CareerNavigator™ Policy

1) What we collect

• User materials: résumé/CV, narrative, deal/matter lists, writing samples, artifacts.
• Employer materials: role briefs, structure charts, policies, public profiles.
• Session data: prompts, notes, alignment answers, opt-in transcripts.
• Metadata: filenames, timestamps, size, submitter, consent flags.

Rule: text-based files only. Scans require OCR. Please redact client names, matter numbers, PII, and proprietary data unless you explicitly authorize handling.

2) Where your data lives

• User sandbox (default): private to your account; used only in your sessions.
• Organization namespace (employer/association/law school): visible to designated org admins and Verolex staff supporting that org.
• Session uploads: may be temporary; you can choose delete or archive.

3) Who can access

• You (and designated org admins if applicable).
• Verolex staff under confidentiality for quality checks, troubleshooting, and any recruiter reviews you request.
• No cross-user access: your sandbox is not visible to other users.

4) How your data is used

• Retrieval with citations (default): tools locate and quote from your approved materials.
• No foundation-model training unless you explicitly opt-in via VADP.
• Benchmarks/analytics (optional): only with explicit opt-in and de-identification.
• Human review when you request recruiter assistance/deliverables.

5) Consent levels

6) Your rights

• Access and export your materials and extracted text.
• Correct or replace files; updates supersede older versions.
• Request deletion of files and derived artifacts in your namespace.
• Withdraw consent for optional uses at any time.

7) Revocation & deletion

Send requests to vc@verolex.store. We queue your deletion and provide a confirmation record once complete, subject to legal holds and security review.

8) Traceability & audit

All uploads, edits, access, and consent changes are time-stamped and attributed to a user ID and IP. Recruiter-assisted work includes a human reviewer signature in the record.

9) Security

• Encryption in transit and at rest where applicable.
• Role-based access; least-privilege; admin approvals for namespace changes.
• Abuse, malware, and leak-prevention controls on ingestion.

10) Required disclosures

We may disclose if required by law, to protect security and integrity, or with your explicit written authorization (e.g., introductions, targeted outreach).

11) Consent language (for forms & checkout)

A) Individual Client Checkbox

“I consent to CareerNavigator storing my submitted materials in my private account sandbox (via VeroVault) and using them for retrieval-only with citations. I do not authorize foundation-model training or external sharing. I may withdraw consent and request deletion.”

B) Employer Authorization

“I am authorized to submit these materials on behalf of [Organization]. I consent to storage in our organization namespace and retrieval-only analysis. Optional benchmarking or broader analysis requires a separate agreement.”

C) Signature Block (when signatures are required)

• Full name, title, organization
• Email, phone
• Date/time, IP (auto-captured)
• Policy ID & version (e.g., CN-PC-1.0)

12) Versioning

We version this policy and record the version agreed at each upload or checkout. Material changes are posted here and may require renewed consent.