Your privacy matters to us. CVapply does not sell your personal data to third parties. We collect only what we need to provide you with the best resume optimization experience.
1. Overview
CVapply ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the CVapply platform, including our website at cvapply.app and all related services (the "Service").
By using CVapply, you agree to the collection and use of information in accordance with this policy. If you disagree with any part of this policy, please do not use the Service.
2. Information We Collect
Information you provide directly:
- Account information: Name, email address, and password when you register
- Resume content: Work history, education, skills, certifications, and any other content you upload or enter into the platform
- Voice input: Audio recordings you provide via the voice interview feature, which are processed and converted to text
- Job descriptions: Text you paste for ATS analysis
- Payment information: Billing details processed by our payment provider (we do not store full card numbers)
- Communications: Messages you send to our support team
Information collected automatically:
- Usage data: Pages visited, features used, time spent, clicks, and navigation patterns
- Device information: Browser type, operating system, device type, and screen resolution
- Log data: IP address, access timestamps, and referring URLs
- Cookies and similar technologies: See Section 6 for details
Summary of data categories:
| Category |
Examples |
Purpose |
| Identifiers |
Name, email, IP address |
Account creation, authentication |
| Professional data |
Resume, work history, skills |
Core service delivery |
| Usage data |
Feature clicks, session duration |
Product improvement |
| Payment data |
Last 4 digits, billing address |
Subscription management |
| Communications |
Support emails |
Customer support |
3. How We Use Your Information
We use the information we collect to:
- Provide the Service: Process your resume, generate ATS scores, tailor content to job descriptions, and deliver all platform features
- Manage your account: Create and maintain your account, authenticate you, and handle subscription billing
- Improve the Service: Analyze usage patterns to fix bugs, improve features, and develop new functionality
- Communicate with you: Send transactional emails (account confirmations, billing receipts), product updates, and respond to support inquiries
- Ensure security: Detect and prevent fraud, abuse, and security incidents
- Comply with law: Meet our legal obligations and enforce our Terms and Conditions
We do not use your resume content or personal data to train our AI models without your explicit, opt-in consent.
4. How We Share Your Information
We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:
- Service providers: Trusted third-party vendors who help us operate the Service (e.g., cloud hosting, payment processing, email delivery, analytics). These providers are contractually bound to protect your data and may only use it for the services they provide to us.
- AI processing partners: Your resume and job description content is processed by our AI infrastructure. See Section 5 for details.
- Legal requirements: When required by law, subpoena, court order, or government authority, or to protect the rights, property, or safety of CVapply, our users, or the public.
- Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of our assets, your information may be transferred as part of that transaction. We will notify you via email prior to such transfer.
We do not share your data with employers, recruiters, or job boards.
5. AI Processing and Your Data
CVapply uses AI models to generate resume content, ATS scores, and related outputs. When you submit content (such as your resume or a job description), it is processed by our AI systems. We want to be transparent about how this works:
- Your content is not used to train public AI models without your explicit opt-in consent.
- AI processing is conducted under data processing agreements with our AI providers, requiring them to protect your data and not use it for unrelated purposes.
- Voice input is transcribed to text and stored as text; audio recordings are deleted after transcription.
- AI-generated outputs (your tailored resumes) are stored in your account and are yours to download and delete.
6. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience and understand how the Service is used.
Types of cookies we use:
- Essential cookies: Required for the Service to function (authentication, session management). Cannot be disabled.
- Analytics cookies: Help us understand usage patterns (e.g., Google Analytics). These can be disabled.
- Preference cookies: Remember your settings (e.g., language preference).
You can control cookie settings through your browser preferences. Disabling non-essential cookies will not affect core Service functionality. We do not use cookies to serve third-party advertising.
7. Data Retention
We retain your personal data for as long as your account is active or as needed to provide the Service. Specifically:
- Account data: Retained while your account is active and for up to 90 days after deletion, to allow for account recovery requests
- Resume and job application data: Retained until you delete it or close your account
- Billing records: Retained for 7 years as required by US tax and financial regulations
- Support communications: Retained for up to 3 years
You may request deletion of your data at any time (see Section 9).
8. Security
We implement industry-standard security measures to protect your information, including:
- Encryption of data in transit (TLS/HTTPS) and at rest
- Secure authentication with hashed and salted passwords
- Regular security audits and vulnerability assessments
- Access controls limiting data access to authorized personnel only
No method of transmission or storage is 100% secure. If you believe your account has been compromised, contact us immediately at support@cvapply.app. In the event of a data breach affecting your rights, we will notify you as required by applicable law.
9. Your Rights and Choices
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of your personal data ("right to be forgotten")
- Portability: Request your data in a machine-readable format
- Opt-out of marketing: Unsubscribe from promotional emails at any time via the unsubscribe link or by contacting us
- Withdraw consent: Where processing is based on consent, you may withdraw it at any time
To exercise any of these rights, contact us at privacy@cvapply.app. We will respond within 30 days. We may need to verify your identity before fulfilling your request.
You can delete your account and associated data directly from your account settings.
10. Children's Privacy
CVapply is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected personal data from a child under 18, we will delete that information promptly. If you believe we have inadvertently collected data from a minor, contact us at privacy@cvapply.app.
11. International Users
CVapply is operated in the United States. If you access the Service from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country.
For users in the European Economic Area (EEA) or United Kingdom: We process your data on the basis of (a) contract performance, (b) legitimate interests, and (c) your consent where required. You have rights under the GDPR including those described in Section 9. For GDPR inquiries, contact privacy@cvapply.app.
For users in Latin America: We respect applicable data protection laws and your rights to access, correct, and delete your data as described in Section 9.
12. California Privacy Rights (CCPA/CPRA)
If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) grant you specific rights:
- Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you in the past 12 months
- Right to Delete: You may request deletion of your personal information, subject to certain exceptions
- Right to Opt-Out of Sale: CVapply does not sell your personal information. We will not do so without prior consent.
- Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights
- Right to Correct: You may request correction of inaccurate personal information
To submit a California privacy request, email privacy@cvapply.app with the subject line "California Privacy Request." We will respond within 45 days.
13. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and notify active users via email at least 14 days before changes take effect. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.