Privacy Policy

1. Who we are

TryCareerMatch (trycareermatch.com) is operated by Diogo Serino, an individual based in Braga, Portugal. For data protection purposes, Diogo Serino is the data controller responsible for your personal data.

Contact: [email protected]

2. What data we collect

• Career profile data — your name if you give one, education level, years of experience, skills, work preferences and sector interests. Entered by you during onboarding. Your name is optional and never affects your results: we use it to greet you as you fill the form and to address your own report back to you.
• Session identifier — a random UUID stored in your browser's session storage to link your profile and results without requiring an account.
• Visitor identifier — a random, long-lived identifier stored in your browser's local storage and sent with requests as an X-Visitor-ID header. We never store the identifier itself, only a SHA-256 hash of it, so we can tell first-time visitors from returning ones. The hash appears in our aggregate match and product statistics and, if you send us a role suggestion, on that suggestion — there only so we can tell three different browsers asking for the same thing from one browser asking three times. That last hash is computed differently from the others on purpose, so the two cannot be matched up. None of them is linked to a profile, and none is used to track you across other websites.
• Browser language — when you start the questions, the language your browser is set to, and, if your browser translates one of our pages for you, the language it translated into. We keep only the language (such as English or Portuguese), and the region only for Portuguese, to tell Portugal from Brazil. Both sit next to the visitor identifier hash above and are not linked to a profile. They tell us whether people who read in another language finish the questions as often as everyone else.
• Email address — only if you choose to save your report. We use it to save your report, to email you a link back to it, and — if you later ask us for a paid Deep Report — to find the saved report that one is built from. Nothing else, unless you tick the marketing box described below. It is never required to use the service. Saving your report needs no password and creates no account, and we do not verify the address.
• Account (optional for everything free) — the site has an email-and-password sign-in, reachable from “Sign in” in the menu. Nothing in the free service requires it: the assessment, your report, and the way back to a saved report all work without an account. The one thing that does need one is asking for a paid Deep Report. If you create one we store your email address, a hash of your password (never the password itself), and the dates you registered and last signed in. When you register — and any time you ask us to resend it — we email you a link to confirm you can read that address, and store a single-use hash of it for 24 hours; confirming records the date, and is what connects a report you saved under the same address to your account (never the other way — signing in alone never opens someone else’s report). If you ask to reset a forgotten password we store a single-use hash of that emailed link for one hour. While you are signed in we keep a record of each session: when it started, when it was last used, how you signed in (a password, Google, LinkedIn or a password reset), and a hash of the token that keeps it open (never the token itself). We do not record your IP address, your browser or your device. You can see your sessions and sign out of all of them under Account settings, and each record is deleted 30 days after the session ends. You can delete the account at any time — section 5 says what that removes and what it leaves.
• Continue with Google (optional) — instead of a password, you can create or open the account above by signing in with Google. We ask Google for only your email address and the permanent identifier Google uses for your account — never your name, your photo, your contacts, your files or anything else — and those two things are what we store. An account made this way has no password at all, so we store no password hash for it; because Google has already confirmed the address, we treat it as confirmed and send you no confirmation email. That is also what connects a report you saved under the same address to the account. If you would rather have a password later, use the “forgot password” link and the one you set becomes the account’s first. Signing in this way tells Google that you use TryCareerMatch — see section 6.
• Continue with LinkedIn (optional) — the same as “Continue with Google” above, with LinkedIn in Google’s place. We ask LinkedIn for only your email address and the permanent identifier LinkedIn uses for your account — never your name, your photo, your connections, your posts or anything else. One difference worth stating: LinkedIn does not always tell us an address is confirmed, and when it does not, we cannot treat the account as one either — you would need to confirm it yourself, or sign in with a password instead.
• Marketing emails — only if you tick the optional box when you save your report. It is unticked by default, it is never a condition of getting your report, and it is the only thing that adds you to our email list. Legal basis: your consent, which you can withdraw at any time using the unsubscribe link in every email.
• Saved profile — created when you save your report. We keep a durable copy of your career profile linked to your email so you can come back to it through the emailed link. It is kept until you delete it — the save email includes a delete link — or ask us to remove it, or until 12 months pass without a visit, whichever comes first (a report you bought is kept while its access link is still valid).
• Onboarding research notes — if you type into the optional "Other" boxes during onboarding (a field of study, an industry, a missing skill), or into the optional "What's your current or most recent role?" box, we keep that short text as product research to decide which roles and skills to add next. We store that research copy with your session identifier and nothing else. While that session is still alive (up to 7 days) the identifier links the note to the session it came from; once the session is deleted, nothing connects that research copy back to you, which also means we can no longer look up or delete an individual's research notes. The text you typed also stays in your career profile, alongside everything else you entered — that second copy is not anonymous, and if you save your profile it is linked to your email until you delete it, which you can do at any time with the link in the save email. All of these boxes are optional and none of them affects your results.
• Role suggestions — only if you suggest a role we should add. The suggestion text is stored as product research, alongside the hashed visitor identifier described above; an email, if you leave one, is optional, used only to follow up, and stored with your consent.
• Service requests — only if you ask about a paid service. For a coaching call, the career program or a CV Rewrite, no account is needed: we collect the name, email, optional LinkedIn link and free-text description you choose to submit. For a CV Rewrite only, you can also give us, if you want to, where you live, the role you want the CV for, your education, experience, skills and interests, and paste the text of your current CV, and tell us how you want it to look (layout, style, colors, typeface, length, whether to include a photo, the language, your archetype and a link to a design you like). For a coaching call or the career program, you can also tell us, if you want to, where you are in your career, what you want, when, your time zone and the language for the sessions. We do not ask for a phone number, age or nationality, and we ask you to leave your phone number and home address out of what you paste. We read all of this so we can reply to you and write your CV, and for a CV Rewrite the professional recruiter who reviews the CV before we send it reads it too (section 6). It is not used for matching and does not affect your results.
• Our own notes on a request — when you ask about a paid service, we may write a short internal note on your request: what you asked, what we replied, what to follow up. It is a note about the conversation, not an assessment of you, and nothing reads it except us — it never touches your results, your ranking or your report. You can ask to see it or to have it deleted, like anything else here.
• Deep Report requests — only if you ask for one, which is done from your account. We take your email address from the account rather than from a box, so the request is filed under an address you have confirmed. Asking takes one click: we don’t ask you to write anything, and the report is built from the profile you saved. When your Deep Report is delivered, a questionnaire opens in your account: the country you live in (required), what you are trying to decide (required), and, only if you choose to answer, your city, how and where you want to work, whether you would move and where to, the role you are aiming for, when you would like to have moved, a salary you are aiming for, whether and how you would like to learn, how comfortable you are posting in public and which networks you use, what gives you energy at work and what you do outside it (picked from short lists), the order in which six things matter to you in a job, how you would spread ten points across seven parts of your life, and where you do your best work (your pace, how often you like feedback, and the like). It opens in the same way during a free trial of the Deep Report. Your answers shape your report: where it points your job searches, where you could learn, how to get seen, the role it focuses on, what each of your values means for your search, which kinds of workplace fit what you said, a card on how to work with you, and the ideas in your plan. When you send them, your report is rebuilt with them; you can change any answer later, and a change is used the next time you press Update my report. The links it gives you are searches you open yourself; a local one carries the city you gave, and only if you click it. None of it is used for matching or affects your ranking, and only a shortened version of what you are trying to decide is sent anywhere (see Anthropic in section 6). If you answered our earlier questionnaire (26 September to 7 October 2026), those answers are kept on their own clock (section 5) and shape your report until you send the new one. When we deliver your Deep Report we keep it as it was delivered, so it does not change when our list of roles does. Pressing Update my report in your account rebuilds it from your answers and our list of roles as they are then, and we keep each version, up to 20, the oldest going first. A free trial keeps its versions the same way. We also keep a record that your account has access to the Deep Report: whether you bought it, we gave it to you, or you are trying it free; from when, until when for a trial, and, if your access ends early, when and why (a refund, or a request to erase your data). For a free trial we also keep how many separate visits you made to it, and whether we sent you the reminder before it ends. While you are on a trial, nothing from your report or your answers is sent to Anthropic: the parts written by AI come with the purchase. If you asked between 17 August and 25 September 2026, the request also asked which country you work in (the country only, never a city or an address) and for three things in your own words: your recent roles, what you were trying to decide, and anything we should work around, plus an optional link to your LinkedIn profile. We read all three before we write your report. None of them is used for matching or affects your ranking. One of them goes further, and this is the only part of what you write that leaves our systems: a shortened version of what you are trying to decide is included when we generate the written parts of your report, which is done by Anthropic’s Claude on our behalf. Before it is sent we automatically strip email addresses, links, social handles and long numbers, and cut it to about three sentences. We cannot automatically remove a person’s or a company’s name, so the form asked you not to put those there. The other two boxes are never sent anywhere. We delete all three twelve months after you wrote them.
• Share links — only if you make one, which you can do from your account once you have the Deep Report. You tick which parts of the report the link shows, pick who it is for from a short list (Mentor, Coach, Friend, Adviser or Other) and how long it works, up to 90 days. We keep what you chose, the dates, and a scrambled fingerprint of the link (never the link itself, so we cannot open it or show it again). Each time someone opens it, we record when, and which parts it showed, and you can see that record in your account. We keep nothing that identifies the person who opens it, and never the address of the person you send it to: we don’t ask for it, and we don’t send the link ourselves. The page it opens names you by the name you gave us, if you gave one. A share link never shows what you wrote in your own words, your salary, where you live, your hobbies, what gives you energy or your life priorities. Of your questionnaire answers, it can show only the role you are aiming for and when (if you tick Goals), the order of your work values (if you tick Work values), and your How to work with me card, written from what you told us about how you work (if you tick it).
• Testimonials — only if you choose to submit one. Your name, shown publicly as first name plus last initial (e.g. “Jordan L.”), and your comment are shown on the site with your consent — the full name you type is never stored or shown. An email, if you leave one, is optional, never shown publicly, and used only to reach you. Every testimonial is reviewed before it appears, and you can ask us to remove yours at any time by emailing [email protected].
• Coach applications — only if you apply to coach with us. We store the professional details you submit (name, email, optional LinkedIn/portfolio, experience and a short pitch) to review the partnership, on the basis of your consent. Nobody outside TryCareerMatch reads them, though the alert that tells us one has arrived carries what you wrote and reaches us through Resend (section 6). You can ask us to delete them at any time.
• Contact messages — only if you write to us through the contact form. We store your name, email and message to reply to you, on the basis of your consent. Nobody outside TryCareerMatch reads them, though the alert that tells us one has arrived carries your message and reaches us through Resend (section 6). You can ask us to delete them at any time.
• Hiring requests — only if you ask us to help you hire someone through the form on /for-employers. We store the company, contact name, email, the role and what you tell us you’re looking for, to work on your request, on the basis of your consent. Nobody outside TryCareerMatch reads them, though the alert that tells us one has arrived carries what you wrote and reaches us through Resend (section 6). You can ask us to delete them at any time.
• Organization requests — only if you ask about a pilot or a plan through the form on /for-organizations. We store the type and name of your organization, your name, your role, your work email, the size of the group, when you’d start, the plan you’re interested in and anything you add, to reply to you, on the basis of your consent. Nobody outside TryCareerMatch reads them, though the alert that tells us one has arrived carries what you wrote and reaches us through Resend (section 6). You can ask us to delete them at any time.
• Co-founder applications — only if you apply for the co-founder role through the /cofounder page, which is not linked from the rest of the site. We store your name, email, location, an optional LinkedIn link, your three written answers and, if you choose, when you could start, to consider your application, on the basis of your consent. Nobody outside TryCareerMatch reads them, though the alert that tells us one has arrived carries what you wrote and reaches us through Resend (section 6). You can ask us to delete them at any time.

3. How we use your data

• To run the career matching analysis and display your results.
• To save your report under the email you give us and to send you a link back to it, which is the service you asked for when you saved it. If you later ask us for a paid Deep Report, we use that same address to find the saved report it is built from.
• If you tick the marketing box, to send you your archetype and occasional updates about new roles. You can unsubscribe at any time.
• If you submit a service request, to contact you about it — and, for a coaching call or the career program only and with your consent, to share the details you provided with a vetted career coach so they can deliver the service you asked for. For a CV Rewrite, and with your consent, we show the CV we write and the details you gave us for it to the professional recruiter who reviews it before we send it to you. A Deep Report is written by us; no coach ever sees it or what you wrote for it.

We do not use your data for advertising, we do not sell it to third parties, and we do not use it for any purpose beyond providing the service.

4. Legal basis (GDPR)

• Contract performance — processing your profile to deliver the matching service you requested, saving your report under the email you give us so we can send you a link back to it, running your account if you choose to create one, and, if you have the Deep Report, keeping its versions and the answers you give its questionnaire.
• Legitimate interest — storing anonymous session data temporarily to provide a seamless experience without requiring an account.
• Consent — everything you actively choose to leave with us: ticking the marketing box, submitting a service request (including, for the coaching services, sharing those details with a vetted coach, and, for a CV Rewrite, with the professional recruiter who reviews it), a testimonial, a coach application, a contact message, a hiring request, an organization request, a co-founder application, or an email with a role suggestion. Each is processed solely for the purpose you asked for, and you can withdraw consent at any time. None of them is a condition of getting your report.
• Consent, for each share link — making a share link is your consent to show the parts you tick to whoever holds it, given on the screen where you make it. You withdraw it by revoking the link, which stops it at once. The record of when it was opened, and which parts it showed, is part of what you asked for, so that you can see who saw what; it is kept as section 5 says.

5. Data retention

• Anonymous sessions — stored for up to 7 days, then removed. The optional research notes described above (the "Other" boxes and the role box) are kept separately, without your identity.
• Saved profiles — kept until you delete your profile via the link in the save email, or ask us to remove it, or until 12 months after your last visit, whichever comes first. A report you bought, or were given, is kept while you still have access to it. Using that delete link erases the saved profile; your email is then kept only as an "unsubscribed" marker so we never email you again. The 12-month deletion is automatic and does not unsubscribe you — that is a separate choice you made, and it ends when you unsubscribe.
• Email sign-ups — kept until you unsubscribe or ask us to delete them.
• Onboarding research notes — kept while we use them to decide which roles and skills to add. They carry your session identifier, so for as long as that session lives (up to 7 days) they can still be traced to it; after it is deleted they carry nothing that links them to you.
• Role suggestions — kept while we use them to decide which roles to add. If you left an email, you can ask us to delete the suggestion at any time; an anonymous one carries no identifier we could look it up by.
• Service requests — kept while we handle your request and for our records of services provided; you can ask us to delete them at any time.
• Contact messages — deleted 12 months after you send them, automatically. If you ask us to delete one sooner, it goes straight away.
• Coach applications — deleted 12 months after you apply, automatically, or straight away if you ask us.
• Co-founder applications — deleted 12 months after you apply, automatically, or straight away if you ask us.
• Hiring requests — deleted 24 months after you send them, automatically, or straight away if you ask us.
• Organization requests — deleted 24 months after you send them, automatically, or straight away if you ask us.
• Testimonials — one we publish stays up until you ask us to take it down. One we never publish is deleted 12 months after you send it, automatically.
• CV Rewrite details — what you give us for a CV Rewrite, including the CV you paste, is deleted 90 days after you ask if you never go ahead, and twelve months after you ask otherwise, automatically. The optional details you give us for a coaching call or the career program follow the same clock. If you ask us to delete your data, it goes straight away. The request itself (that you asked, when, and for what) is kept as a record of a service we provided.
• Accounts — kept until you delete the account; there is no automatic expiry. Deleting it removes your profile — including your name and any free-text answers you gave in the assessment — along with your saved skills, experience areas, interests, work preferences, match history, any password-reset or email-confirmation links, and the record of your signed-in sessions. It also erases your email address from the account, replaces the stored password hash with an unusable value and permanently disables sign-in. What remains is a row holding an internal identifier, the dates, and — if you had ever signed in with Google or LinkedIn — the account identifier that provider gave us. We keep those so that a deleted account is recognisably deleted rather than simply unknown: without them, signing in again with the same Google or LinkedIn account would silently create a fresh account instead of being refused. Password-reset links expire after an hour, can be used once, and are deleted on use or when the next one is issued; email-confirmation links expire after 24 hours and work the same way.
• Deep Report questionnaire — your answers are kept while you have an account and access to the Deep Report. Deleting your account removes them straight away, and so does the end of your access, after a refund or a request to erase your data. The country you give is also kept with the record of your request. Answers to our earlier questionnaire (26 September to 7 October 2026) keep their own clock: if you never paid for the report, they are deleted 90 days after you send them (or 90 days after you asked, if you never did), automatically; once you had paid, twelve months after you send them (or twelve months after we confirmed your payment, if you never did). If you answered it during a free trial and don't go on to buy the Deep Report, your answers and the versions of the report built during the trial are deleted 30 days after the trial ends, automatically, unless you have asked for the Deep Report by then.
• Deep Report briefs — the three things you write when you ask for a Deep Report are deleted twelve months after you write them, automatically. Deleting your account removes them straight away. The request itself — that you asked, when, and for what — is kept as a record of a service we provided.
• Deep Report versions — the delivered Deep Report and each version you make with Update my report, up to 20, are kept with the saved report they were built from and deleted with it. Deleting your account deletes them straight away, and so does withdrawing your access to the report, after a refund or when you ask us to erase your data.
• Deep Report access — the record that your account has access to the Deep Report is kept while your account exists, including after a refund or a request to erase your data has ended that access, so we can account for it. Deleting your account deletes it. The record of a free trial is kept while your account exists, so a trial is offered once per account.
• Share links — a share link works until it expires, at most 90 days after you make it, or until you revoke it, and what we keep about it is deleted 30 days after that. The record of each time it was opened is kept for 24 months, then deleted. If your access to the Deep Report ends, after a refund or a request to erase your data, your share links stop working. Deleting your account deletes the links and the record straight away, and deleting the saved report a link shows deletes that link.
• What deleting your account does not remove — a report you saved by email is a separate thing under a separate permission, and someone can have one without ever creating an account. Deleting your account leaves it in place (the Deep Report versions built from it are deleted, as above). To remove that too, use the delete link in the save email, or ask us and we will do it.

6. Third-party processors

We share data with the following processors only to the extent necessary to provide the service:

• Neon (neon.tech) — database hosting. Your data is stored on servers in London, United Kingdom, which is outside the European Economic Area.
• Vercel (vercel.com) — frontend hosting and privacy-friendly, cookieless web analytics (aggregate traffic only, no personal profiles).
• Railway (railway.app) — hosting for the server that runs the service. Everything you send us passes through it, because it is the machine that receives it, and its application log holds the technical record of those requests. It is not used for analytics and nothing there is shared onward.
• Sentry (sentry.io) — error reporting, so we find out when something breaks. When a request fails we send a technical report: what went wrong, where in the code, and the address and method of the request. We deliberately turn off the two things it would otherwise include — the values of variables at the point of failure and the body of the request — and we blank our own request headers before sending, so passwords, tokens and session identifiers do not travel with it.
• Resend (resend.com) — transactional email delivery, in two directions. Emails to you: your address is shared so we can send the link back to your saved report, a password-reset link if you ask for one, an email-confirmation link if you create an account, your Deep Report when it is ready, an email when a free trial starts and one before it ends, a confirmation when you make a request, and anything you opted into. Emails to us, about you: when you send a contact message, apply to be a coach, leave a testimonial, suggest a role, request a paid service, or ask about a plan for an organization or for hiring, we email ourselves an alert that contains what you wrote, in full, along with the name, address and any links you gave — so that message passes through Resend too. The exceptions are the CV Rewrite details, where the alert says only how much you gave us, and the optional coaching details, which the alert leaves out: both stay in our database. We do not use Resend for marketing to anyone who has not ticked the box.
• Google (google.com) — only if you choose “Continue with Google”. We send Google nothing about you: no profile, no results, and none of your free text. What happens is that Google tells us your email address and a permanent identifier for your Google account, and in doing so Google learns that you signed in to TryCareerMatch. If you never use that button, Google receives nothing at all. What Google does with that fact is governed by Google’s own privacy policy.
• LinkedIn (linkedin.com) — only if you choose “Continue with LinkedIn”. We send LinkedIn nothing about you: no profile, no results, and none of your free text. What happens is that LinkedIn tells us your email address and a permanent identifier for your LinkedIn account, and in doing so LinkedIn learns that you signed in to TryCareerMatch. If you never use that button, LinkedIn receives nothing at all. What LinkedIn does with that fact is governed by LinkedIn’s own privacy policy.
• Anthropic (anthropic.com) — AI text generation. If you buy the Deep Report, we send Anthropic a short, fixed set of facts about your results — your archetype, your strongest matches, the skills that move your ranking — with no name, no email and no figures, to write the two written paragraphs of your report: when it is delivered, and again each time Update my report makes a new version of it. If you asked for it between 17 August and 25 September 2026, that set also includes a shortened version of what you wrote in what are you trying to decide, with email addresses, links, handles and long numbers automatically removed; the other two things you wrote are never sent. Requests made after that ask you to write nothing when you ask; instead, the same shortened version of what you are trying to decide is taken from the questionnaire in your account, and none of your other answers is sent. This applies only to the paid report; the free report never uses it.
• A professional recruiter — only if you ask for a CV Rewrite. Before we send you your CV, a professional recruiter reviews it for us. They see the CV we wrote and the details you gave us for it, nothing else from your report or your account, and they use them only for that review.

Where your data is processed. Our database is in London, United Kingdom, which the European Commission recognises as providing adequate protection. The server that runs the service is in Amsterdam, the Netherlands, and the website’s server functions run in London. Vercel, Railway, Sentry, Resend and Anthropic are companies based in the United States: Vercel, Sentry and Resend are certified under the EU-U.S. Data Privacy Framework, and Anthropic and Railway rely on the European Commission’s standard contractual clauses in their data processing agreements.

7. Your rights

Under the GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — ask us to delete your data.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interest.
• Seeing who saw your report — for every share link you make, your account shows when it was opened and which parts it showed, and you can revoke it there. If your access to the Deep Report ends, that page closes with it, but we keep the record for its 24 months and send it to you if you ask.

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

You also have the right to lodge a complaint with the Portuguese data protection authority: CNPD (Comissão Nacional de Proteção de Dados) at cnpd.pt.

8. Cookies and local storage

We do not use tracking cookies or advertising cookies. We use your browser's session storage to store a session identifier that links your profile to your results (it is cleared when your browser session ends), and your browser's local storage to store a random visitor identifier that persists between visits, your unfinished onboarding answers and any roles you mark as “aiming for” on your report. Those last two stay in your browser — the marked roles are never sent to us as a list, and they are not part of your profile or your score. The visitor identifier is sent to our servers with each request and hashed there; we never store it, only the SHA-256 hash (see section 2) — it lets us count unique versus returning visitors, is not linked to your profile, and is not used to track you across other websites. We use Vercel Web Analytics, which measures aggregate traffic without cookies and without tracking you across other sites.

Only if you sign in to an optional account, we set two cookies, both needed to keep you signed in. The first keeps your session open: it holds a sign-in token that only our server can read, and your browser sends it only to the one address on our site that renews your session. The second holds no data; it only tells our pages that you are signed in, so they know to ask for your session. Both last 30 days from the last time you use your session, and both are removed when you sign out.

9. Changes to this policy

We may update this policy from time to time. The date at the top of this page reflects the most recent update. Continued use of the service after changes constitutes acceptance of the updated policy.