Privacy Policy

Last updated: 10 September 2026

What we store

Account: your email address and a bcrypt-hashed password (we never see or store your plain password). Resumes: the resume content you save — up to 5 resumes synced to our Postgres database, plus drafts kept in your own browser's localStorage. Feedback & bug reports: the messages you send us, with the email you provide. Share links: when you share a resume, we store the link token, its expiry, and a view counter.

What we don't do

No analytics trackers, no advertising pixels, no selling or sharing your data with third parties. AI features are currently disabled on this deployment — your resume text is not sent to any AI provider.

Cookies

One cookie only: ai_cvpro_session — an HttpOnly, SameSite session cookie that keeps you signed in for up to 7 days. It is never readable by JavaScript and is invalidated when you change your password, when an admin resets it, or when you log out.

Public share links

A resume you share via /r/… link is visible to anyone who has that link until you revoke it or it expires (30 days by default, up to 90). Share links show resume content only — never your email or account details.

Backups & retention

The database is backed up nightly; backups rotate after 14 days. Deleted data may persist in backups for up to 14 days before disappearing entirely.

Administrator access

The site administrator can see account metadata (email, signup date, trial status, resume counts) and can disable or delete accounts to enforce the Terms of Service. Resume content is inspected only when required for abuse investigation or support you requested. Every administrative action is recorded in an audit log.

Your controls

Export any resume as PDF, TXT, or JSON at any time. Delete individual resumes from your dashboard, or delete your entire account — including all synced resumes — from Settings. Deletion is immediate and permanent (subject to the 14-day backup rotation above).

Contact

Privacy questions or deletion requests: niranjan.shankarananda@gmail.com

This policy is written in plain language to describe how this service actually works; it is not a substitute for legal advice.