Legal Policies &
Disclosures

1.1 Acceptance of Terms

Career Navigator™ (the "Service") is a product operated by ElevAI ("ElevAI", "the Company", "we", "us", or "our"). By accessing or using the Service, you agree to be bound by these Terms of Service ("Terms"). If you do not agree to these Terms, you may not use the Service. These Terms constitute a legally binding agreement between you and ElevAI.

Your acceptance of these Terms is conditional on each of the following. If you cannot meet them, you may not create an account or use the Service.

By creating an account and ticking the acceptance box at registration, you represent and warrant that:

• Age: You are at least 18 years of age. Accounts belonging to anyone under 18 will be terminated and the associated personal data deleted
• Legal capacity: You have the legal capacity to enter into a binding contract in your jurisdiction, and you are not barred from using the Service under any applicable law
• Accuracy: All information you provide, including your name and email address, is accurate, current, and truthful
• Own account: You are registering for yourself and not on behalf of another person without their authority
• Acknowledgement: You understand that career matches and action plans are algorithmic suggestions and are not professional career, financial, legal, or medical advice

We record the date, time, policy version, and IP address at which you accept these Terms as evidence of your agreement. If we learn that a user is under 18, or that these representations are untrue, we may suspend or terminate the account immediately.

1.2 Geographic Scope

The Service is intended for, and directed exclusively to, individuals located in the United States and Canada. By using the Service you confirm that you are located in one of those countries.

We do not offer or market the Service in the European Economic Area, the United Kingdom, or other regions. If you access the Service from outside North America, you do so on your own initiative and at your own risk, you are responsible for complying with any laws that apply to you locally, and we make no representation that the Service or its content is appropriate or available for use in your location. We may restrict or decline access from outside North America at our discretion.

All salary figures, training costs, certifications, job-market data, and career guidance reflect United States and Canadian markets and should not be relied upon elsewhere.

1.3 Description of Service

Career Navigator is a career pivot coaching platform that uses skill-matching algorithms and structured coaching frameworks to help users explore career transition options and generate personalised action plans. The Service includes:

• A multi-step skills audit and career matching session
• AI-assisted career path recommendations across our catalogue of career paths
• Personalised 90-day action plans for career transitions
• A daily progress tracker to work your action plan one manageable step at a time
• Salary and training data for matched career paths
• A community space for user feedback and career pivot stories, where the Career Navigator team may publish a visible reply to submitted feedback
• Account management and progress saving functionality

1.4 Account Registration

To access certain features, you must register for an account by providing your first name, last name, email address, phone number, and a username and password. You are responsible for:

• Maintaining the confidentiality of your account credentials
• All activity that occurs under your account
• Notifying us immediately of any unauthorized access at support@elevai360.com
• Ensuring your account information remains accurate and up to date

We reserve the right to terminate accounts that contain false information, violate these Terms, or remain inactive for more than 24 consecutive months.

1.5 Subscriptions, Billing & Cancellation

Free and paid plans

Career Navigator offers a free tier and one or more paid plans ("Premium"). The features included in each tier, and the current prices and billing intervals, are shown on the upgrade screen inside the application at the time of purchase. Some early users may hold complimentary "founding member" access, which is granted at our discretion and is not a paid subscription.

Payment processing

Payments are processed by Stripe. We do not receive or store your full card number. By subscribing you also agree to Stripe's terms and authorise recurring charges to your selected payment method. You represent that you are authorised to use the payment method you provide.

Automatic renewal and cancellation

• Subscriptions renew automatically for successive periods equal to your original term unless cancelled
• You may cancel at any time via Manage subscription in your account, which opens the Stripe customer portal — cancellation takes effect at the end of the current paid period
• You keep access to paid features until the end of the period you have already paid for; we do not pro-rate partial periods unless required by law
• Cancelling does not delete your account or your saved data — see Section 3.3 to request deletion
• The renewal price may differ from an introductory or promotional price. We will tell you the renewal price before it applies

Refunds

Except where required by applicable law, payments are non-refundable and we do not provide refunds or credits for partially used periods. If you believe you were charged in error, contact support@elevai360.com within 30 days of the charge and we will review it in good faith. Nothing in this section limits any non-waivable statutory refund or cancellation right you may have under the consumer law of your state or province.

Price changes

We may change subscription prices. Any change will apply to your next billing period, and we will give you advance notice by email so you can cancel before the new price takes effect. Continuing your subscription after the effective date constitutes acceptance of the new price.

Failed payments and chargebacks

If a payment fails, Stripe may retry it. We may suspend or downgrade access to paid features if payment remains outstanding. If you dispute a charge with your bank rather than contacting us first, we may suspend or terminate the account while the dispute is resolved. We would prefer you contact support@elevai360.com — most issues are resolved quickly.

1.6 Acceptable Use

You agree not to use the Service to:

• Provide false personal information or impersonate any person or entity
• Attempt to reverse-engineer, scrape, or extract data from the platform in bulk
• Interfere with or disrupt the integrity or performance of the Service
• Submit content that is defamatory, harassing, obscene, or unlawful
• Use automated bots, scrapers, or tools to access the Service
• Resell, sublicense, or commercially exploit the Service without written permission
• Attempt to gain unauthorized access to our systems or other users' accounts

1.7 User Content, Moderation & Removal

"User Content" means anything you submit to the community areas of the Service, including feedback and career pivot stories. You retain ownership of your User Content.

By submitting User Content you grant us a worldwide, non-exclusive, royalty-free, sublicensable licence to host, store, reproduce, display, and distribute it in connection with operating and promoting the Service. This licence continues for content you have made public even if you later close your account, though you may request removal (see below).

You represent that your User Content is your own, does not infringe anyone's rights, and does not contain confidential information belonging to an employer or third party. Do not post information you are not free to share.

You agree not to submit User Content that is unlawful, defamatory, harassing, hateful, obscene, deceptive, invasive of privacy, or that discloses another person's personal information without their consent.

Moderation. We may — but are not obliged to — review, edit, refuse to publish, or remove any User Content at any time, with or without notice, at our sole discretion. We may publish a visible reply from the Career Navigator team beneath submitted feedback. We may also suspend or terminate accounts that repeatedly breach these rules.

Removal requests. To have your own User Content removed, email support@elevai360.com from the address on your account. We aim to action removal requests within 7 business days.

1.8 Intellectual Property

All content, software, algorithms, career path data, training recommendations, and materials on the Service are owned by or licensed to ElevAI and are protected by applicable intellectual property laws. You are granted a limited, non-exclusive, non-transferable, revocable license to access and use the Service for your personal, non-commercial use only.

Your personal data, career session results, and action plans belong to you. You retain ownership of any content you submit (feedback, stories). By submitting content, you grant us a non-exclusive, royalty-free license to display it on the platform.

1.9 Copyright & Intellectual Property Complaints (DMCA)

We respect intellectual property rights and respond to valid notices of alleged infringement under the Digital Millennium Copyright Act and comparable Canadian law.

If you believe content on the Service infringes your copyright, send a notice to support@elevai360.com with the subject line "DMCA Notice" including:

1. Your physical or electronic signature
2. Identification of the copyrighted work you claim has been infringed
3. Identification of the material you claim is infringing and where it is located on the Service
4. Your name, address, telephone number, and email address
5. A statement that you have a good-faith belief the use is not authorised by the copyright owner, its agent, or the law
6. A statement, under penalty of perjury, that the information in your notice is accurate and that you are the copyright owner or authorised to act on their behalf

We will remove or disable access to material that is the subject of a valid notice and will terminate, in appropriate circumstances, the accounts of repeat infringers. If you believe your content was removed in error, you may submit a counter-notice to the same address.

1.10 Disclaimers

The Service is provided "as is" and "as available" without warranties of any kind, express or implied, including any implied warranties of merchantability, fitness for a particular purpose, title, and non-infringement. We do not guarantee that career matches are accurate, complete, current, or suitable for your specific circumstances, or that the Service will be uninterrupted or error-free.

No guarantee of results. We do not promise that you will obtain a job, an interview, a salary increase, a certification, or any other outcome. Individual results depend on factors outside our control, including your effort, experience, and local labour-market conditions. Any examples, salary figures, timelines, or success stories are illustrative and are not a guarantee of your results.

Third-party content. Training providers, certifications, courses, employers, and any career advisors referenced in the Service are independent third parties — see Section 1.11 for the full third-party disclaimer.

Salary and labour-market data is based on publicly available research for the United States and Canada, may be out of date, and may not reflect actual compensation in your location or for your level of experience.

Wellbeing. The Service is not a crisis or mental-health service. If you are experiencing distress or a mental-health emergency, contact a qualified professional or your local emergency services.

Some jurisdictions do not allow the exclusion of certain warranties, so parts of the above may not apply to you. Nothing here limits rights that cannot be waived under applicable consumer law.

1.11 Third-Party Services, Materials & Links

1.11.1 Access to Third-Party Services

The Service may reference, integrate with, link to, or display content, services, software, or materials operated by third parties ("Third-Party Services" and "Third-Party Materials"). These include, without limitation: training providers, courses, and certification bodies referenced in career paths and action plans; payment processing; email delivery; hosting and database infrastructure; content submitted by other users; and, where enabled, independent career advisors listed in the Service. Although these may be accessible through or described within the Service, we do not own or control them and assume no responsibility for their content, functionality, availability, pricing, or policies.

1.11.2 No Endorsement, Affiliation, or Sponsorship

By using the Service you acknowledge that we do not endorse, verify, certify, or assume responsibility for the accuracy, legality, quality, safety, or reliability of any Third-Party Service or Third-Party Materials.

For the avoidance of doubt: references within the Service to any organisation, training provider, course, certification, credential, employer, product, tool, or brand — including any names, marks, or descriptions of their offerings — are for informational and educational purposes only and do not imply any endorsement, affiliation, sponsorship, partnership, accreditation, or approval between that third party and ElevAI, in either direction. All trademarks and names are the property of their respective owners. As stated in Section 5.4, we receive no commission, referral fee, or other compensation for recommending any training provider or certification.

Any interaction, enrolment, purchase, engagement, consultation, or agreement you enter into with a third party discovered through the Service is solely between you and that third party. We are not a party to it and bear no responsibility for any dispute, loss, cost, or issue arising from it, including the quality or outcome of any course, certification, or advisory session.

1.11.3 Links, Advertising & Sponsored Content

The Service may contain links to third-party websites, and may now or in future display advertisements, sponsored listings, affiliate links, or other promotional content ("Advertising"). Following a link or engaging with Advertising does not create any endorsement, affiliation, or sponsorship between us and that third party, and is entirely at your own risk.

Advertising does not affect your career matches. Where we display Advertising, it is identified as such. Paid placement never changes how the matching system ranks career paths for you, and no advertiser can buy a higher match score. Where we receive compensation for a listing, link, or referral, we will disclose that relationship as required by the U.S. Federal Trade Commission's endorsement guidelines and comparable Canadian rules.

We do not control and are not responsible for the content, claims, offers, pricing, or practices of any advertiser or sponsor. Any dealings with an advertiser — including any purchase, enrolment, or provision of your information — are solely between you and that advertiser, and we are not liable for any resulting loss or damage.

It is your responsibility to review and comply with the terms, pricing, and privacy practices of any third-party service or advertiser before using it. Once you leave the Service or submit information to a third party, this policy no longer governs that information, and we disclaim liability for how third parties collect, process, store, or use your data.

Our current advertising and tracking practices are described in the Cookie Policy (Section 4). If we introduce third-party advertising or advertising cookies, we will update these policies and obtain consent where required by applicable law before doing so.

1.11.4 No Liability for Third-Party Content

We do not routinely monitor, evaluate, or guarantee the accuracy, completeness, currency, or legality of Third-Party Materials. Course costs, curricula, certification requirements, salary figures, and job availability change frequently and may be out of date or incorrect when you see them. To the fullest extent permitted by law, we make no express or implied warranties regarding third-party content and disclaim all liability for any loss, damage, cost, or harm resulting from your reliance on it. You are responsible for verifying any third-party information — including price, accreditation, and suitability — before you spend money or make a career decision based on it.

1.11.5 Use of Third-Party Services at Your Own Risk

Accessing Third-Party Services through the Service is entirely voluntary and at your own risk. You assume all risks associated with third-party content, including exposure to inaccurate, misleading, offensive, or objectionable material, and to malware, phishing, fraud, or other deceptive practices. We are not responsible for any technical issue, dispute, financial loss, or damage arising from your engagement with a Third-Party Service. To the fullest extent permitted by law, you waive any claim against us relating to your interactions with third-party content, links, advertisements, or advisors.

1.11.6 Reporting Third-Party Content

If you encounter harmful, misleading, fraudulent, or offensive third-party content through the Service, please report it to support@elevai360.com. We appreciate such reports and will consider them, but we are not obliged to investigate, remove, or act on third-party content except where required by law.

1.12 Limitation of Liability

To the fullest extent permitted by applicable law, ElevAI shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising from your use of or inability to use the Service, including but not limited to loss of income, employment outcomes, or data loss. Our total liability shall not exceed the amount you paid us in the twelve months preceding the claim.

1.13 Indemnification

You agree to indemnify, defend, and hold harmless ElevAI and its officers, directors, employees, and agents from and against any claims, liabilities, damages, losses, and expenses (including reasonable legal fees) arising out of or connected with: (a) your use of the Service; (b) your User Content; (c) your breach of these Terms or of any applicable law; or (d) your violation of the rights of any third party. We reserve the right to assume the exclusive defence of any matter subject to indemnification by you, in which case you agree to cooperate with us.

1.14 Dispute Resolution, Arbitration & Class Action Waiver

Informal resolution first. Before starting arbitration, you agree to contact us at support@elevai360.com with a written description of the dispute and to attempt in good faith to resolve it informally for at least 60 days. Most issues are resolved at this stage.

Agreement to arbitrate. If we cannot resolve the dispute informally, you and ElevAI agree that any dispute arising out of or relating to these Terms or the Service will be resolved by final and binding arbitration administered by a recognised arbitration provider under its consumer arbitration rules, before a single arbitrator, in the English language. The arbitrator's award may be entered in any court of competent jurisdiction.

Exceptions. Either party may (a) bring an individual claim in small-claims court, and (b) seek injunctive or equitable relief in court to protect intellectual property rights. Nothing here prevents you from reporting a matter to a government agency.

Class action and jury trial waiver. You and ElevAI agree that each may bring claims against the other only in an individual capacity, and not as a plaintiff or class member in any purported class, collective, consolidated, or representative proceeding. The arbitrator may not consolidate claims or preside over any form of representative proceeding. You and ElevAI waive any right to a jury trial. If this waiver is found unenforceable as to a particular claim, that claim will proceed in court and the remainder of this section will still apply.

How to opt out. You may opt out of this arbitration agreement by emailing support@elevai360.com with the subject line "Arbitration Opt-Out" within 30 days of first accepting these Terms, stating your name, the email on your account, and that you wish to opt out. Opting out will not affect your use of the Service in any other way, and does not affect any other part of these Terms.

If you are a resident of a jurisdiction whose law does not permit some or all of this section, it applies to you only to the extent permitted by that law.

1.15 Time Limit on Claims

To the fullest extent permitted by applicable law, any claim arising out of or relating to these Terms or the Service must be brought within one (1) year after the claim arose. Claims brought after that period are permanently barred. Where applicable law does not permit this limitation, the shortest period permitted by that law applies instead.

1.16 Changes to Terms

We may update these Terms periodically. We will notify registered users by email at least 14 days before material changes take effect. Continued use of the Service after changes constitutes acceptance of the updated Terms.

2.0 Who Is Responsible for Your Data

The controller responsible for the personal data described in this policy is:

If you have any question about how your personal data is handled, or wish to exercise a privacy right described in Section 3.3, contact us at that address.

2.1 Information We Collect

We collect the following categories of personal information:

2.2 How We Use Your Information

We use collected information exclusively to:

• Create and manage your account and authenticate your identity
• Generate personalised career matches and 90-day action plans
• Save and restore your progress across sessions
• Display community feedback and stories (using only your first name)
• Send you product updates and important service notifications (you can opt out)
• Analyse first-party usage and analytics data associated with your account to understand how features are used and improve the product — we do not use this for advertising and we do not sell it
• Comply with legal obligations and enforce our Terms of Service
• Investigate and prevent security incidents and fraudulent activity

2.3 What We Do Not Do

2.4 Legal Basis for Processing

As set out in Section 1.2, Career Navigator is offered only in the United States and Canada, and we do not target or market the Service in the European Economic Area or the United Kingdom. Where equivalent legal-basis concepts apply under North American privacy laws — or in the event we hold data for someone in the EEA or UK who accessed the Service on their own initiative — we rely on the following bases:

• Contract — Processing your account and session data is necessary to provide the Service you have requested
• Legitimate Interests — Security monitoring, fraud prevention, and product improvement where your interests do not override ours
• Consent — For optional communications such as newsletters or product announcements
• Legal Obligation — When required by applicable law or legal process

2.5 Data Retention

2.6 Third-Party Services & When We Share Data

We do not sell your personal data. We share it only in these situations:

• Sub-processors — the service providers listed below, who process data only on our instructions
• Legal requirements — where we are required to do so by law, regulation, subpoena, court order, or other valid legal process, or to protect the rights, property, or safety of ElevAI, our users, or the public
• Business transfer — if ElevAI is involved in a merger, acquisition, financing, reorganisation, bankruptcy, or sale of all or part of its assets, your personal data may be transferred to the successor or acquiring entity as part of that transaction. We will notify you by email or a prominent notice in the Service before your data becomes subject to a materially different privacy policy, and the successor will remain bound by commitments at least as protective as those in this policy
• With your direction — for example, if you request an introduction to a career advisor, we pass the details you provide to that advisor

We use the following sub-processors to operate the Service:

All sub-processors are contractually required to process data only as instructed and to maintain appropriate security standards. Supabase and Vercel are SOC 2 Type II certified.

2.7 Where Your Data Is Processed

Career Navigator serves users in the United States and Canada, and our infrastructure and sub-processors process and store data in the United States. If you are located in Canada, your personal data will be transferred to and processed in the United States, where it may be subject to lawful access requests by United States authorities. By using the Service you consent to that transfer and processing.

Where we hold data for anyone in the EEA or UK who accessed the Service on their own initiative, any transfer is made under Standard Contractual Clauses approved by the European Commission.

3.1 Where Your Data Lives

All personal information and career session data is stored in a secure managed cloud database (see our sub-processors in Section 2.6). Data is encrypted at rest and in transit using industry-standard encryption.

3.2 Client-Side Storage

ElevAI uses the following browser storage mechanisms:

3.3 Your Data Rights

Depending on your location, you have the following rights regarding your personal data:

• Access: Request a copy of all personal data we hold about you
• Rectification: Correct inaccurate or incomplete personal data
• Erasure ("Right to be Forgotten"): Request deletion of your account and all associated data
• Portability: Receive your career data in a machine-readable format (JSON or CSV)
• Restriction: Request that we limit processing of your data in certain circumstances
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Where processing is based on consent, withdraw it at any time

To exercise any of these rights, email support@elevai360.com. We will respond within 30 days (and within 72 hours for urgent security matters).

3.4 U.S. State Privacy Rights

Several U.S. states give residents specific rights over their personal data — including California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), Oregon, Montana, and others as their laws take effect. We extend the following rights to all our users, regardless of which state you live in:

• Know / access — what personal data we hold about you and how we use it
• Correct — fix inaccurate personal data
• Delete — request deletion of your account and associated data
• Portability — obtain a copy of your data in a portable, machine-readable format
• Opt out of sale, sharing, and targeted advertising — we do not sell or share personal data for cross-context behavioural advertising, and we do not use it for targeted advertising, so there is nothing to opt out of
• Opt out of profiling — we do not carry out profiling that produces legal or similarly significant effects (see Section 5.1)
• Non-discrimination — we will not deny service, charge a different price, or provide a lower quality of service because you exercised a privacy right
• Appeal — if we decline a request, you may appeal by replying to our decision; if we deny your appeal you may contact your state Attorney General

To exercise any of these rights, email support@elevai360.com from the address on your account. We will verify your identity by confirming control of that email address and respond within 45 days (extendable once where permitted by law). An authorised agent may submit a request on your behalf with written proof of authorisation.

Sensitive personal information. We do not request or intentionally collect sensitive categories of personal information (such as government identifiers, precise geolocation, health, biometric, or racial, ethnic, religious, or sexual-orientation data). Please do not include such information in free-text fields such as your aspirations, daily check-in notes, or community posts.

3.5 "Do Not Track" and Global Privacy Control

Some browsers transmit a "Do Not Track" (DNT) signal. There is no common industry standard for how DNT should be honoured, and the Service does not respond to DNT signals. This is of limited practical effect because we do not track you across other websites or services, and we do not permit third-party advertising or analytics trackers on the platform.

Because we do not sell or share personal data for targeted advertising, there is no opt-out for us to apply in response to a Global Privacy Control (GPC) signal. If that ever changes, we will update this policy and honour GPC signals as required by applicable law.

3.6 Minors — Under 18

Career Navigator is an adults-only service. As set out in Section 1.1, you must be at least 18 years of age to create an account or use the Service. The Service is not directed at children or minors, and we do not knowingly collect personal information from anyone under 18.

If we become aware that we have collected personal information from someone under 18, we will delete that account and its associated data promptly. If you believe someone under 18 has created an account — or you are a parent or guardian who believes we hold your child's information — please contact us at support@elevai360.com and we will remove it.

4.1 What Are Cookies

Cookies are small text files stored on your device by a website. They are widely used to make websites work efficiently and to provide information to website owners. Career Navigator minimises cookie use as a deliberate privacy design choice.

4.2 Cookies and Storage We Use

4.3 First-Party vs. Third-Party

The usage and attribution data described above is first-party — it is collected and processed on our own servers using our own browser storage, and is not shared with third-party analytics or advertising networks. Scripts such as our charting library are served from our own domain, and no external scripts set cookies on our platform.

If we introduce third-party analytics or advertising tools in the future, we will update this policy and request consent where required by applicable law before deploying them.

4.4 Managing Cookies and Storage

Career Navigator relies on browser session and local storage rather than cookies, so standard browser cookie controls may not apply. You can clear this storage at any time by:

• Closing your browser tab (session storage clears automatically)
• Using your browser's developer tools: Application → Session Storage → Clear
• Using your browser's "Clear browsing data" function and selecting "Cached images and files"

Clearing session storage will log you out of the application. Your account data remains saved in our database.

5.1 How the Matching System Works

The "AI" in Career Navigator refers to our structured matching and scoring system. In plain terms, it compares the skills you select and the priorities you rank against the requirements and characteristics we hold for each career path, then ranks those paths by how closely they align with what you told us.

What matters for you to know:

• Your results are produced from your own inputs — the skills you select, the priorities you rank, and your stated work and location preferences
• The process is rule-based and deterministic: the same inputs always produce the same results
• There is no machine-learning model making predictions or inferences about you as an individual, and no automated decision producing legal or similarly significant effects
• Every match is explainable — the platform shows you which of your skills a career draws on and which you would need to develop

The specific scoring weights and the composition of our skills and career datasets are proprietary and are not published, but the inputs, the logic described above, and the reasons behind each match are shown to you in the product.

5.2 What the System Cannot Do

• Cannot verify that your self-reported skills are accurate or how deeply you hold them
• Cannot account for local job market conditions, employer preferences, or industry cycles
• Cannot predict whether you will enjoy a career based on our data alone
• Cannot replace the judgement of a qualified career counsellor, therapist, or financial advisor
• Cannot guarantee employment outcomes, salary attainment, or career satisfaction
• Does not account for discrimination, structural barriers, or factors beyond skill alignment

5.3 Salary and Market Data

Salary data displayed on the platform is sourced from publicly available labour market research including the U.S. Bureau of Labor Statistics, LinkedIn Salary Insights, Glassdoor market reports, and industry salary surveys. Data represents approximate median compensation ranges for the United States market and is updated periodically. Actual compensation varies significantly based on:

• Geographic location and local cost of living
• Years of experience and depth of skill
• Company size, funding stage, and industry vertical
• Educational credentials and certifications held
• Negotiation outcomes and timing of offers

5.4 Training Recommendations

Certification and training recommendations are curated by our team based on widely recognised industry standards. We do not have commercial relationships with any training provider listed on the platform. We do not receive commissions, referral fees, or any compensation for recommending specific courses or certifications. Recommendations reflect our assessment of what the market recognises — not what pays us.

5.5 AI Ethics Commitments

We commit to the following principles in the design and operation of our matching system:

• Transparency: We explain exactly how scores are calculated and what data influences results
• No discrimination: The algorithm does not use age, gender, race, nationality, or any protected characteristic as inputs
• Human agency: All career decisions remain with you; the tool provides information, not directives
• No dark patterns: We do not manipulate results to push paid plans or partner products
• Explainability: Every career match shows the specific skills that drove the score
• Right to contest: You can retake the session with different inputs at any time and receive different results

5.6 Future Use of Generative AI

If we integrate large language models (such as GPT-4, Claude, or similar) into the platform in future, we will update this disclosure to explain what data is sent to those models, how outputs are used, and what controls you have. We commit to never sending your personally identifiable information to external AI APIs without explicit disclosure and your informed consent.

6.1 Password Security

Your password is never stored in plaintext. We store only a salted cryptographic hash, generated with a strong, industry-standard key-derivation function and a unique random salt for each user. Because only the hash is retained, passwords cannot be recovered or reversed — even in the unlikely event our database were compromised. We review our hashing approach periodically against current security best practice.

6.2 Transport Security

• All connections to Career Navigator are encrypted using TLS 1.2 or TLS 1.3
• HTTP Strict Transport Security (HSTS) is enforced — browsers are instructed to only connect over HTTPS
• SSL/TLS certificates are managed automatically via Vercel and renew before expiry
• All API calls between the application and database use encrypted connections

6.3 Database Security

• All data is encrypted at rest and in transit
• Access controls isolate each account's data, so users cannot access other users' information
• Application credentials are held securely on the server side and are never exposed in the browser or client source code
• Backups are encrypted, and direct database access is restricted to authorised personnel only

6.4 Application Security

• Industry-standard security headers are applied to all responses to guard against common web attacks
• All requests validate input and return generic error messages — internal system details are never exposed to the client
• Third-party libraries are served from our own domain to reduce third-party tracking and supply-chain risk
• Input validation is performed on both the client and the server for all form submissions

6.5 Infrastructure Security

Career Navigator's infrastructure is built on two enterprise-grade platforms:

6.6 Vulnerability Disclosure

If you discover a security vulnerability in Career Navigator, we ask that you disclose it responsibly:

• Email support@elevai360.com with a description of the vulnerability
• Do not access, modify, or delete user data during your research
• Allow us reasonable time to investigate and remediate before public disclosure
• We commit to acknowledging your report within 48 hours and providing a timeline for resolution

We do not currently operate a bug bounty programme but we genuinely appreciate responsible security research and will acknowledge contributors by name (with permission) in our security changelog.

6.7 Security Incident Response

In the event of a data breach or security incident affecting personal data:

• We will notify affected users by email within 72 hours of becoming aware of the incident
• We will notify the appropriate supervisory authority within 72 hours where required by GDPR
• Notifications will include the nature of the breach, categories of data affected, likely consequences, and measures taken or proposed
• We will provide guidance on steps users can take to protect themselves

For all privacy, data, legal, and security enquiries, please use the appropriate contact below. We aim to respond to all requests within 30 days (5 business days for security matters).

Right to Complain

If you are in the European Economic Area or United Kingdom and believe we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with your local data protection authority. In the UK, this is the Information Commissioner's Office (ICO) at ico.org.uk. In Ireland, this is the Data Protection Commission at dataprotection.ie.

We would, however, appreciate the opportunity to address your concerns before you approach a regulator. Please contact us first and we will do our best to resolve the matter promptly.

These policies were last updated on 1 January 2026 and apply to all users of the ElevAI platform globally. Previous versions are available on request. ElevAI reserves the right to update these policies at any time. Material changes will be communicated to registered users by email with at least 14 days' notice. Continued use of the Service following notice of changes constitutes acceptance of the updated terms.

© 2025 ElevAI. Elevate Human Potential with AI.