Privacy, by intention.
This is a starter privacy notice. Complete it with your actual business identity, retention policy, data processors, jurisdiction and contact details before launch.
Resume and account data
Account information and saved resumes are stored to provide the workspace. In production, account access should be limited to the authenticated user and authorized administrators, with database permissions and audit safeguards configured.
AI processing
When AI features are enabled, the content you submit for a generation request is sent to the configured AI provider. Avoid submitting sensitive personal data unrelated to the resume. Disclose the provider and applicable data terms to users before launch.
Temporary PDF files
PDF uploads are intended for temporary processing, stored outside the public web root. Implement deletion after processing and scheduled cleanup for abandoned uploads, and test the policy on the deployed host.
Payments
Payment card or wallet details should be entered on the selected provider's checkout page. CVPilot should store order references and status, not card numbers or provider secret keys. Transaction details are processed under the provider's terms.
Contact and legal identity
Replace this notice with your company identity, contact email, applicable rights request process and retention periods before accepting public users.