Privacy Policy

1. Information We Collect

We collect information you provide and information gathered through your use of our service:

• Account Information: Email, name, password hash, phone (optional), location (optional), social media links, professional summary

• Resume Content: Full resume text, employment history, education, skills, work experience, and any personal information you include

• AI Input Data: Job descriptions, company information, and other content you provide to AI features for cover letter and resume optimization

• Usage Data: Resumes created, cover letters generated, exports, templates used, features accessed, timestamps, and interaction patterns

• Device & Browser Data: IP address, browser type, operating system, device type, and general location (country/region level)

• Communication Data: Support tickets, emails to support, feedback, surveys, and customer service interactions

AI & Generated Content Notice

When you use AI features (resume optimization, cover letter generation), we send your resume content and provided job descriptions to third-party AI services to generate suggestions. These services may retain your data according to their privacy policies. You should review those policies before using AI features. AI-generated output is a suggestion only and should be reviewed and edited by you before use.

2. How We Use Your Information

We use your information for these purposes:

• Provide and maintain the service, including resume creation, editing, and export

• Process payments and manage subscriptions

• Send service communications (verification emails, password resets, billing notifications)

• Provide customer support and respond to inquiries

• Improve, test, and develop new features

• Monitor usage patterns to prevent abuse and ensure security

What We Do Not Do

• We do not sell your personal data to third parties for marketing purposes.
• We do not share your resume content or personal information with employers, recruiters, or other users without your explicit consent.
• We do not use your resume content to train AI models without your permission.

3. Data Retention

Account Data: We retain your account information for as long as your account is active. If you delete your account, we retain anonymized usage data for analytics, but delete personally identifiable information within 30 days.

Resume Content: Your resume and cover letters are retained in your account for your access. Upon account deletion, these are deleted within 30 days.

Audit Logs: We maintain authentication and security audit logs for up to 12 months for security and compliance purposes.

Backups: Deleted data may remain in backups for up to 90 days but will not be accessible to you after deletion.

4. Cookies and Tracking

We use HTTP-only session cookies to maintain your login state. These cookies:

• Expire after 15 minutes (access token) or 7 days (refresh token)

• Are not accessible to JavaScript (httpOnly) to prevent XSS attacks

• Are sent only over HTTPS in production

We do not use third-party tracking or analytics cookies that identify you. We do not track your behavior across other websites.

5. Third-Party Services

We use third-party services that may process your data:

• Stripe: Payment processing (credit card data is handled by Stripe, not us)

• AI Services: For AI-powered resume and cover letter features

• Email Service: For transactional emails (verification, password reset, support)

• Database Provider: Data is encrypted and stored securely

These providers are subject to data processing agreements and are bound to protect your data. We only share the minimum data necessary for them to provide their service.

6. Your Privacy Rights

You have the right to:

• Access: Request a copy of all personal data we hold about you

• Correction: Update or correct inaccurate information

• Deletion: Request deletion of your account and associated data

• Export: Download your data in a portable format (your resumes, cover letters, profile info)

• Opt-out: Opt out of non-essential communications

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

7. Security

We implement industry-standard security measures to protect your data:

• HTTPS encryption for all data in transit

• Password hashing using bcrypt (passwords are never stored in plain text)

• JWT tokens for authentication with 15-minute expiration

• Rate limiting to prevent brute force attacks

• Regular security audits and vulnerability scanning

While we strive to protect your information, no system is completely secure. If you believe your account has been compromised, please change your password immediately and contact us.

8. Contact Us

For privacy inquiries, data requests, or if you have concerns about how we handle your data, please contact us at:

Email: [email protected]
Support: Contact Form

We will respond to all privacy-related inquiries within 30 days.

9. Changes to This Policy

We may update this privacy policy as our service evolves. We will notify you of material changes by email or by prominent notice on our site. Your continued use of RapidCV after changes constitutes your acceptance of the updated policy.