Privacy policy.

Who operates the service

Salari Career OS is operated by Mike Salari as an individual seller. In this policy, “Salari,” “we,” and “our” refer to Mike Salari and the Salari Career OS service.

Information we collect

We collect the information needed to provide the product: account identifiers, authentication and session information, candidate profile data, CV and LinkedIn source material, campaign preferences, opportunity decisions, application evidence, outreach and interview records, browser-extension pairing data, support communications, and bounded technical or security records.

Stripe processes payment-card details. Salari receives payment status, transaction identifiers, product, amount, currency, refund state, and access-entitlement information. Salari does not intentionally collect or store complete payment-card numbers.

Optional sensitive information

Onboarding may ask about gender identity, disability, veteran status, driver’s-license status, or security clearance because employers may ask related application questions. Candidates can choose not to provide these answers. In the current release, these optional answers stay within the active browser flow and are removed before profile or onboarding-progress data is saved to Salari servers.

Work-authorization information is saved because it is required to verify whether a role is open to the candidate. Salari uses it only for the requested candidate workflow and does not use optional demographic or disability information to widen a campaign into unrelated roles. Salari will not persist or reuse special-category information in a future release without an approved lawful condition and the required consent, access, deletion, and audit controls.

Why we process information

We process account, candidate, campaign, document, and workflow data because it is necessary to provide the service requested by the candidate. We process limited security, abuse-prevention, reliability, and audit data for our legitimate interests in protecting candidates and operating the service. We retain payment and dispute records when required for accounting, tax, fraud prevention, or legal obligations. Where processing relies on consent, consent may be withdrawn without affecting earlier lawful processing.

Job discovery and candidate data

Career records and public-job discovery are separate systems. Search receives only the target criteria needed for discovery and compatibility checks. It does not receive raw CVs, interview answers, application evidence, account email addresses, or unrelated candidate documents. Public job records do not become candidate records until they are delivered into an owned campaign.

AI-assisted features

Salari may send the minimum evidence and task instructions needed to OpenAI for document drafting, application assistance, and Interview Room scoring. Requests use bounded outputs and disable API response storage in the request. OpenAI may still retain API abuse-monitoring data under its applicable service terms. AI output is assistance, not a hiring decision, and candidates must review generated documents and answers before using them.

Browser extension

When paired by an authenticated candidate, the extension may recognize supported job pages, extract job-posting fields the candidate chooses to send, assist with form preparation, and return application evidence. It does not submit an application without the candidate’s action. Pairing credentials are scoped, expire, and can be revoked.

Service providers

Current production-facing providers are Supabase for authentication and the candidate data boundary, Stripe for payments, OpenAI for approved AI-assisted features, and self-hosted BillionMail for transactional email. Salari-operated Career, Search, Admin, and extension services process data only for the purposes described here. We may disclose information when required by law or needed to protect candidates or the service.

We do not sell candidate CVs, application histories, interview answers, or campaign records. We do not use them for third-party advertising.

Retention and deletion

Candidate workspace data is retained while the account or purchased access remains active and afterward only as needed for support, disputes, security, or an approved legal obligation. Interview Room attempt history in the first release stays on the candidate’s device. Payment, audit, email-delivery, provider, log, and backup records have separate retention controls because they serve different legal and operational purposes.

A verified deletion request removes candidate content from the active Web and Career systems, revokes paired extensions, suppresses the identity from restored backups, and requires an operator to resolve every configured provider. Some minimized payment, fraud, dispute, security, and backup records may remain until their approved retention period expires.

Your rights and choices

Depending on applicable law, candidates may request access, correction, deletion, restriction, objection, or portability. An authenticated candidate can download a machine-readable export and create a correction or deletion request from Settings. We verify and review destructive requests before execution. Candidates may also contact the privacy address below.

Security

We use access controls, service boundaries, scoped credentials, audit records, data minimization, backup safeguards, and other administrative, technical, and organizational measures intended to protect personal information. No internet service is completely secure.

Children’s privacy

Career OS is intended for adults and is not directed to children under 16. We do not knowingly collect personal information from children through the service.

International processing

Some providers may process information outside the candidate’s country. Before public launch, Salari must complete its provider, data-residency, contractual, and international-transfer review. Where applicable law requires a transfer safeguard, Salari will use the appropriate contractual or legal mechanism.

Changes and contact

We may update this policy as the product, providers, or legal requirements change. Material changes will be presented through the service or another appropriate channel. Privacy requests may be sent to [email protected]. This mailbox must be operational before public launch.