Privacy Policy

The short version

You give us a resume and a target role; we use them to compute your skill gaps and build a learning roadmap. That's the only reason we collect them. We don't sell your data, we don't share your resume with employers or course providers, and we don't use it to train AI models.

Courseopedia is operated by BlueDuck LLC (blueduck.co), the data controller for the information described below.

What we collect

• Analysis inputs. The resume text you upload or paste, and the job description or career you target. Uploaded files are converted to text; we keep the extracted text, not the original file.
• Analysis outputs. The skill profile, gap analysis, and roadmap we generate for you.
• Account data (only if you sign up): email address, name if you provide one, and a hashed password. We never store passwords in plain text.
• Click data. When you follow an outbound course link, we log the course, the page you came from, and the time — this is how we measure which recommendations are useful.
• Technical basics. IP addresses for rate limiting and abuse prevention, and standard server logs.

How analyses work

To run your analysis, your resume text and target-role text are sent to our AI provider (currently OpenAI) for processing under an API agreement that does not permit them to use the data to train their models. The results come back to us and are stored with your analysis.

You can run an analysis without an account. Anonymous analyses are protected by a random claim token stored in your browser — anyone with that token can view that analysis, so don't share result links you want to keep private. If you sign up, the analysis is attached to your account.

Cookies

We use cookies only to keep you signed in (a session cookie and a CSRF-protection cookie). No advertising cookies, no cross-site trackers.

Affiliate links

Some outbound course links are affiliate links. If you enroll, the course provider may pay us a commission at no extra cost to you. Providers see that you arrived from our link; they never receive your resume, your analysis, or your identity from us.

Sharing

We share data only with the service providers that run the product:

• Vercel (hosting) and Neon (database) store the data described above.
• OpenAI processes analysis inputs as described in "How analyses work".
• Stripe processes payments if you buy a paid plan; we never see card numbers.

We don't sell personal data, and we disclose it beyond these providers only if legally required.

Retention and deletion

Analyses and resumes are kept so you can revisit your roadmap. Delete a roadmap in your dashboard, or email us to have your account and all associated data — resumes, analyses, roadmaps — permanently deleted. We aim to complete deletion requests within 30 days.

Your rights

Depending on where you live (e.g. GDPR or CCPA jurisdictions), you may have rights to access, correct, export, or delete your personal data. Email us and we'll honor these requests for everyone, regardless of jurisdiction.

Changes and contact

If this policy changes materially, we'll update the effective date above and note the change on this page. Questions or requests: contact us.