Privacy Policy

1. Introduction & Privacy-First Philosophy

At PrivacyCV ("we", "us", or "our"), privacy is a core design principle. PrivacyCV is designed to minimize the unnecessary collection, sharing, and long-term storage of your personal information.

We operate on the principles of data minimization and purpose limitation. We do not sell, rent, or trade your personal or career data to advertisers, data brokers, or third-party recruiters.

2. Resume & Cover Letter Data and Local Control

When using PrivacyCV, you may provide career information such as your name, contact information (email, phone, location, portfolio/social links), employment history, education, skills, certifications, languages, target job descriptions, and optional profile photos.

Standard resume creation, cover letter drafting, and editing take place directly in your web browser, using your local browser storage (`sessionStorage`) to keep active drafts accessible on your device. We do not maintain an ongoing, centralized resume text database of your draft documents.

3. Account & Authentication Information

If you create or sign in to an account, we process your email address to deliver secure sign-in magic links, issue session authentication tokens, and manage your credit balance or active pass status. Essential session cookies are used to keep you securely signed in.

4. Document Generation (PDF Export)

When you export or generate a PDF of your resume, the relevant resume content is temporarily transmitted over encrypted HTTPS to PrivacyCV infrastructure to compile the requested document and return it to your browser.

Resume information used for document generation is processed temporarily on the server in ephemeral memory and is not maintained as a persistent resume database record after the generation operation is completed.

5. Optional AI-Powered Features

When you explicitly choose to use optional AI-assisted tools (such as Recruiter Review, Job Description Matching, or Tailored Cover Letter Generation), the text and information strictly necessary to perform the requested analysis or drafting are transmitted to our AI provider, OpenAI, via encrypted API requests.

Zero Model Training: In accordance with OpenAI commercial API terms, data submitted through our API integrations is not used to train or improve OpenAI foundation models.

6. Third-Party Service Providers

We work with a limited set of service providers to operate PrivacyCV:

7. Cookies & Local Storage

• Authentication Cookies: We may use essential, secure session cookies solely to maintain your signed-in state.
• Local Storage: Used on your local device to save active resume drafts so your work is not lost when refreshing the page.
• No Behavioral Advertising: We do not intentionally deploy third-party advertising trackers or behavioral profiling pixels.

8. Data Retention and Deletion

• Resume Drafts: You can clear your browser storage or reset your workspace at any time to remove local draft data from your device.
• Account Information: Account records (such as email and credit balance) are retained while your account remains active.
• Account Deletion: You may request the deletion of your account and associated records at any time by contacting our support team.

9. Applicable Privacy Rights

Depending on your location and applicable data protection legislation, you may have statutory rights regarding your personal information, including the right to access, update, correct, or request the deletion of your personal data, or to restrict or object to certain processing.

Where applicable under data protection law, you may also have a right to data portability. PrivacyCV provides built-in export functionality for your resume data (including JSON and PDF formats where supported). To exercise any applicable privacy rights, please contact us at support@privacycv.com.

10. International Data Transfers

Depending on the services used and the location of our service providers, personal data may be processed in countries outside your country of residence. Where applicable, we use appropriate safeguards for international data transfers as required by applicable law.

11. Security Safeguards

We employ reasonable technical and organizational measures, including TLS/HTTPS encryption in transit, restricted server access, and rate limiting, to protect personal information from unauthorized access or disclosure.

Please note that no method of digital transmission or storage over the Internet can be guaranteed to be 100% secure.