Last updated: July 11, 2026
CareerVine ("we", "our", or "us") is a personal networking CRM that helps you manage professional relationships, track meetings, and stay on top of follow-ups. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data. It covers both the CareerVine web app and the CareerVine Chrome extension.
Your email address and password (stored securely via Supabase Auth) when you create an account. You can also sign in to the Chrome extension with the same credentials.
Names, email addresses, phone numbers, job titles, companies, schools, locations, and notes that you manually enter or import via the Chrome extension.
Meeting notes, transcripts, dates, and interaction history that you record within the app.
If you connect Gmail or Google Calendar, we access your emails and calendar events to display them in-app and sync meetings. We only read and display this data. We do not store the full content of your emails on our servers. Calendar events are cached locally in your CareerVine account to enable filtering and syncing features.
The CareerVine Chrome extension works on LinkedIn profile pages and handles profile data in two ways:
Duplicate check (automatic while you are signed in): when you view a LinkedIn profile, the extension sends that profile's URL (not the page content) to our servers to check whether the person is already one of your contacts, so it can show you an "already in CareerVine" indicator. Only the profile's URL is sent for this check.
Profile import (when you choose to import): when you start an import, the extension reads the publicly visible text of the profile as it appears in your browser (the person's name, headline, location, current and past roles and companies, their "About" summary, and education), along with the profile's URL and profile photo, and sends it to our servers, where it is parsed by AI (OpenAI) into structured contact fields for you to review and edit before saving. This full read happens only when you start an import, or, if you turn on the optional auto-analyze setting, when you open a profile page.
In both cases the extension only accesses the LinkedIn profile you are viewing. It does not read your LinkedIn messages, connections, or feed, does not access your LinkedIn account or credentials, and does not use LinkedIn's private APIs.
Files you upload and attach to contacts or meetings are stored in a private, user-scoped storage bucket. Only you can access your files.
We use product analytics (via PostHog) to understand how CareerVine is used so we can improve it. On the web app this includes usage events (for example, signing up, connecting Gmail or Calendar, importing a contact, or sending an email), page views, and interaction events, along with session recordings in which all text you type is masked and sensitive fields are redacted, so your email contents and contact details are not captured in recordings. The Chrome extension sends only a small set of usage events (that it was installed, that you signed in, and that you imported a profile); it does not record your session or capture the content of pages you visit. Analytics are linked to your account when you are signed in, or to an anonymous identifier before then. We do not sell this data or use it for advertising.
We use Supabase for database storage and authentication. Your data is stored on Supabase-managed servers. See Supabase's Privacy Policy.
When you connect your Google account, we use Gmail and Google Calendar APIs. CareerVine's use of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements.
By default, AI features (email drafting, transcript parsing, follow-up suggestions, LinkedIn profile parsing) are processed using CareerVine's shared OpenAI API key. If you add your own OpenAI API key in Settings → AI, your key is encrypted before storage and used server-side only for your requests. We never return it to your browser. You may optionally enable OpenAI's data-sharing program on your own account for free daily tokens; if you do, prompts sent through your key (which can include contact names and conversation content) may be used by OpenAI per their policies. See OpenAI's Privacy Policy.
When you upload an audio or video recording of a meeting, the audio is sent to Deepgram to produce a transcript. By default this uses CareerVine's shared Deepgram API key. If you add your own Deepgram API key in Settings → AI, your key is encrypted before storage and used server-side only for your requests. We never return it to your browser, and transcription runs on your Deepgram account instead. See Deepgram's Privacy Policy.
We use PostHog for product analytics and, on the web app, session replay (with all inputs masked). Usage data is processed on PostHog's infrastructure. See PostHog's Privacy Policy.
CareerVine's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We only use Google data to provide and improve the features visible to you within CareerVine.
All data is stored with row-level security policies so that only your account can access your data. We use HTTPS for all data transmission. Google OAuth tokens are stored securely and used only to make API calls on your behalf.
The CareerVine Chrome extension's in-page component runs only on LinkedIn (linkedin.com). To do its job it communicates in the background with CareerVine's servers, with Supabase (to sign you in), and with PostHog (to record the usage events described in Section 2). It requests only the browser permissions it needs: storage (to keep you signed in and cache your recent work) and access to LinkedIn pages (to detect profiles and import them).
Stored locally in your browser: your CareerVine sign-in session (so you stay logged in), a short-lived cache of profiles you recently viewed (about two hours, so revisiting loads instantly), and your list of recent imports. Sent to our servers: the URL of a LinkedIn profile you view (for the duplicate check described in Section 2), the profile text you choose to import, and the small set of usage events described under "Usage Analytics".
The extension does not read your browsing history and does not access your LinkedIn account, credentials, private messages, connections, or feed. While you are signed in, when you view a LinkedIn profile it sends that profile's URL to our servers to check whether the person is already one of your contacts. It reads the full content of a profile only when you start an import, or when you enable the optional auto-analyze setting. It does not collect data from any site other than the LinkedIn profile you are viewing.
Limited Use. CareerVine's collection and use of information received through the Chrome extension complies with the Chrome Web Store User Data Policy, including its Limited Use requirements. We use this data only to provide the profile-import feature you request. We do not sell it, use it for advertising, or use it for any purpose unrelated to the features described in this policy.
We may update this policy from time to time. We will post the updated policy on this page with a new "Last updated" date. Continued use of CareerVine after changes constitutes acceptance of the updated policy.
If you have any questions about this Privacy Policy, please contact us at dawson@careervine.app.