what reaches advertising and marketing platforms. Separately, we keep an internal operational record that we need in order to run the service.

Location Data

Location matching uses your city and state, not precise device location.

Data Retention

We keep your data for as long as your account is active, and remove it when you delete your account or the specific item.

Your Controls and Rights

You can review, edit, and delete your information at any time.

To exercise any of these rights, use the in-app controls or email [email protected].

Account Deletion in Detail

When you delete your account, your career materials, generated content, job notes, and job-search activity are removed from our active systems.

What Stays Private to You

Everything you add yourself stays in your account. It is never shown to other users and is never added to any shared pool.

The content you create as you run your search is private by default:

Some discovery features draw on shared reference data built from public sources, never from what you add: independent recruiters, career coaches and career programs, professional associations, and events. We keep it for one purpose: to recommend the right matches and make an introduction easier. Nothing is automated on anyone's behalf: you decide whether to reach out, and you do it yourself. Your own activity on this data (saves, dismissals, outreach drafts, and notes) always stays private to you.

Professionals listed on Callings. Some of that reference data about professionals, such as recruiters and career coaches, can appear on public pages. Those pages show only what a professional publishes about their own practice, such as their services, prices, location and the credentials they list, with a link to their own website. We never show their photos, contact details, or reviews and ratings from other sites, and nobody can pay to be listed or to appear higher. A professional who wants a listing updated or removed can ask us through Contact us.

When Someone Else Pays for Your Access

Someone may pay for your Callings.ai access: an employer, an outplacement or career transition firm, a university or alumni association, a professional body, a reseller, or an advisor. We call any of them a sponsoring organization. Paying for the service buys them the service for you. It does not buy them your job search.

Unless we have asked for your consent and you have given it, a sponsoring organization never sees:

What it can see is limited to how your account came to exist:

What we report to a sponsoring organization is anonymous and aggregated: counts such as seats used, how many people started, and how many are active. Never a list of people, and never anything you have written or saved. Anything beyond that happens only where we have asked you and you have agreed, and you can withdraw that at any time. Accepting our terms or using access someone else paid for is not consent, and nobody can give it on your behalf.

Your account belongs to you, not to whoever pays for it. The organization cannot read, export, or delete your content, and if its sponsorship ends the account stays with you. Deleting it is always your decision, and works exactly as described above.

Working With a Coach

You decide whether a coach sees your job search. Nothing is shared until you have seen what they would see and chosen to share it, and you can stop at any time.

Public Pages and Visibility

Some features can help you create public-facing pages, and anything public is your deliberate, opt-in choice. We do not make your content public by default.

Callings.ai can help you build pages meant to be seen, such as your Calling Card and the Posts you choose to publish. These are designed to help you be found, so when public they are intentionally discoverable and may be promoted (for example, through search optimization).

You stay in control:

Internal Access

Access to user data inside Callings.ai is restricted to authorized personnel on a need-to-support basis.

Subprocessors

We rely on a vetted set of service providers, our subprocessors, to operate the platform. Each one processes data under its own agreement and only as needed to provide its service. No subprocessor uses your content to train AI models.

See our full, dated Subprocessor List for the current providers, what each one does, the data it handles, and where it operates.

An AI assistant you connect yourself is not on that list and not a subprocessor: it does not process data on our behalf under our instruction, it reads your data on yours. It is described under AI Providers and Your Content above, and you control it from Settings > Integrations.

Compliance Posture

Callings.ai is an independent, growing company. We apply the practices described on this page, and we are candid about where we are in our security maturity.

We do not yet hold formal third-party certifications such as SOC 2 Type II or ISO 27001. The practices here, including encryption, restricted access, consent-based tracking, and clear deletion controls, reflect how we operate today. We report our current state rather than promise future milestones.

Reporting a Security Concern

If you believe you have found a security or privacy issue, we want to hear from you.

Email [email protected] with the details. We review reports promptly and will follow up with you.

Who We Are and How to Reach Us

Callings.ai is operated by JobHunters, Inc., doing business as Callings.ai.

This is the address that appears in the footer of the emails we send you, and the address to use for written privacy or data-subject requests.

Frequently Asked Questions

Q: Are my uploaded resumes encrypted? A: Yes. All of your data is encrypted at rest, including the files you upload such as resumes, and everything is also encrypted in transit using TLS.

Q: Do you use my resume or prompts to train AI models? A: No. Your content is not used to train any third-party AI model. We do not enable training-data-sharing with our providers, and we never sell your data. If you connect your own AI assistant, the conversation you have with it is governed by that company's settings rather than ours, so check its training and retention options if that matters to you.

Q: Which AI providers see my career materials? A: For resume and cover letter generation, your content goes only to an established US-based AI provider, sent solely to produce the document you requested. Job matching sends a condensed extract of your resume and the job descriptions being scored to a US-based provider so it can rank how well each job fits. Image features use a separate provider that does not receive your resume content. Every provider we use is named in the Subprocessor List, and none of them train on your content. The one exception is an AI assistant you connect yourself, which is covered in the next answer.

Q: If I connect an AI assistant, what does it see and who else sees it? A: It can read your own job hunt (your tracker, matches, contacts, resumes, saved companies and notes) and it can add a job, record your decision on one, add a note to one, save a found email onto a contact, and start a tailored resume or cover letter. Because it is your assistant and not our provider, what it reads passes through the company that runs it, and that company's terms and retention apply to your conversation. Nothing is connected unless you set it up, we never receive the conversation itself, and you can revoke access in one click from Settings > Integrations; changing your password disconnects every assistant at once.

Q: Does Callings build a personality profile of me? A: Only when you open How AI sees me in My AI (beta), which then reads how your public profile comes across: an AI reads the public text in your sources (resume, LinkedIn profile, public web pages, published posts) and describes how it comes across in Big Five terms, showing the lines behind each impression. It can also compare that public impression with everything you added to My AI, so you see whether the rest of your material confirms or shifts it. It describes your text, not you, and it is not a personality test. It is visible only to you, it is never used by other features or for job matching, and you can ask again or delete it with your account at any time.

Q: Can I delete a single resume without deleting my whole account? A: Yes. You can delete an uploaded resume, a generated resume, a job, or a note individually. Cover letters and tailored resumes live with the job they belong to and are removed when you delete that job.

Q: What happens to my data when I delete my account? A: Your career materials, generated content, notes, job-search activity, and any connected-assistant permissions are removed from active systems. Encrypted backups expire on their normal rotation, and billing records may be retained where the law requires it.

Q: Am I tracked when I am signed in? A: Advertising trackers do not run inside your account, and nothing about you reaches an advertising platform without your consent. With your consent, our analytics does measure the pages you visit inside your account, so we can understand how the product is used and improve it. That measurement covers page addresses and product events such as saving a job, never the content of your documents, and it is not used to target advertising to you. Whatever you choose, we keep an internal record of key product events, such as signing in or saving a job, because we need it to operate, monitor, and secure the service. That record stays internal, is never used for advertising or sold, and never includes the content of your documents.

Q: What do you record when I search jobs without an account? A: Only the search wording and how many results came back, kept so we can tell whether the search is working and how much it is used. There is no account behind it, and we attach no cookie, IP address, or device identifier to it, so the record cannot be connected to you or to any other search you run. Nothing is stored on your device to make this work, which is why it does not depend on your cookie choice.

Q: Do you record who visits your public job pages? A: Ordinary visits are only counted, as described above: no IP address, no cookie and no identifier. The pages also carry a hidden link that people never see and that our robots.txt tells crawlers to avoid; it exists to catch programs that copy our pages in bulk. When a program follows it, we record that request, including its network address, so we can show the copying to the network or website responsible and ask them to stop. These records are deleted after 180 days.

Q: My employer, school, or another organization is paying for my account. What can they see? A: Not your job search. They never see your resume, the jobs you save or apply to, your contacts, your notes, or your searches. If they set the account up for you with an email address they already had, they can see that the seat exists, whether an invitation was sent, and whether you have signed in since. If you signed up yourself through a link they shared, you are only counted in their totals and never listed. What we report to them is counts, not lists of people. The exception is anything we have asked your consent for and you have agreed to, which you can withdraw. Full detail is in When Someone Else Pays for Your Access above.

Q: Can my coach see everything in my account?
A: No. They see only what you agreed to share, and never your AI conversations, private notes or contacts' details. You can stop sharing at any time in Settings. Full detail is in Working With a Coach above.

Q: Do you have SOC 2 or ISO 27001? A: Not yet. We are a growing company and do not currently hold those certifications. This page describes the protections we have in place today.

Q: Where is the subprocessor list? A: A representative list is in our Privacy Policy. For the full current list, email [email protected].

Your career story is yours. We hold it carefully, use it only to help you find your next role, and give you the controls to take it back whenever you choose.