Privacy Policy

CVMENA ("we," "our," or "us") operates the AI Resume CV Maker PDF mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App. Please read this policy carefully. By using the App, you consent to the practices described in this Privacy Policy.

1. Information We Collect

1.1 Personal Information You Provide

• Account Information: When you create an account, we collect your name, email address, and password. Passwords are cryptographically hashed and are never stored in plain text.
• Resume Content: Information you enter into your resumes, including but not limited to work experience, education history, skills, certifications, professional summaries, contact details, and any other content you choose to include.
• Authentication Data: If you sign in using Google Sign-In or Apple Sign-In, we receive your name, email address, and unique account identifier from those services.

1.2 Information Collected Automatically

• Device Information: We collect information about your device, including operating system, device model, unique device identifiers, and app version.
• Usage Analytics: We collect anonymized data about how you interact with the App, including features used, session duration, screens visited, and actions taken. This data helps us improve the App experience.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Account Management: To create and manage your user account, authenticate your identity, and maintain account security.
• AI-Powered Resume Generation: To process your input through our AI writing assistant and generate professional resume content tailored to your experience and target roles.
• PDF Export: To generate and render high-quality PDF documents from your resume data.
• Cloud Sync: To store your resumes securely in the cloud so you can access them across devices and sessions.
• Email Delivery: To send your completed resumes via email when you use our email sharing feature, and to send transactional emails such as account verification and password resets.
• Service Improvement: To analyze usage patterns, diagnose technical issues, and improve the App functionality and user experience.
• Subscription Management: To manage your subscription status, process renewals, and provide access to premium features.

3. Third-Party Services

We use the following third-party services to operate the App. Each service has its own privacy policy governing how it handles your data:

• Supabase (supabase.com) — Provides our database, user authentication, and backend infrastructure. Your account data and resume content are stored in Supabase-managed PostgreSQL databases.
• Anthropic Claude API (anthropic.com) — Powers our AI resume writing features. When you use AI-assisted writing, relevant resume content is sent to Anthropic for processing. Anthropic does not use your data to train its models.
• RevenueCat (revenuecat.com) — Manages in-app subscriptions and purchase verification across iOS and Android platforms.
• Google Sign-In (Google) — Provides optional authentication. When you sign in with Google, we receive your name and email address.
• Apple Sign-In (Apple) — Provides optional authentication on iOS. When you sign in with Apple, you may choose to share or hide your email address.
• Resend (resend.com) — Handles transactional email delivery, including resume sharing via email and account-related notifications.

4. Data Storage and Security

Your data is stored in Supabase-managed PostgreSQL databases located in the United States. All data is encrypted in transit using TLS (Transport Layer Security) encryption. We implement industry-standard security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

While we strive to protect your personal information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our services. If you request deletion of your account, we will delete your personal data within 30 days of the request, except where we are required to retain certain information for legal, regulatory, or legitimate business purposes.

Anonymized and aggregated data that cannot be used to identify you may be retained indefinitely for analytics and service improvement purposes.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: You may request a copy of the personal data we hold about you.
• Correction: You may request that we correct any inaccurate or incomplete personal data.
• Deletion: You may request that we delete your personal data. You can delete your account directly within the App settings.
• Data Export: You may request an export of your data in a commonly used, machine-readable format.
• Objection: You may object to the processing of your personal data in certain circumstances.
• Restriction: You may request that we restrict the processing of your personal data in certain circumstances.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

7. GDPR Compliance (European Economic Area)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, the following additional provisions apply:

7.1 Legal Basis for Processing

We process your personal data on the following legal bases:

• Contract Performance: Processing necessary to provide you with the App and its features (Article 6(1)(b) GDPR).
• Legitimate Interests: Processing necessary for our legitimate interests, such as improving our services and ensuring security, provided these interests are not overridden by your rights (Article 6(1)(f) GDPR).
• Consent: Where you have given explicit consent for specific processing activities, such as receiving marketing communications (Article 6(1)(a) GDPR).

7.2 Data Subject Rights

In addition to the rights listed in Section 6, EEA residents have the right to lodge a complaint with their local data protection supervisory authority.

7.3 Data Protection Officer

For GDPR-related inquiries, you may contact our Data Protection Officer at [email protected].

8. CCPA Compliance (California Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with the following rights:

• Right to Know: You have the right to request information about the categories and specific pieces of personal information we have collected about you, as well as the purposes for collection and any third parties with whom we share it.
• Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions provided by law.
• Right to Opt-Out of Sale: We do not sell your personal information to third parties. As such, there is no need to opt out of the sale of personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To exercise your CCPA rights, please contact us at [email protected].

9. Opt-Out Rights

You have the right to opt out of certain data processing activities:

• Targeted Advertising: You may opt out of the use of your personal data for targeted advertising purposes. We do not currently engage in targeted advertising; however, if this changes in the future, we will provide a clear mechanism for you to opt out.
• Sale of Personal Data: You may opt out of the sale of your personal data to third parties. We do not sell your personal data. If our practices change, we will provide a clear opt-out mechanism before any sale occurs.
• Profiling: You may opt out of profiling that produces legal or similarly significant effects.

To exercise any of these opt-out rights, please contact us at [email protected]. We will process your request within 15 business days and will not discriminate against you for exercising these rights.

10. Virginia Consumer Data Protection Act (VCDPA)

If you are a Virginia resident, the Virginia Consumer Data Protection Act (VCDPA) provides you with specific rights regarding your personal data:

• Right to Access: You have the right to confirm whether we are processing your personal data and to access that data.
• Right to Correct: You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and the purposes of processing.
• Right to Delete: You have the right to delete personal data that you have provided to us or that we have obtained about you.
• Right to Data Portability: You have the right to obtain a copy of your personal data in a portable and readily usable format, where technically feasible.
• Right to Opt Out: You have the right to opt out of the processing of your personal data for the purposes of targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects.

To submit a request under the VCDPA, please contact us at [email protected]. We will respond to your request within 45 days. If we need additional time, we will notify you of the extension and the reason for it. If we decline your request, you have the right to appeal our decision by contacting us at the same email address.

11. Children's Privacy

The App is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under the age of 13 without verification of parental consent, we will take steps to delete that information promptly. If you believe we may have collected information from a child under 13, please contact us at [email protected].

12. Cookies and Tracking

The App uses minimal cookies and local storage, limited to session management and authentication purposes. We do not use advertising cookies or third-party tracking cookies. No data is shared with advertising networks.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by email (sent to the email address associated with your account) or through a prominent notice within the App prior to the changes taking effect.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: [email protected]

App: AI Resume CV Maker PDF by CVMENA