Trust Center

The Callings.ai Trust Center explains, in plain language, how we handle your career data: what we collect, how it is protected, which third parties we work with, how long we keep it, and the controls you have. It goes into more operational detail than our formal Privacy Policy so you can make an informed decision before adding sensitive materials.

We built Callings.ai to hold some of the most personal information in a job search: your resume, your work history, your goals, and your outreach. We treat that responsibility seriously, and we would rather tell you exactly how things work today than make broad claims.

Last updated: June 27, 2026.

This page describes our current practices. It is a companion to, and does not replace, our Privacy Policy, which remains the authoritative legal document.

Our Approach

We follow a simple principle: your data is yours, we use it only to power your experience, and we never sell it. Selling subscriptions, not data, is how we stay in business.

• We do not sell your personal information.
• We do not share your resume, profile, or job-search activity with third parties except the service providers needed to operate the platform (listed below).
• No user content is used to train third-party AI models.
• You can delete your data, in whole or in part, at any time.

The Data We Handle

Callings.ai collects only what it needs to run your job search. The main categories are:

Encryption and Data Protection

All data is encrypted in transit, and the files you upload are encrypted at rest.

• In transit: Connections to Callings.ai use TLS (HTTPS) end to end.
• At rest: Documents and files you upload, including resumes, are stored in encrypted cloud storage managed by a major US-based cloud provider.
• Passwords: Stored using one-way hashing. We cannot see your password, and neither can anyone on our team.
• Backups: Backups of our encrypted stores are themselves encrypted.

We use established, US-based, tier-one cloud infrastructure. Databases are not exposed to the public internet and are reachable only by our application. Service credentials are held in a managed secrets store rather than in code.

AI Providers and Your Content

When you generate a resume, cover letter, or report, we send an established US-based AI provider only the content needed for that task, and that content is not used to train the provider's models.

• For resume and cover letter generation, the provider receives your resume text, the relevant job description, and any instructions you give. It returns the generated document.
• We do not enable any data-sharing-for-training option with our providers. Under their business and API terms, content submitted through the API is not used to train their models. Providers may retain content for a limited period for operational and abuse-monitoring purposes under those same terms, after which it is removed.
• Image features (for example, illustrations on calling cards or posts) use a separate provider and do not receive your resume content.
• We do not send your career materials to any provider for advertising or model training.

A current list of the providers we work with is in the Subprocessors section below.

Cookies, Analytics, and Tracking

Tracking is consent-based. If you decline cookies, analytics and advertising technologies are turned off.

• We show a cookie consent banner. Choosing to reject disables tracking and clears related cookies.
• Advertising and acquisition analytics run only on our public marketing pages, not inside your signed-in account session.
• Inside your account, with your consent, we use privacy-respecting product analytics to understand which features are used so we can improve the platform. This never includes the content of your resumes, cover letters, or messages.
• You can change your analytics choice at any time in Settings under Privacy and Data.

Location Data

Location matching uses your city and state, not precise device location.

• We use the city and state from your profile to match you to nearby roles.
• We do not request or use GPS or precise device location.
• Location is used only for job matching and to operate the platform. It is not used for advertising.

Data Retention

We keep your data for as long as your account is active, and remove it when you delete your account or the specific item.

• Career materials, generated content, and job-search activity are retained for the life of your account so the platform stays useful to you.
• Operational records that support generation features are retained for the life of your account and removed on deletion.
• Diagnostic logs used to keep the service running are short-lived and roll off on a routine cycle.
• Billing records may be retained as required by law and by our payment processor, even after account deletion.

Your Controls and Rights

You can review, edit, and delete your information at any time.

• Delete individual items: You can delete an uploaded resume, a generated resume, a job entry, or a note without closing your account. Cover letters and tailored resumes are attached to the job they belong to and are removed when you delete that job or replaced when you regenerate them.
• Delete your account: Settings includes a Danger Zone where you can request permanent deletion.
• Control analytics: Toggle analytics consent in Settings under Privacy and Data.
• Download your documents: Resumes, cover letters, and reports can be downloaded directly from the app, typically as PDF or DOCX.
• Regional rights: We honor data-subject requests, including access and deletion rights under GDPR and CCPA. To request a copy of the personal data we hold about you, contact support.

To exercise any of these rights, use the in-app controls or email [email protected].

Account Deletion in Detail

When you delete your account, your career materials, generated content, job notes, and job-search activity are removed from our active systems.

• Deletion removes your resumes, generated documents, cover letters, job descriptions, notes, saved jobs, and related records from live systems.
• Encrypted backups age out on their normal rotation rather than being individually edited, so residual copies expire over time.
• Because each AI generation is a stateless request, there is no separate per-user store at the AI provider for us to delete; any transient provider-side copy expires under the provider's terms.
• Billing and transaction records may be retained where the law requires it.
• Account deletion is permanent and cannot be undone once processed.

What Stays Private to You

Everything you add yourself stays in your account. It is never shown to other users and is never added to any shared pool.

The content you create as you run your search is private by default:

• Jobs you add manually are saved only to your tracker. Other users cannot see, search, or be matched against them.
• Contacts you add or track belong only to you.
• Recruiters you add manually are stored exactly like a personal contact, scoped to your account. They are never written to the shared recruiter pool that powers recruiter suggestions for other users.
• Target and saved companies you add are yours alone.
• Notes and to-dos you write are visible only to you.

Some discovery features (such as suggested recruiters, professional associations, and events) draw on shared reference data so we can match the right opportunities to many users at once. That reference data comes from public sources, not from what you add, and your own activity on it (saves, dismissals, outreach drafts, and notes) always stays private to you.

Public Pages and Visibility

Some features can help you create public-facing pages, and anything public is your deliberate, opt-in choice. We do not make your content public by default.

Callings.ai can help you build pages meant to be seen, such as your Calling Card and the Posts you choose to publish. These are designed to help you be found, so when public they are intentionally discoverable and may be promoted (for example, through search optimization).

You stay in control:

• Nothing is published automatically. Making a page public is always an action you take.
• You can change a page's visibility, or unpublish it, at any time.
• If your goal is to avoid a public presence, you can keep these features private or simply not use them.
• Deleting your account removes these pages and requests their removal from search indexes.

Internal Access

Access to user data inside Callings.ai is restricted to authorized personnel on a need-to-support basis.

• Internal systems follow least-privilege access: people and services get only the access they need.
• We access your content only to operate the service or to respond to a support request you have raised.
• We do not browse, sell, or share your materials.

Subprocessors

We rely on a vetted set of service providers, our subprocessors, to operate the platform. Each one processes data under its own agreement and only as needed to provide its service. No subprocessor uses your content to train AI models.

See our full, dated Subprocessor List for the current providers, what each one does, the data it handles, and where it operates.

Compliance Posture

Callings.ai is an independent, growing company. We apply the practices described on this page, and we are candid about where we are in our security maturity.

We do not yet hold formal third-party certifications such as SOC 2 Type II or ISO 27001. The practices here, including encryption, restricted access, consent-based tracking, and clear deletion controls, reflect how we operate today. We report our current state rather than promise future milestones.

Reporting a Security Concern

If you believe you have found a security or privacy issue, we want to hear from you.

Email [email protected] with the details. We review reports promptly and will follow up with you.

Frequently Asked Questions

Q: Are my uploaded resumes encrypted? A: Yes. Files you upload, including resumes, are stored in encrypted cloud storage, and all data is encrypted in transit using TLS.

Q: Do you use my resume or prompts to train AI models? A: No. Your content is not used to train any third-party AI model. We do not enable training-data-sharing with our providers, and we never sell your data.

Q: Which AI providers see my career materials? A: For resume and cover letter generation, your content goes only to an established US-based AI provider, sent solely to produce the document you requested. Image features use a separate provider that does not receive your resume content.

Q: Can I delete a single resume without deleting my whole account? A: Yes. You can delete an uploaded resume, a generated resume, a job, or a note individually. Cover letters and tailored resumes live with the job they belong to and are removed when you delete that job.

Q: What happens to my data when I delete my account? A: Your career materials, generated content, notes, and job-search activity are removed from active systems. Encrypted backups expire on their normal rotation, and billing records may be retained where the law requires it.

Q: Am I tracked when I am signed in? A: Advertising trackers do not run inside your account. With your consent, we use privacy-respecting product analytics to improve the platform, and never the content of your documents. If you decline cookies, this is turned off.

Q: Do you have SOC 2 or ISO 27001? A: Not yet. We are a growing company and do not currently hold those certifications. This page describes the protections we have in place today.

Q: Where is the subprocessor list? A: A representative list is in our Privacy Policy. For the full current list, email [email protected].

Related Topics

• Account Settings
• Data and Privacy FAQ

Your career story is yours. We hold it carefully, use it only to help you find your next role, and give you the controls to take it back whenever you choose.