Data Retention
What CareerFlyt keeps, for how long, and what deletion means.
Your account
Your profile, resumes, saved jobs and application materials stay for as long as your account exists. You can export everything from account settings at any time and delete everything from your profile page; deletion takes effect in live systems immediately.
Uploaded documents and generated files
Deleted documents are marked deleted at once and removed from storage after a 30-day grace period, so an accidental deletion can be reversed by support within that window. Generated exports (tailored resumes, packages, reports) are transient and are removed automatically after 30 days.
Organization-managed retention
Workspace administrators can set automatic retention windows for their members' uploaded resumes, generated files and inactive jobs. Those windows are set by the organization and shown in the workspace's settings; CareerFlyt applies them on a daily schedule.
Outcome and program records
Placements, milestones and program participation are the organization's records of its own work and are kept for as long as the organization's workspace exists, subject to the organization's retention settings.
Audit and security records
Sign-ins, verification events, deletions and administrative actions are recorded in an append-only audit log so that a deletion can be shown to have happened. These records contain who did what and when — never the content that was deleted — and are kept for the period required to investigate security events. The retention period for this log is a policy decision pending owner review and will be stated here once set.
Email records
For each email we send we keep the recipient address, the type of message, when it was sent and whether it was delivered or bounced, so that a missing verification or reset email can be traced. We do not keep the contents, codes or links.
Backups
Encrypted database backups are retained on a fixed rotation and age out automatically; deleted data disappears from backups when the last backup containing it expires. The production rotation length is a policy decision pending owner review and will be stated here once set.
Legal holds and obligations
Where a legal obligation requires longer retention of a specific record, that record is kept for the required period and no longer.
Questions? Contact support. See also: Privacy · Terms · Security · Subprocessors · DPA · Data deletion