CV Creator Pro

1. Introduction

At CV Creator Pro, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application and services. Please read this policy carefully. If you do not agree with the terms of this privacy policy, please do not access the application.

2. Information We Collect

We collect information that you provide directly to us, as well as information automatically collected when you use our Service:

2.1 Personal Information

• Account Information: Email address, name, password (encrypted)
• Profile Information: Contact details, professional information, work history, education
• Resume Content: Personal details, work experience, skills, education, certifications
• Cover Letter Content: Personalized letters and job application materials
• Job Tracking Data: Company names, job titles, application status, interview notes

2.2 Authentication Information

• Email/Password Authentication: Encrypted credentials stored securely
• Google OAuth: Basic profile information (name, email) from your Google account
• Authentication Tokens: JWT tokens for session management

2.3 Automatically Collected Information

• Usage Data: Pages visited, features used, time spent on the application
• Device Information: Browser type, operating system, device type
• Log Data: IP address, access times, error logs
• Cookies: Session cookies, preference cookies, authentication cookies

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Provision: To provide, maintain, and improve our resume creation and job tracking services
• Account Management: To create and manage your account, authenticate users, and provide customer support
• Communication: To send you service-related emails, notifications, and updates
• Personalization: To customize your experience and remember your preferences
• Security: To detect, prevent, and address technical issues, fraud, and security vulnerabilities
• Analytics: To understand how users interact with our Service and improve functionality
• Legal Compliance: To comply with legal obligations and enforce our Terms of Service

4. Data Storage and Security

We implement industry-standard security measures to protect your personal information:

• Encryption: All data is encrypted in transit using SSL/TLS and at rest using AES-256 encryption
• Password Security: Passwords are hashed using bcrypt with salt before storage
• Secure Database: Data is stored in secure MySQL databases with access controls
• Authentication: JWT-based authentication with secure token management
• Regular Backups: Automated backups to prevent data loss
• Access Controls: Strict access controls and monitoring of our systems

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

5. Third-Party Services

We use the following third-party services to provide and improve our Service:

• Google OAuth: For authentication and login services (subject to Google's Privacy Policy)
• Email Service (Nodemailer/Gmail): For sending verification emails and notifications
• Hosting Provider (Vercel): For application hosting and deployment
• Database Provider: For secure data storage

These third-party services have their own privacy policies. We encourage you to review their policies to understand how they handle your data.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience:

• Essential Cookies: Required for authentication and core functionality
• Preference Cookies: Remember your settings and preferences (theme, language)
• Session Cookies: Maintain your login session and application state

You can control cookies through your browser settings. However, disabling cookies may limit your ability to use certain features of our Service.

7. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request access to the personal information we hold about you
• Correction: Update or correct inaccurate information through your account settings
• Deletion: Request deletion of your account and associated data
• Export: Download your data in a portable format (JSON)
• Opt-Out: Unsubscribe from marketing communications (if applicable)
• Data Portability: Transfer your data to another service

To exercise these rights, please contact us at privacy@cvcreatorpro.com.

8. Data Retention Policy

We retain your personal information for as long as necessary to provide our Service and fulfill the purposes outlined in this Privacy Policy:

• Active Accounts: Data is retained while your account is active
• Deleted Accounts: Data is permanently deleted within 30 days of account deletion
• Backup Data: Backup copies are retained for up to 90 days for disaster recovery
• Legal Requirements: Some data may be retained longer if required by law

9. GDPR and CCPA Compliance

For European Union Users (GDPR):

• We process your data based on your consent and our legitimate business interests
• You have the right to access, rectify, erase, restrict processing, and data portability
• You have the right to withdraw consent at any time
• You have the right to lodge a complaint with a supervisory authority

For California Users (CCPA):

• You have the right to know what personal information we collect and how it's used
• You have the right to request deletion of your personal information
• You have the right to opt-out of the sale of personal information (we do not sell your data)
• You have the right to non-discrimination for exercising your privacy rights

10. Children's Privacy

Our Service is not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete such information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the "Last Updated" date at the top of this page and, where appropriate, by sending an email notification. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

12. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: