Legal
Privacy Policy
Last updated: October 11, 2026. This policy explains how CareerPG handles personal information for the service.
Scope
This policy covers careerpg.com and the CareerPG workspace we operate. When your organization runs CareerPG in its own infrastructure (self-hosted), your organization is the controller of that data and CareerPG does not receive it.
Information we collect
Demo requests: first and last name, work email, company, job title, company size, and optionally country, phone, areas of interest, and a message, plus the referring site, campaign tags, landing page, a salted hash of your IP address, and your browser user agent. Website analytics: pages viewed, referrer, campaign tags, language, device type, and a random visitor and session identifier stored in your browser. We do not store your IP address for analytics. Workspace use: account details, profile data, roadmap and goal records, feedback, review content, HR workflow records, integration metadata, usage events, and support communications that you or your organization provide.
How we use information
We use demo request details to contact you about your request and arrange a demo, analytics to understand which pages and channels bring visitors, and workspace data to provide the service, secure accounts, operate integrations, respond to requests, and meet legal obligations.
Service providers and transfers abroad
Oracle Cloud Infrastructure hosts CareerPG servers and databases in the Tokyo, Japan region; data is transferred over an encrypted network when you submit it and is kept there for the retention periods below. Telegram delivers internal notifications of new demo requests to the CareerPG team, including the request contents. We do not sell personal information.
Retention and deletion
Demo request records are kept until the related sales conversation ends or you ask us to delete them. Workspace data is kept for the life of the workspace contract and deleted after it ends unless law requires otherwise. Database backups are overwritten after 14 days. Deleted records are removed so that they cannot be restored from the live database.
Security
We encrypt traffic with TLS, restrict server access to key-based administrative accounts, protect the admin console with multi-factor authentication and IP blocking, hash IP addresses before storage, and keep daily backups.
Cookies and browser storage
We use essential cookies for sign-in sessions and browser storage for the random analytics identifiers described above. You can clear them in your browser settings at any time; the site keeps working without analytics storage.
Your rights
You may request access, correction, deletion, or suspension of processing of your personal information, and withdraw consent at any time. Workspace users can also contact their organization administrator. We respond without undue delay.
Contact
Send privacy questions and requests to privacy@careerpg.com.