← Career Operating System™

Privacy Policy

This policy explains what data Career Operating System™ ("CareerOS", "we") collects, why, and what you can do about it. CareerOS is operated by byNadiaBlanco™.

Who we are

byNadiaBlanco™
167–169 Great Portland Street, 5th Floor, London W1W 5PF
info@nadiablanco.com

We are the data controller for the personal data described below.

What we collect

Your account. When you purchase CareerOS you create an account using your email address and a password you choose. We store your email address. Your password is stored in hashed form by our authentication provider — we never see it and cannot recover it.

The data you enter into CareerOS. CareerOS is a career management system, so the information you put into it is stored so it can sync across your devices. This may include:

• Names, roles, agencies, email addresses, phone numbers, Instagram handles and notes for the contacts you add to your pipeline
• Jobs, clients, rates, dates and call sheet details
• Invoices, amounts, and payment status
• Credits, certifications, kit inventory, goals and personal notes

Note on third-party contacts. If you add another person's details to your pipeline, you are responsible for handling their information lawfully. We store it on your behalf; we do not contact them, market to them, or use their data for any purpose of our own.

Payment information. We do not see or store your card details. Payments are processed by Stripe. We receive only your email address and confirmation that payment succeeded.

Why we hold it

• To give you the product you bought — an account, and your data synced across your devices. This is necessary to perform our contract with you.
• To confirm you have paid — we keep a record of purchase so access can be granted and, if needed, restored.
• To meet legal obligations — transaction records are retained as required by UK tax and accounting law.

We do not sell your data. We do not use it for advertising. We do not use the contents of your CareerOS account for any purpose other than providing the service to you.

Who processes it

• Supabase — authentication and database hosting. Your account and your CareerOS data are stored here, in a data centre in the United Kingdom.
• Netlify — hosting of the CareerOS application.
• Stripe — payment processing.

Each is bound by its own data processing terms. Where any processing involves a transfer outside the UK or EEA, it is covered by appropriate safeguards such as Standard Contractual Clauses.

How long we keep it

Your account and its contents are kept for as long as your account exists. If you ask us to delete your account, we delete your account and all data in it. Records of the transaction itself are retained for six years, as UK tax law requires.

Security

Your data is protected by row-level security: your account can only ever read and write its own records. Passwords are hashed. Connections are encrypted in transit. No system is perfectly secure, but we take reasonable measures to protect what you entrust to us.

Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Correct anything inaccurate
• Have your data deleted
• Receive a copy of your data in a portable format
• Object to or restrict how we process it
• Withdraw consent where processing relies on it

To exercise any of these, email info@nadiablanco.com. We will respond within one month.

If you are unhappy with how we have handled your data, you may complain to the Information Commissioner's Office at ico.org.uk.

Cookies

CareerOS does not use tracking or advertising cookies. It stores a session token in your browser so you stay logged in, and a local copy of your data so the app works quickly. Both are essential to the service.

Changes

If we change this policy we will update the date at the top of this page.