Privacy Policy

Frank Careers Pty Ltd (ABN 33 697 885 082, ACN 697 885 082) ("Frank Careers", "we", "us", "our") operates frankcareers.ai (the "Service"). This policy explains what personal information we collect, how we use it, who we share it with, and your rights.

We're committed to handling your information openly and transparently, in line with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. Who we are

Frank Careers Pty Ltd
Contact: hello@frankcareers.ai

2. What information we collect

Information you give us:

• Account details: email address, first name, last name (optional), mobile number (optional), password
• Career information: your resume content, LinkedIn profile content, employment history, education, skills, target roles, career situation, preferences, exclusions, and anything else you share during intake or chat
• Generated content: resumes, cover letters, and other outputs you create using Frank
• Conversations: the messages you exchange with Frank in chat
• Payment information: when you subscribe, payment details are collected and processed by Stripe — we don't store credit card numbers ourselves

Information collected automatically:

• Usage data: pages visited, features used, timestamps, errors encountered
• Device data: browser type, operating system, IP address
• Cookies and local storage: authentication tokens (kept in your browser's local storage), session identifiers, and other data necessary for the Service to function

Information from third parties:

• Referral sources: if you arrived via an affiliate or referral partner, we collect information about that referral (such as the partner ID or tracking code)

3. Why we collect it

We collect personal information to:

• Provide the Service — including AI-generated career advice, resume building, and cover letter creation
• Manage your account and subscription
• Process payments
• Personalise your experience and improve our recommendations
• Communicate with you about your account, the Service, and updates
• If you opt in, send you marketing communications (which you can opt out of at any time)
• Monitor and improve the Service, including error tracking and analytics
• Comply with legal obligations
• Pay affiliate partners and track referral conversions

If you choose not to provide certain personal information, we may not be able to create resumes, cover letters, or other outputs for you, provide tailored career guidance, maintain your account, process your subscription, or respond properly to your requests.

4. Who we share information with

We share information only with the third parties necessary to run the Service:

• Anthropic (anthropic.com) — provides the AI model that powers Frank. Your messages, resume content, and other information you share in chat are sent to Anthropic to generate responses.
• Supabase (supabase.com) — our database provider. Stores your account, conversations, and career information.
• Stripe (stripe.com) — our payment processor. Handles subscription payments and stores payment information directly with them.
• Sentry (sentry.io) — error monitoring. We send anonymised error data including your user ID (but not your email or content) to help us diagnose issues.
• Railway (railway.app) — our hosting provider. Stores and serves the Service infrastructure.
• Cloudflare (cloudflare.com) — DNS and content delivery. Sees traffic to frankcareers.ai but does not have access to your account data.
• PostHog (posthog.com) — analytics. Tracks usage patterns to help us understand and improve the Service.
• Google Workspace — our business email provider. Used when you contact us by email.
• Affiliate and referral partners — if you came to Frank via a referral or affiliate, we may share conversion data, such as the fact that a referred user signed up or subscribed, with that partner. We do not share your email or content with affiliates.

Some of our service providers are based outside Australia, or use infrastructure or subprocessors located outside Australia. As a result, your personal information may be disclosed to, stored in, or processed in countries including the United States, and potentially other countries in which those providers or their subprocessors operate. Where practicable, we will update this policy to reflect the countries in which overseas recipients are likely to be located. We take reasonable steps to use service providers that maintain appropriate privacy and security standards.

Overseas recipients may handle your personal information in accordance with the laws of the country in which they operate, which may differ from Australian privacy laws.

5. AI and your content

Frank uses an AI model to generate career advice, resumes, and cover letters. When you use Frank:

• Your messages, resume content, and other inputs are sent to our AI provider to generate responses
• We do not use your content to train AI models
• We do not sell your content or use it for purposes other than providing the Service to you

Our AI provider's data handling is governed by their own terms and privacy policy.

We use AI tools to help generate content, suggestions, and recommendations based on the information you provide. At the date of this policy, these tools are used to support the Service and do not solely make decisions that have legal or similarly significant effects on you. We may update this section from time to time as our use of AI develops and as privacy law requirements change.

6. Cookies, Analytics and Error Monitoring

We use cookies, browser storage, and third-party tools to operate the Service and understand how it is used.

Essential storage. We store authentication tokens and session identifiers in your browser's local storage to keep you logged in and the Service functioning. This includes a Supabase authentication token, a consent record, and identifiers we use to preserve your work in progress and your active conversation. This storage is essential to the Service and is not used for advertising.

Analytics — PostHog. We use PostHog (posthog.com) to understand feature usage and improve the Service. PostHog stores a first-party cookie and data in your browser's local storage to recognise a session, and may receive a pseudonymous identifier to associate events with that session. It does not receive your name, email, or the content of your conversations. PostHog is hosted in the United States and processes data on US servers. We do not use analytics data for advertising and we do not sell your data.

Your choices.

• EU and UK users: We ask for your consent before PostHog loads. If you decline, no analytics data is collected from you.
• All other users (including Australia and the United States): Analytics runs automatically when you use the Service, and there is no opt-out within the Service. We rely on this policy as our notice of collection under the Australian Privacy Principles. Clearing your browser storage does not stop analytics — it resets your identifier and will log you out.

Error monitoring — Sentry. We use Sentry (sentry.io) for error monitoring to detect and fix faults. Sentry receives technical error data and your user ID on every visit, including for EU and UK users, because it is necessary for the reliable operation of the Service. Sentry does not receive your email address or the content of your conversations.

Cross-border disclosure. Both PostHog and Sentry process data outside Australia, in the United States. Frank Careers Pty Ltd remains accountable for ensuring these recipients handle your information consistently with the Australian Privacy Principles (APP 8).

7. Marketing communications

If you tick the marketing communications checkbox when you sign up, you'll receive occasional emails about the Service, including product updates, career tips, and offers. You can opt out at any time by clicking the unsubscribe link in any email, or by contacting hello@frankcareers.ai.

8. How long we keep your data

• Active accounts: we retain your personal information for as long as you have an account with us.
• Cancelled or inactive accounts: we retain your data for up to 3 years after your last activity. This is to give you the option to return to Frank and pick up where you left off, as career searches often happen at intervals over years.
• On deletion request: we will delete or de-identify your personal information within 30 days of receiving your request, except where we are required to retain it by law, for example tax records or payment records.
• Backup and audit records: some information may be retained longer in backups or for security and audit purposes, but is not actively used.

When we no longer need personal information for the purpose for which it was collected, and we are not required by law to retain it, we take reasonable steps to securely destroy it or permanently de-identify it.

9. Your rights

Under the Australian Privacy Act, you have the right to:

• Access your personal information and request a copy of what we hold about you
• Correct inaccurate or out-of-date information
• Request deletion of your personal information
• Opt out of marketing communications at any time
• Complain about how we handle your personal information

To exercise any of these rights, email us at hello@frankcareers.ai. We will respond within 30 days.

If you make a privacy complaint, please include enough detail for us to investigate it properly. We may ask you for further information to confirm your identity or clarify the issue. We will acknowledge your complaint within a reasonable time, investigate it, and let you know the outcome in writing.

If you are not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner at oaic.gov.au.

10. International users

Frank is available globally. If you're outside Australia, you may have additional privacy rights under your local laws (such as the GDPR if you're in the EU/UK, or the CCPA if you're in California). We aim to meet the requirements of these frameworks where they apply.

To exercise rights under any of these laws, contact us at hello@frankcareers.ai.

11. Security

We take reasonable steps to protect your personal information from misuse, loss, unauthorised access, modification, or disclosure. This includes:

• Encrypted connections (HTTPS) across the Service
• Access controls on our database (row-level security)
• Authentication via secure tokens
• Regular security review of code changes
• Error monitoring to detect issues quickly

No internet-based service can guarantee absolute security. If we become aware of a data breach that puts your information at risk, we will notify you and the OAIC in line with the Notifiable Data Breaches scheme.

We also review our information handling practices from time to time to help ensure personal information is retained only as long as reasonably necessary and is securely deleted or de-identified when no longer required.

12. Children's privacy

Frank is not intended for users under 18. We do not knowingly collect information from people under 18. If you become aware that a minor has provided us with personal information, please contact us so we can delete it.

13. Changes to this policy

We may update this policy from time to time. If we make significant changes, we will notify you by email or through the Service. The "Last updated" date at the top reflects the most recent version.

14. Contact us

Questions, requests, or complaints:

Frank Careers Pty Ltd
Email: hello@frankcareers.ai