What stays on your computer
Connector credentials, browser sessions, documents, interview media, screenshots, transcripts, detailed automation evidence and local AI prompts remain local by default.
What Managed stores
Account and entitlement metadata, device state, delivery metadata and opaque end-to-end encrypted career-record envelopes. Tenant scope is server-derived and reinforced with database row-level security.
Device identity
Cariew does not depend on raw MAC addresses. The desktop creates a protected key pair and proves possession through signed challenges. Trial-abuse identifiers are derived using a secret HMAC key rather than plain hashes.
Payments and releases
Checkout is Web-only. Payment signatures and captured status are verified server-side before entitlement. Public packages require native signing, checksums and clean-system validation.
Responsible use
Cariew may be used only where automation or assistance is authorized. It cannot be used for impersonation, prohibited cheating, credential theft or deceptive communications. Read the Acceptable Use Policy →
Security contact
Report a suspected vulnerability privately through Cariew Support. Do not include passwords, API keys or unrelated personal data.