Privacy Policy

CVTailr ("we", "us", or "our") respects your privacy. This Privacy Policy explains what information we collect, how we use it, and your choices regarding your data when you use our service at cvtailr.com ("Service").

1. Information We Collect

a. Account Information

When you sign in, we collect your name, email address, and profile picture (if signing in with Google). If you use a magic link, we collect only your email address.

b. CV Content

When you upload a CV, we extract and store the text content and formatting style data from your PDF. We do not store the original PDF file. The extracted text is used to generate tailored CV output.

c. Job Descriptions

Job descriptions you paste into the Service are processed to analyze keywords and requirements. They are stored temporarily in association with each tailor request.

d. Generated Content

The tailored CV content and metadata (ATS score, matched keywords, quick wins) generated by our AI are stored in your account so you can access your history and re-download PDFs.

e. Payment Information

We do not collect or store credit card numbers, bank details, or other payment credentials. All payment processing is handled by Lemon Squeezy (lemonsqueezy.com), our Merchant of Record. Lemon Squeezy may collect payment information directly. Please refer to Lemon Squeezy's Privacy Policy for details.

f. Usage Data

We may collect anonymous usage data through Google Analytics, including pages visited, session duration, and device type. This data does not personally identify you and is used to improve the Service.

2. How We Use Your Information

We use your information to:

• Provide and operate the Service, including CV extraction, AI tailoring, and PDF generation.
• Authenticate your identity and manage your account.
• Process payments and manage subscriptions via Lemon Squeezy.
• Send transactional emails (welcome, CV ready, upgrade confirmation).
• Monitor and improve Service performance and reliability.
• Enforce our Terms of Service and prevent abuse.

3. AI Processing

Your CV text and job descriptions are sent to Anthropic's Claude AI for processing. This data is used solely to generate your tailored CV and is subject to Anthropic's Privacy Policy. Anthropic does not use your data to train their models when accessed via their API.

4. Data Sharing

We do not sell your personal information. We share data only with:

• Anthropic — to process AI requests (CV text and job descriptions).
• Lemon Squeezy — to process payments and manage subscriptions.
• Resend — to deliver transactional emails.
• Google Analytics — for anonymous usage analytics (if configured).
• Supabase — for database hosting and storage.

We may also disclose information if required by law or to protect our rights, safety, or property.

5. Data Retention

We retain your account data and CV content for as long as your account is active. Tailored CV history is retained to enable re-downloads and review. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law.

6. Data Security

We use industry-standard security measures to protect your data, including encrypted connections (HTTPS), secure authentication, and access controls. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data (via the Settings page or by contacting us).
• Export your data in a portable format.
• Object to or restrict certain processing of your data.
• Withdraw consent where processing is based on consent.

To exercise these rights, contact us at privacy@cvtailr.com.

8. Cookies

We use essential cookies for authentication and session management. We may also use analytics cookies (Google Analytics) to understand usage patterns. You can control cookie settings through your browser.

9. International Data Transfers

Your data may be processed in countries other than your own. Our service providers (Anthropic, Supabase, Lemon Squeezy, Resend) may process data in the United States or other jurisdictions. We ensure appropriate safeguards are in place for such transfers.

10. Children's Privacy

The Service is not intended for users under 16 years of age. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new "Last updated" date.

12. Contact

If you have questions or concerns about this Privacy Policy, contact us at privacy@cvtailr.com.