Last Updated: October 2025
CareerVault is committed to compliance with the General Data Protection Regulation (GDPR) and respects the data protection rights of individuals in the European Economic Area (EEA), United Kingdom, and Switzerland. This page explains how we implement GDPR principles in our operations.
We process personal data based on the following legal grounds:
Processing necessary to provide our services (account management, job applications, verification services)
Marketing communications, optional features, cookies (non-essential)
Fraud prevention, security, Platform improvements, analytics
Compliance with laws, regulations, and legal processes
Under GDPR, you have the following rights regarding your personal data:
Request a copy of your personal data we hold. Access through your account settings or contact us for a comprehensive data export.
Correct inaccurate or incomplete personal data. Update your information directly in your account settings.
Request deletion of your personal data. Available through Settings with a 30-day grace period.
Request that we limit how we use your data in certain circumstances (e.g., while disputing accuracy).
Receive your data in a structured, machine-readable format and transfer it to another service.
Object to processing based on legitimate interests, direct marketing, or profiling.
Right not to be subject to decisions based solely on automated processing that produces legal or significant effects.
Withdraw consent at any time where processing is based on consent (e.g., marketing emails, optional features).
Response Time: We will respond to your request within 30 days. For complex requests, we may extend this by an additional 60 days with notification.
We adhere to the following GDPR data protection principles:
We process data lawfully, fairly, and transparently
Data collected for specific, legitimate purposes
Only collect data necessary for our purposes
Keep personal data accurate and up-to-date
Retain data only as long as necessary
Ensure security through appropriate measures
When transferring personal data outside the EEA, we ensure appropriate safeguards:
We implement technical and organizational measures to protect personal data:
In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and affected individuals without undue delay, as required by GDPR Article 33 and 34.
Our Data Protection Officer (DPO) oversees GDPR compliance and can be reached at:
Email: dpo@careervault.tech
Mail: Data Protection Officer, CareerVault Inc., 9200 W. Bellfort Ave Ste53, Houston, TX 77031, United States
You have the right to lodge a complaint with a supervisory authority, particularly in the EU member state of your residence, place of work, or place of alleged infringement if you believe your data protection rights have been violated.
For questions about GDPR compliance or to exercise your rights:
Email: dpo@careervault.tech
Privacy Team: privacy@careervault.tech
Address: 9200 W. Bellfort Ave Ste53, Houston, TX 77031, United States