Carbon Dean

Privacy policy

What we keep, why, and how to take it back.

Carbon Dean is a job-search workspace. This page says what personal information it collects, what it is used for, who else handles it on our behalf, how long it is kept, and what you can do about any of it.

Effective September 28, 2026. Carbon Dean is run from California and serves people in the United States only. Questions: privacy@carbondean.com.

1. What we collect

When you ask for a workspace

Your email address and name, who the search is for, what you're looking for, your location or ZIP code, how you heard about us, and anything you add in the notes. Employers also give the company's name, its website, and whether they want to post jobs or interview candidates. We also keep your browser's type, and a scrambled (one-way hashed) form of your IP address that we use only to stop the form being abused. We can't turn it back into the address.

Your account

Your email address, when the account was created and when you last signed in. Sign-in codes and session tokens are stored only as one-way hashes.

Your workspace

What you put in it: your search settings (titles, ZIP code and radius, salary floor), the jobs you save and your notes on them, your résumés, the application details you choose to save (name, contact details, address, work authorization, your answers to common questions), your campaigns, interview notes, the recruiters and other contacts you add, interview prep packs and résumé enhancement orders.

Video rooms

For a Carbon Dean Rooms call: the names and, if you invite someone by email, their email address, the time, the host's notes and decision, and each person's answer when recording is asked for. A call is recorded and transcribed only when everyone in it agrees.

Employers

For employers who post jobs: the company domain and website, the DNS record used to confirm the domain, the postings themselves, and who sent each one to review. For each posting we count how many job seekers' searches it appeared in, stored as a one-way hash of each workspace, and show the employer only that number.

Payments

Payments are taken by Stripe. We see that an order was paid; your card details go to Stripe, never to us.

When you write to us

The email and whatever is in it.

2. What we use it for

We don't sell your personal information, we don't use it for advertising, and neither we nor the AI provider below use it to train AI models.

3. Who handles it for us

A few companies process personal information on our behalf, only to provide the service:

WhoWhat forWhat they receive
Anthropic (Claude)Writing interview prep and résumé versions, only when you've agreedThe job posting and your résumé text, with your name, contact details, address, profile links and anything you list as identifying removed first
StripeTaking paymentYour email address and the order reference, plus what you enter on Stripe's page
GoogleVisitor counts on our home page and hiring data pages (Google Analytics)What a web page visit sends: your IP address and browser details
CraterSyncCarrying Carbon Dean Rooms video calls, and recording and transcribing them when everyone agreesThe names shown in the call, and the call itself
Our hosting company, in CanadaThe servers the service runs onEverything stored in the service, encrypted as described below

Job postings are read from employers' career sites and job boards. We send them nothing about you. When you apply, you do it on the employer's own site, under their privacy policy.

We would disclose information if the law required it, and would tell you unless the law forbade that.

4. AI-assisted work

Interview prep and résumé enhancement are written with Anthropic's Claude, an AI model, and nothing is sent until you tick the box agreeing to it. Before anything leaves Carbon Dean, your name, email addresses, phone numbers, street address, profile links, and anything else you list as identifying you are removed. Anthropic doesn't use what we send to train its models. A person reads every draft before you see it. You can withdraw your agreement at any time in the workspace; nothing new is sent after that, and work in progress is cancelled.

5. Cookies and analytics

Our home page and our public hiring data pages (carbondean.com/hiring/) use Google Analytics, which sets a cookie, to count visits and see which pages are read. It doesn't load at all if your browser sends a Global Privacy Control or Do Not Track signal. This page, the request form, sign-in and everything inside the workspace carry no analytics, no ad pixels and no session replay.

Inside the service we set one cookie that keeps you signed in, and briefly a second while you enter a sign-in code. Pages inside the service load their fonts and files from carbondean.com only.

6. How it is protected

Every workspace has its own encryption key. Your résumés, notes, application details, contacts, prep and orders are encrypted with it, and deleting the workspace destroys the key first, so what was encrypted is unreadable from that moment. Connections use HTTPS, sign-in is by one-time code with no password to steal, every request is checked against the workspace's members, and your name never appears in a web address. If a breach ever affected your information, we would tell you as quickly as we could.

7. How long we keep it

WhatHow long
Your account and workspaceUntil you delete them
A deleted workspaceUnreadable at once (its key is destroyed); the remaining files are removed within 30 days
Copies of our own records (backups)Deleted within 30 days
Sign-in codes and sessionsRemoved a day after they expire or you sign out
A request for a workspace that we decline90 days after we decide
Our record that something happened (a sign-in, a download, a deletion), with no content in itOne year
Video recordings at CraterSync30 days
Downloads you make (spreadsheet, "Download my data")Never stored; built for you and sent
Payment recordsKept by Stripe under its own policy

8. Your choices

9. California residents

You have the right to know what personal information we collect and how it is used and disclosed, to get a copy of it, to have it corrected or deleted, and not to be treated differently for asking. You can do all of that yourself in the service, as above, or by emailing us. We don't sell personal information, and the only third-party tracking on our site is Google Analytics on the home page and the hiring data pages, which a Global Privacy Control signal turns off.

10. Everything else

Children

Carbon Dean is for adults looking for work. We don't knowingly collect information from anyone under 16.

Where your information is

The service is offered to people in the United States only. Our servers are in Canada, and the service is run from the United States, where the providers listed above also process information on our behalf. Your information is held in both countries.

Changes to this policy

When this page changes, its date changes. If a change affects what we do with information we already hold, we will email account holders before it takes effect.

Contact

Carbon Dean, California, United States. privacy@carbondean.com for privacy; security@carbondean.com to report a security problem.