Privacy Policy

1. Information We Collect

Information You Provide Directly

• Account Information: When you create an account, we collect your name, email address, password, and company information.
• Career Information: When you use our Services, we collect information about your current role, target role, skills, experience, goals, and constraints.
• Communication: When you contact us via email, chat, or other means, we collect the content of your communications.
• Payment Information: For paid tier upgrades, we collect billing address, payment method, and transaction history (processed securely by Stripe). We do not store full credit card details.

Information Collected Automatically

• Usage Information: Pages visited, features used, roadmaps generated, time spent, clicks, and interactions.
• Device Information: Device type, operating system, browser, IP address, and unique identifiers.
• Location Information: Approximate location based on IP address (city/region level, not precise).
• Cookies & Similar Technologies: We use cookies, pixels, and local storage for authentication, preferences, and analytics.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Services
• Generate personalized career roadmaps and recommendations
• Process payments and manage subscriptions
• Send service-related announcements and support communications
• Respond to your inquiries and customer support requests
• Analyze usage patterns to improve user experience
• Detect, prevent, and address fraud, abuse, and security issues
• Comply with legal obligations
• Send marketing communications (with your consent)
• Conduct research and analytics (anonymized)

Important: We do NOT use your personal career data to train our AI models without explicit opt-in consent. Your data remains private.

3. How We Share Your Information

We may share your information with:

• Service Providers: Payment processors (Stripe), hosting providers (Vercel, Supabase), email services, analytics services. All bound by confidentiality agreements.
• Business Partners: If you explicitly authorize integrations or third-party connections to your account.
• Legal Requirements: If required by law, court order, or government request.
• Business Transactions: In case of merger, acquisition, or sale of assets (with notice).

We do NOT sell your personal information to third parties for marketing purposes.

4. Data Security

We implement industry-standard security measures including:

• AES 256-bit encryption for data at rest
• TLS 1.2+ encryption for data in transit
• Secure password hashing with bcrypt
• Regular security audits and penetration testing
• Access controls and authentication requirements
• Intrusion detection and monitoring
• Employee privacy training and NDAs

DISCLAIMER: Despite our security measures, no method of electronic storage or transmission over the Internet is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. You acknowledge that you provide your personal information at your own risk.

In the event of a data breach, we will notify affected users and relevant authorities as required by applicable law.

5. Your Privacy Rights

Depending on your location, you may have the following rights:

GDPR (EU/EEA Residents)

• Right of access: Request a copy of your personal data
• Right to correction: Request we fix inaccurate information
• Right to erasure: Request deletion of your data ("right to be forgotten")
• Right to restrict processing: Limit how we use your data
• Right to data portability: Receive data in portable format
• Right to object: Object to certain processing activities
• Right to lodge a complaint: Contact your data protection authority

CCPA (California Residents)

• Right to know: Request what personal information we have
• Right to delete: Request deletion of your information
• Right to opt-out: Opt out of data sales (we don't sell, but you can opt-out)
• Right to non-discrimination: Non-discrimination for exercising rights

For All Users

• Account settings: Manage your privacy preferences anytime
• Opt-out of marketing: Unsubscribe from emails anytime
• Download your data: Export roadmaps and account data
• Delete your account: Permanently delete your account and data

To exercise any of these rights, contact us at contact@darecmcdaniel.info.

6. Cookies & Tracking

We use cookies for:

• Authentication: Keeping you logged in
• Preferences: Remembering your theme (light/dark), language, settings
• Analytics: Understanding how users interact with our service (Google Analytics)
• Security: Preventing fraud and detecting abuse

Most browsers allow you to control cookies through settings. You can also use "Do Not Track" signals, though we don't respond to DNT headers (but respect your cookie preferences).

7. Data Retention

We retain personal information for as long as necessary to provide Services and fulfill the purposes outlined in this policy. Specifically:

• Active Accounts: Kept for as long as your account is active
• Deleted Accounts: Data deleted within 30 days (some data may persist in backups for 90 days)
• Marketing Data: Retained until you unsubscribe
• Legal/Compliance: Retained as required by law

8. Children's Privacy

Our Services are not intended for children under 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect information from children under 13. If we learn we have collected such information, we will delete it promptly. If you believe a child has provided us information, please contact us at contact@darecmcdaniel.info.

9. International Data Transfers

Cloud Designs is based in the United States. Your information may be transferred to, stored in, and processed in the United States or other countries where we operate. These countries may not have the same data protection laws as your home country.

By using our Services, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection rules.

10. Third-Party Links

Our Services may contain links to third-party websites (courses, resources, job boards). We're not responsible for their privacy practices. Please review their privacy policies before sharing information.

11. Policy Updates

We may update this Privacy Policy periodically. We'll notify you of material changes by email or prominent notice on our website. Continued use of our Services constitutes acceptance of updated policies.

12. Contact Us

For privacy-related questions or to exercise your rights:

Darec McDaniel
Email: contact@darecmcdaniel.info

We'll respond to all privacy requests within 30 days (or as required by law).