Privacy Policy

Last updated: June 5, 2026

This Privacy Policy explains how CVClever ("we") collects, uses, and protects your personal data when you use the Service.

1. Information we collect

• Account info: name, email address, and (if you set one) a hashed password. If you sign in with Google, we also store your Google account ID and avatar URL.
• Resume content: the job descriptions and resume text you submit, plus the tailored resumes, cover letters, and ATS analyses we generate from them.
• Usage data: the minimum technical logs needed to run the Service (login times, IP address, browser type, error logs).
• Payment data: processed by Lemon Squeezy. We never see or store your card details.

2. How we use it

We use your data only to provide the Service, manage your account, send service emails, prevent abuse, and improve the product. We do not use your resume content for advertising. We do not train any AI model on your data.

3. AI processing and service providers

To generate tailored resumes, cover letters, and ATS analysis, the content you submit is forwarded to trusted third-party AI providers for processing:

• Google (Gemini)
• Groq
• Cloudflare (Workers AI)
• OpenRouter, Cerebras, SambaNova — used when consensus mode is enabled to cross-check facts

These providers process the data only on our behalf to fulfil the requested operation, under their own published privacy and security terms. We do not allow them to train models on your data.

4. We do not sell your data

We do not sell your personal data and we do not share it with third parties for marketing. Your data is shared only with the processors that are necessary to run the Service (the AI providers above, our email provider Resend, and our payment provider Lemon Squeezy) and with authorities where legally required.

5. Payment data

Payments are processed by Lemon Squeezy, our Merchant of Record. Credit card details are collected and stored by Lemon Squeezy; we do not have access to or retention of them.

6. Retention and deletion

You can delete any generation from your dashboard at any time. When a generation is deleted, the underlying files and outputs are removed from our systems within 30 days. To request the full deletion of your account, contact us at [email protected].

7. Cookies

We use only essential cookies — to keep you signed in, to remember your language preference, and to protect against CSRF. We do not use advertising or tracking cookies.

8. Security

Data is encrypted in transit (HTTPS) and at rest where supported by our infrastructure. Passwords, when set, are hashed with bcrypt. We take reasonable technical and organisational measures to protect your data, but no system on the internet is 100% secure.

9. Your rights

You have the right to access, correct, export, or request deletion of your personal data. To exercise these rights, contact us at [email protected].

10. International transfers

Our infrastructure and AI providers may process data outside your country. By using the Service you consent to this transfer, which is performed under standard contractual protections.

11. Changes to this Policy

We may update this Policy from time to time. The current version will always be published on this page, with the "Last updated" date.

12. Contact

Privacy questions: [email protected]