Privacy Policy

1. Information we collect

We collect information you provide directly, information generated through your use of the Service, and limited technical information needed to operate the Service.

• Account information: email address, full name, and authentication credentials. If you sign in with Google OAuth, we receive the name and email address you have chosen to share with us.
• Profile and resume content: your contact details, headline, location, links, work experience, projects, education, skills, certifications, coursework, notes, and any other information you add to your profile or CV cells.
• Job descriptions: the job titles, company names, and job descriptions you upload for tailoring.
• Generated CVs: tailored CVs and versions you create and save through the Service.
• Usage information: records of tailoring runs and exports to enforce plan limits and maintain Service security.
• Payment information: we do not collect or store full payment card details. Stripe processes payments and provides us with a customer identifier and subscription status.

2. How we use your information

• To provide, maintain, and improve the Service.
• To generate AI-tailored CV content based on your profile and job descriptions.
• To enforce usage quotas and manage your subscription and billing.
• To communicate with you about your account, security, or Service updates.
• To detect and prevent fraud, abuse, or technical issues.

3. Legal basis for processing

For users in the United States, we process your information based on your consent (for example, when you create an account and upload content) and on the need to perform our contract with you (providing the Service you signed up for). We also process data where necessary for our legitimate interests, such as maintaining security and preventing fraud, provided those interests are not overridden by your rights.

4. Information sharing

We do not sell your personal information. We share information only with trusted service providers who help us operate the Service:

• Lovable Cloud / Supabase: authentication, database, and storage.
• OpenAI via the Lovable AI Gateway: processing resume and job description text to generate tailored content.
• Stripe: payment processing and subscription management.
• Google: only if you choose to sign in with Google OAuth.

We may also disclose information if required by law, to protect our rights, or in connection with a business transfer.

5. Data retention

We keep your account and content data for as long as your account is active. If you delete your account, we remove your profile, cells, job descriptions, and generated CVs within 90 days. Some usage and billing records may be retained for a longer period where necessary for legal, tax, or security purposes.

6. Your rights and choices

Depending on your location, you may have the right to access, correct, delete, or export your personal information. You can update most information directly in the Service. To request deletion of your account and data, contact us at paaper.loker@gmail.com.

7. Security

We use industry-standard measures to protect your information, including encryption in transit (TLS/HTTPS), encrypted storage through our hosting providers, and access controls that limit data access to authenticated users. No online service is completely secure, and we cannot guarantee absolute security.

8. Children's privacy

The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us so we can delete it.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version on this page with an updated “Last updated” date. Your continued use of the Service after changes means you accept the revised policy.

10. Contact us

If you have questions about this Privacy Policy or our data practices, please contact us at paaper.loker@gmail.com.