Privacy Policy

1. Who we are

Career Compass is an AI resume builder and scorer for veterans and service members moving into civilian careers. It is operated by CommandHQ (VetNet Social) and is available at https://compass.vetnet.social.

This policy explains what we collect, why we use it, and the choices you have. It applies to the website, resume builder, resume scorer, career guides, feedback, and account features.

2. Information we collect

Account details: name, email address, optional phone number, role (such as user or admin), and profile image. If you create a password, we store a one-way hash. We do not store your password in readable form.

Sign-in details: when you use Google, we receive your Google account identifier, name, email address, and profile image, plus the tokens needed to complete sign-in. If you add a passkey, we store the public key and device metadata, not your biometric data. If you turn on two-factor authentication, we store the authenticator secret and backup codes in protected form so we can check the codes you enter.

Resume and career content: the information you type or upload, including resume text, PDF files, target role, job descriptions, scores, skills, and generated resume files.

Feedback and referrals: comments you send us, and a referral name if you arrive with a referral code we recognize.

Technical data: session records (including approximate expiry, IP address, and browser type), security logs, and usage events from cookies and analytics tools.

3. How we use your information

We use this information to create and protect your account, let you sign in, build and score resumes, save your history, and show you the result of that work.

We use feedback to understand product issues and to produce internal summaries. We use referral codes only to record who referred a new account.

We use session and security data to keep you signed in for up to 24 hours, to let you sign out other sessions, and to investigate misuse.

4. AI and cloud processing

Resume text, uploaded PDFs, job descriptions, and feedback may be sent to Google Cloud, including Vertex AI (Gemini models), so we can score a resume, suggest improvements, draft resume language, and classify feedback.

Resume PDFs and generated files are stored in Google Cloud Storage. Database records, including accounts, sessions, and scores, are stored in PostgreSQL.

AI output is a draft for you to review. It is not a decision about hiring, benefits, or military status.

5. Two-factor authentication and passkeys

Career Compass supports two-factor authentication with an authenticator app and one-time backup codes, and sign-in with a passkey on supported devices.

When two-factor authentication is enabled on your account, a valid second factor is required before that sign-in is completed. We may require two-factor authentication, a passkey, or another second factor for some or all accounts.

You are responsible for keeping backup codes private and for telling us if you lose the device that holds your authenticator or passkey.

6. Cookies and analytics

We use a session cookie to keep you signed in, and a short-lived cookie to remember a referral code during registration. You can control cookies in your browser. Blocking the session cookie will sign you out.

We use Google Analytics and Firebase Analytics to understand how the site is used. Those tools may receive pages you visit, device data, and a cookie or app identifier. They are not used to sell your resume.

7. Who we share information with

We share information with service providers that run the product: Google (sign-in, analytics, cloud AI, and file storage) and our database host. They may process data only to provide those services.

We do not sell, rent, or lease your personal information. We may disclose information if the law requires it, or to protect the security of the service and its users.

8. How long we keep information

We keep account, resume, score, and feedback records while your account is active and as needed to operate the service, resolve disputes, and meet legal duties.

Session records expire. You can sign out the current session or other sessions from your account. Backup codes and authenticator data are removed when two-factor authentication is turned off or the account is deleted.

You may ask us to delete your account and the resume content tied to it by emailing us. We may keep a limited record where the law requires it.

9. Your choices

You may access or correct your name, email, and phone number in the product where those fields are editable, or by contacting us.

You may stop using Google sign-in, remove a passkey, or turn off two-factor authentication, subject to any second factor we require for the account.

You may ask for a copy of the personal information we hold, or for deletion, by emailing the address below. We may need to confirm that the request comes from you.

10. Children

Career Compass is for adults, including veterans and service members planning a civilian career. We do not knowingly collect personal information from anyone under 18.

If you believe we have information about a person under 18, email us and we will delete it.

11. Changes and contact

This policy was last updated on 12 October 2026. We will post changes on this page. If a change materially affects how we use resume content or sign-in data, we will also notify signed-in users where we have an email address.

Questions about this policy: info@commandhq.in.