Privacy Policy

1. Introduction

CvPrep (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered job search assistant service.

By using CvPrep, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Personal Information

We collect personal information that you provide directly to us, including:

• Account Information: Name, email address, profile picture (via Google OAuth)
• Resume Content: Work experience, education, skills, contact details
• Career Documents: Resumes, cover letters, and related files you upload
• Job Preferences: Job descriptions, career goals, and search criteria
• Communication Data: Messages, feedback, and support requests

2.2 Automatically Collected Information

We automatically collect certain information when you use our service:

• Usage Data: Pages visited, features used, time spent on the service
• Device Information: Browser type, operating system, IP address
• Log Data: Server logs, error reports, and performance metrics
• Cookies: Authentication tokens, preferences, and session data

2.3 Third-Party Information

We may receive information from third-party services:

• Google OAuth: Basic profile information when you sign in with Google
• Payment Processors: Transaction data for premium subscriptions

3. How We Use Your Information

We use your information for the following purposes:

3.1 Service Provision

• Analyze and optimize your resume content using AI technology
• Generate personalized cover letters and career recommendations
• Provide resume scoring and job matching services
• Create and manage your account and user profile
• Process premium subscription payments

3.2 AI Processing

We use artificial intelligence, including OpenAI’s technology, to:

• Analyze resume content and job descriptions
• Generate optimization suggestions and recommendations
• Score resume-job compatibility
• Create personalized career guidance

3.3 Service Improvement

• Monitor and analyze usage patterns to improve our service
• Develop new features and functionality
• Ensure service security and prevent fraud
• Provide customer support and respond to inquiries

3.4 Communication

• Send service-related notifications and updates
• Provide customer support and technical assistance
• Send marketing communications (with your consent)

4. Information Sharing and Disclosure

4.1 Third-Party Service Providers

We share information with trusted third-party providers who assist us in operating our service:

• OpenAI: For AI-powered resume analysis and optimization
• Supabase: For database hosting and authentication services
• Google: For authentication and user account management
• Payment Processors: For processing premium subscription payments
• Cloud Hosting: For service infrastructure and data storage

4.2 Legal Requirements

We may disclose your information when required by law or to:

• Comply with legal obligations or court orders
• Protect our rights, property, or safety
• Investigate potential violations of our Terms of Service
• Prevent fraud or security threats

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the business transaction, subject to equivalent privacy protections.

5. Data Security

We implement appropriate security measures to protect your information:

• Encryption: Data is encrypted in transit and at rest
• Access Controls: Limited access to personal data on a need-to-know basis
• Authentication: Secure OAuth-based authentication system
• Monitoring: Regular security audits and monitoring for threats
• Data Minimization: We collect only necessary information

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Improve our services and develop new features

When you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law.

7. Your Rights and Choices

7.1 Access and Control

You have the right to:

• Access: Request a copy of your personal information
• Update: Correct or update your account information
• Delete: Request deletion of your personal information
• Export: Download your data in a portable format
• Restrict: Limit how we process your information

7.2 Communication Preferences

You can:

• Opt out of marketing communications at any time
• Manage notification preferences in your account settings
• Contact us to update your communication preferences

7.3 Cookies and Tracking

You can control cookies through your browser settings. However, disabling cookies may affect the functionality of our service.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information in accordance with applicable data protection laws.

9. Children’s Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information.

10. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected and how it's used
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

11. European Privacy Rights (GDPR)

If you are in the European Economic Area, you have rights under the General Data Protection Regulation (GDPR):

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

For GDPR-related inquiries, please contact our Data Protection Officer at dpo@cvprep.app.