Privacy Policy

Last updated: November 13, 2026

My Career Path ("we," "us," or "our") operates the website my-career-path.com. This Privacy Policy explains how we collect, use, and safeguard your information when you use our career assessment tool and related services.

1. Information We Collect

Assessment Data: When you take our career test, we process your quiz responses locally in your browser to generate results. Your responses and RIASEC/Big Five profile are stored in your browser's local storage. If you ask us to email your results, we also store them with your email address so the link in the email can open them.

Email Address: If you choose to receive your free results summary or purchase a full report, we collect your email address to deliver results.

Payment Information: Paid reports are processed through Stripe. We do not store credit card numbers on our servers. Stripe's privacy policy governs the handling of payment data.

Analytics: We use Google Analytics to understand how visitors interact with our site. This collects anonymized usage data such as pages visited, time spent, and device type.

How you reached the test: When you take a test we record how you reached it (the page, the referring website and campaign tags), your approximate country (taken from your connection, not stored as an IP address) and the type of device, to learn which pages help people. This is kept with your test result and deleted with it.

2. How We Use Your Information

• To generate and deliver your career assessment results
• To send your free results summary or paid report via email
• To improve our assessment algorithms and career database
• To analyze site usage patterns and improve user experience

3. Data Storage & Security

Assessment results and reports are stored securely on Amazon Web Services (AWS) with encryption at rest. We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, or destruction.

4. Data Retention

We retain your assessment data for as long as necessary to provide our services. In addition, two short-lived data classes are pruned automatically:

• Cabinet usage analytics (page views, session events) — deleted after 365 days.
• Support messages — deleted after 730 days.

An email address you give us but never confirm by signing in is deleted after 90 days if nothing else is attached to it, or 180 days after your last test if it holds test results, unless a report was paid for.

You can delete your account at any time from Account settings → Delete account in the cabinet, which removes your profile, test history, resumes, payments, subscriptions and analytics records. You may also email us at info@my-path.net to request deletion.

5. Third-Party Services

We use the following third-party services:

• Render — Hosting of our application servers and database. Data: Everything the service stores and handles. Location: EU / USA.
• Amazon Web Services — S3 storage of reports and uploads; SES email sending. Data: Reports, uploaded files, and the address and content of emails we send.
• Resend — Email delivery. Data: Your email address and the content of emails we send you.
• Moonshot AI — AI analysis (Kimi API, api.moonshot.ai). Data: Answers, scores and uploaded materials sent to generate your report; your Analysis chat messages with the context the chat uses — your test results, excerpts of your earlier deep reports, results other people shared with you, and the materials, people and diary period you attached to that chat. Location: Outside the EEA.
• Groq — AI analysis (api.groq.com), voice transcription, and drafting replies to support messages. Data: Answers, scores and uploaded materials sent to generate your report; voice for transcription; your support message when a reply is drafted; your Analysis chat messages with the context the chat uses — your test results, excerpts of your earlier deep reports, results other people shared with you, and the materials, people and diary period you attached to that chat. Location: USA.
• Anthropic — AI analysis (Claude API, api.anthropic.com). Data: Answers, scores, notes you write and materials you upload, sent to generate your report; pseudonymised samples of Analysis chat replies, for a quality review of AI answers. Location: Outside the EEA.
• Stripe — Payments. Data: Payment details; we never see or store your card number.
• Google Analytics 4 — Analytics, only after you opt in via the cookie banner. Data: Pages visited, time spent, device type; IP address anonymized.
• Google — Gmail mailbox for our @my-path.net addresses; Google sign-in. Data: Emails you send us; name, email address and picture when you sign in with Google.
• Sentry — Error monitoring. Data: An opaque id only; no email address or name. Location: EU region.
• Telegram — Internal operations alerts. Data: Alert text for our team; never your email address.
• Cloudflare — CDN and DNS, bot check, and routing of email sent to our addresses. Data: Request data such as your IP address; emails sent to our addresses.

Some of these providers process data outside the European Economic Area (EEA), in the United States and elsewhere. We use them under their data-processing terms. For questions about these transfers, write to info@my-path.net.

6. Email Communications

We may send you the following categories of email:

• Transactional emails — sign-in links, result summaries you request, payment receipts, account security alerts, and paid report delivery. These are necessary for the service to function and cannot be disabled.
• Product updates — profile recommendations and feature announcements. Enabled by default; you can opt out at any time.
• Lifecycle emails — onboarding tips and periodic engagement nudges based on how long you have been a member. Enabled by default; you can opt out at any time.
• Marketing emails — occasional promotional content, special offers, and newsletters. Disabled by default; sent only with your explicit opt-in consent.

Every non-transactional email includes an unsubscribe link. You can also manage your email preferences at any time from Profile → Email Notifications in the cabinet, or via the unsubscribe page linked in any email we send. Changes take effect immediately.

We use Resend as our email delivery provider. We maintain an internal suppression list: if your email address generates a hard bounce or you file a complaint, we automatically stop sending to that address.

7. Cookies

We use essential cookies for site functionality and analytics cookies (Google Analytics) to understand usage patterns. You can disable cookies through your browser settings.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction or deletion of your data
• Object to or restrict processing of your data
• Request data portability

For EU/EEA residents, these rights are provided under the General Data Protection Regulation (GDPR).

9. Children's Privacy

My Path accounts are for adults (16+). Child-related assessments are parent-report tools: a parent answers questions about patterns they observe, after an explicit parental-consent step; children do not take tests themselves.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

11. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at: info@my-path.net