Privacy policy
What we keep, why, and how to take it back.
Carbon Dean is a job-search workspace. This page says what personal information it collects, what it is used for, who else handles it on our behalf, how long it is kept, and what you can do about any of it.
1. What we collect
When you ask for a workspace
Your email address and name, who the search is for, what you're looking for, your location or ZIP code, how you heard about us, and anything you add in the notes. Employers also give the company's name, its website, and whether they want to post jobs or interview candidates. We also keep your browser's type, and a scrambled (one-way hashed) form of your IP address that we use only to stop the form being abused. We can't turn it back into the address.
Your account
Your email address, when the account was created and when you last signed in. Sign-in codes and session tokens are stored only as one-way hashes.
Your workspace
What you put in it: your search settings (titles, ZIP code and radius, salary floor), the jobs you save and your notes on them, your résumés, the application details you choose to save (name, contact details, address, work authorization, your answers to common questions), your campaigns, interview notes, the recruiters and other contacts you add, interview prep packs and résumé enhancement orders.
Video rooms
For a Carbon Dean Rooms call: the names and, if you invite someone by email, their email address, the time, the host's notes and decision, and each person's answer when recording is asked for. A call is recorded and transcribed only when everyone in it agrees.
Employers
For employers who post jobs: the company domain and website, the DNS record used to confirm the domain, the postings themselves, and who sent each one to review. For each posting we count how many job seekers' searches it appeared in, stored as a one-way hash of each workspace, and show the employer only that number.
Payments
Payments are taken by Stripe. We see that an order was paid; your card details go to Stripe, never to us.
When you write to us
The email and whatever is in it.
2. What we use it for
- To run your workspace: finding roles, ranking them against your résumé, keeping your notes.
- To sign you in, and to email you about your request, your account, and work that's ready for you.
- To write interview prep and résumé versions when you ask for them (see AI-assisted work).
- To take payment for paid services.
- To keep the service secure and stop abuse.
- To see, in aggregate, how many people visit our home page and what they read.
We don't sell your personal information, we don't use it for advertising, and neither we nor the AI provider below use it to train AI models.
3. Who handles it for us
A few companies process personal information on our behalf, only to provide the service:
| Who | What for | What they receive |
|---|---|---|
| Anthropic (Claude) | Writing interview prep and résumé versions, only when you've agreed | The job posting and your résumé text, with your name, contact details, address, profile links and anything you list as identifying removed first |
| Stripe | Taking payment | Your email address and the order reference, plus what you enter on Stripe's page |
| Visitor counts on our home page and hiring data pages (Google Analytics) | What a web page visit sends: your IP address and browser details | |
| CraterSync | Carrying Carbon Dean Rooms video calls, and recording and transcribing them when everyone agrees | The names shown in the call, and the call itself |
| Our hosting company, in Canada | The servers the service runs on | Everything stored in the service, encrypted as described below |
Job postings are read from employers' career sites and job boards. We send them nothing about you. When you apply, you do it on the employer's own site, under their privacy policy.
We would disclose information if the law required it, and would tell you unless the law forbade that.
4. AI-assisted work
Interview prep and résumé enhancement are written with Anthropic's Claude, an AI model, and nothing is sent until you tick the box agreeing to it. Before anything leaves Carbon Dean, your name, email addresses, phone numbers, street address, profile links, and anything else you list as identifying you are removed. Anthropic doesn't use what we send to train its models. A person reads every draft before you see it. You can withdraw your agreement at any time in the workspace; nothing new is sent after that, and work in progress is cancelled.
5. Cookies and analytics
Our home page and our public hiring data pages (carbondean.com/hiring/) use Google Analytics, which sets a cookie, to count visits and see which pages are read. It doesn't load at all if your browser sends a Global Privacy Control or Do Not Track signal. This page, the request form, sign-in and everything inside the workspace carry no analytics, no ad pixels and no session replay.
Inside the service we set one cookie that keeps you signed in, and briefly a second while you enter a sign-in code. Pages inside the service load their fonts and files from carbondean.com only.
6. How it is protected
Every workspace has its own encryption key. Your résumés, notes, application details, contacts, prep and orders are encrypted with it, and deleting the workspace destroys the key first, so what was encrypted is unreadable from that moment. Connections use HTTPS, sign-in is by one-time code with no password to steal, every request is checked against the workspace's members, and your name never appears in a web address. If a breach ever affected your information, we would tell you as quickly as we could.
7. How long we keep it
| What | How long |
|---|---|
| Your account and workspace | Until you delete them |
| A deleted workspace | Unreadable at once (its key is destroyed); the remaining files are removed within 30 days |
| Copies of our own records (backups) | Deleted within 30 days |
| Sign-in codes and sessions | Removed a day after they expire or you sign out |
| A request for a workspace that we decline | 90 days after we decide |
| Our record that something happened (a sign-in, a download, a deletion), with no content in it | One year |
| Video recordings at CraterSync | 30 days |
| Downloads you make (spreadsheet, "Download my data") | Never stored; built for you and sent |
| Payment records | Kept by Stripe under its own policy |
8. Your choices
- See and download it. In your workspace, Setup → Download my data gives you everything the workspace holds, and what we hold about your account, in one file.
- Correct it. Everything you entered can be changed in the workspace. For anything else, email us.
- Delete a workspace. Setup → Remove this workspace.
- Delete your account. Setup → delete your whole account, or here. It removes the account, every workspace you own, and the request that opened it.
- Stop AI-assisted work. Withdraw your agreement in the workspace at any time.
- Anything else, including a question about what we hold: privacy@carbondean.com. We answer within 30 days, and it costs nothing.
9. California residents
You have the right to know what personal information we collect and how it is used and disclosed, to get a copy of it, to have it corrected or deleted, and not to be treated differently for asking. You can do all of that yourself in the service, as above, or by emailing us. We don't sell personal information, and the only third-party tracking on our site is Google Analytics on the home page and the hiring data pages, which a Global Privacy Control signal turns off.
10. Everything else
Children
Carbon Dean is for adults looking for work. We don't knowingly collect information from anyone under 16.
Where your information is
The service is offered to people in the United States only. Our servers are in Canada, and the service is run from the United States, where the providers listed above also process information on our behalf. Your information is held in both countries.
Changes to this policy
When this page changes, its date changes. If a change affects what we do with information we already hold, we will email account holders before it takes effect.
Contact
Carbon Dean, California, United States. privacy@carbondean.com for privacy; security@carbondean.com to report a security problem.