Trust, privacy, and data handling

Vocation Analytics is built for resume optimization workflows where candidate data, reviewer trust, and responsible handling matter from first upload to final recommendation.

What data we process

  • Contact details provided in the upload form
  • Uploaded resume files and associated metadata
  • Operational logs required for uptime, quality, and abuse prevention

How we protect resume workflows

  • Protected form sessions and CSRF defenses
  • Restricted upload formats and file-size limits
  • Authenticated access for internal submission review
  • Environment-based secret and configuration controls

Governance and assurance posture

  • Policy and control roadmap aligned to business customer expectations
  • Data processing terms available for organizational accounts
  • Access logging and review checkpoints for critical workflows
  • Backup and recovery verification as part of operational cadence

Operational response commitments

  • Priority triage begins quickly after event detection
  • Customer-impacting issues receive timely stakeholder updates
  • Root-cause review and corrective action tracking after closure
  • Trust contact: security@vocationanalytics.com

Privacy Policy

Effective date: September 18, 2023

This Privacy Policy explains how Vocation Analytics collects, uses, discloses, and protects personal information when you use our website, submit a resume, request product information, or otherwise interact with us. By using the site, you acknowledge this policy and our data handling practices.

Information we collect may include: identity and contact data (such as name, email, and organization), professional context (target roles, resume content, skills, and notes), support and communication records, and technical usage data (IP address, browser/device details, page interactions, and security telemetry).

How we use information includes operating and improving resume optimization services, reviewing and responding to inquiries, maintaining platform security and abuse prevention, troubleshooting incidents, meeting legal obligations, and communicating service or policy updates. We do not sell personal information.

Legal bases and permitted processing may include your consent (where required), performance of requested services, our legitimate interests in operating and securing the platform, and compliance with applicable legal and regulatory requirements.

How we share data: we may share information with vetted service providers (such as hosting, monitoring, analytics, email, and security vendors) under contractual controls, with professional advisers under confidentiality obligations, or when required by law, court order, or to protect rights, safety, and system integrity.

Retention: we keep data only as long as needed for the purposes described in this policy, including operational continuity, support, fraud prevention, backup integrity, and legal compliance. Retention periods vary by data type and may be extended where law requires.

Your choices and rights: subject to local law, you may request access, correction, deletion, export, or restriction of personal data, and may object to certain processing activities. You may also withdraw consent for optional processing where consent is the legal basis.

Security controls: we use administrative, technical, and organizational safeguards designed to reduce unauthorized access, misuse, alteration, or loss. No internet transmission or storage method is completely risk-free, but we continuously improve our controls.

International processing: data may be processed in jurisdictions other than your own. Where applicable, we rely on appropriate transfer mechanisms and contractual protections.

Children's privacy: our services are not intended for children under 13 (or higher minimum age where required locally), and we do not knowingly collect personal information from children.

Policy updates: we may update this Privacy Policy periodically. Material changes will be reflected by an updated effective date and, where appropriate, additional notice.

For privacy requests or questions, contact support@vocationanalytics.com.

Vocation Analytics uses cookies, local storage, and similar technologies to keep the site secure, remember your consent preferences, and understand how visitors use key pages.

We use strictly necessary technologies to run core functionality such as session integrity, CSRF protection, and anti-abuse controls. These are required for secure operation and cannot be switched off.

If you choose Accept all in our cookie banner, we may also use analytics technologies to measure traffic patterns, page performance, and high-level engagement trends (for example, which pages are frequently visited or where users abandon a flow). We do not use these analytics signals to make automated hiring decisions about individuals.

Data associated with cookies may include technical identifiers such as IP-derived location region, browser and device type, pages viewed, approximate timestamps, referrer URLs, and on-site interaction events. We use this information to improve reliability, usability, and security operations.

Cookie lifetimes vary by purpose. Session and security cookies are typically short-lived, while preference cookies (such as consent state) may persist longer so we do not repeatedly prompt you for the same choice. Retention is limited to what is needed for operation, diagnostics, and compliance obligations.

You can control cookies through our banner choices and your browser settings. If you clear browser storage or block cookies entirely, some site features may not function as expected. Where required by law, we obtain consent before enabling non-essential analytics technologies.

We may use trusted service providers to help host and analyze website activity. Those providers process data only under contractual restrictions and only for approved purposes.

For cookie questions or requests, contact support@vocationanalytics.com.