Terms of Service

1. Information We Collect

• Personal Information: Name, email address, password (encrypted), and account preferences.
• Payment Information: Billing address and payment card details (processed securely through our payment processor, Stripe).
• Resume Content: All text, formatting, and content included in resumes you upload or create.
• Job Description Data: Job posting text that you provide for resume optimization.
• Communication Data: Messages, feedback, or support requests you send to us.

2. Information Collected Automatically

• Usage Data: Pages visited, features used, time spent on the Service, optimization history.
• Device Information: IP address, browser type and version, device type, operating system.
• Cookings and Tracking Technologies: Session cookies, preference cookies, and analytics cookies (see Section 7).
• Log Datas: Access times, error logs, and system activity.

3. Information from Third Parties

• OAuth Authentication: If you sign up using Google or other third-party services, we receive your name, email, and profile picture from that provider.

4. How We Use Your Information

We use the collected information for the following purposes:

4.1. Core Service Delivery

• Process and optimize your resume based on job descriptions
• Generate match scores and compatibility analysis
• Store your resume history and optimization results
• Provide personalized recommendations

4.2. Account Management

• Create and manage your user account
• Authenticate your identity and prevent unauthorized access
• Process payments and maintain billing records
• Send transactional emails (password resets, purchase confirmations)

4.3. Service Improvement

• Analyze usage patterns to improve our AI models and features
• Conduct research and development for new features
• Monitor and analyze trends, usage, and activities
• Debug and resolve technical issues

4.4. Legal and Security

• Comply with legal obligations and regulatory requirements
• Protect against fraudulent, unauthorized, or illegal activity
• Enforce our Terms of Service
• Protect the rights, property, and safety of our users and the public

5. How We Share Your Information

We do not sell your personal information. We only share your information in the following limited circumstances:

5.1. Service Providers

• AI Processing: OpenAI/Anthropic for resume analysis and optimization (your data is processed according to their data processing agreements)
• Payment Processing: Stripe for secure payment processing
• Cloud Hosting: Amazon Web Services (AWS) or similar cloud infrastructure providers
• Analytics: Google Analytics or similar services for usage analytics
• Email Services: For transactional and marketing emails (only with your consent)
• Customer Support: Help desk and support ticket systems

5.2. Business Transfers: All service providers are contractually obligated to protect your information and use it only for the specific services they provide to us.

5.3. Legal Requirements: We may disclose your information if required to do so by law or in response to:

• Valid legal process (subpoena, court order, warrant)
• Government or regulatory investigations
• Protection of our rights, property, or safety, or that of users or the public
• Prevention or investigation of possible crimes

5.4. With Your Consent: We may share your information with third parties when you explicitly consent to such sharing.

6. AI Processing and Data Usage

6.1. Resume and Job Description Processing

• Your resume content and job descriptions are sent to third-party AI services (OpenAI, Anthropic) for processing and optimization
• These services process your data according to their enterprise data processing agreements
• We use API configurations that prevent your data from being used to train AI modelsAll text, formatting, and content included in resumes you upload or create
• AI processing is performed in real-time and your data is not retained by AI providers beyond the processing session

6.2. Data Anonymization for Improvement:

• We may use anonymized and aggregated resume data to improve our algorithms
• Anonymized data has all personally identifiable information removed
• This data cannot be used to identify you or your specific resume

7. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations:

• Account Data: Retained while your account is active and for 90 days after account deletion
• Resume Content: Retained while your account is active; you may delete individual resumes at any time
• Transaction Records: Retained for 7 years for tax and accounting purposes
• Log and Analytics: Retained for 2 years for security and debugging purposes
• Backup Data: May persist in backup systems for up to 30 days after deletion

You may request deletion of your account and associated data at any time through your account settings or by contacting us.

8. Cookies and Tracking Technologies

8.1. Types of Cookies We Use

• Essential Cookies: Required for authentication, security, and basic functionality (cannot be disabled)
• Preference Cookies: Remember your settings and preferences
• **Analytical Cookies: ** Help us understand how users interact with our Service
• **Marketing Cookies: ** Track visits across websites for advertising purposes (only with consent)

8.2. Your Cookie Choices

You can control cookies through your browser settings. Note that disabling essential cookies may prevent you from using certain features of our Service. You can opt out of analytics cookies through your account settings or our cookie consent banner.

9. Data Security

We implement industry-standard security measures to protect your information:

9.1. Technical Safeguards

• Encrytion : All data is encrypted in transit (TLS/SSL) and at rest (AES-256)
• Access Control : Role-based access restrictions for our employees and contractors
• Secure Authentication : Passwords are hashed using bcrypt or similar algorithms
• Regular Security Audits : Periodic vulnerability assessments and penetration testing
• Secure Infrastructure : Hosting on security-certified cloud platforms

9.2. Organizational Safeguards

• Background checks for employees with access to user data
• Confidentiality agreements with all staff and contractors
• Security training for all team members
• Incident response plan for data breaches

9.3. Limitations

While we strive to protect your information, no method of transmission or storage is 100% secure. You are responsible for maintaining the security of your account credentials.

10. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

10.1. Access and Portability

• Right to Access : Request a copy of the personal information we hold about you
• Right to Data Portability : Receive your data in a structured, machine-readable format

10.2. Correction and Deletion

• Right to Correction : Request correction of inaccurate or incomplete information
• Right to Deletion : Request deletion of your personal information (subject to legal retention requirements)

10.3. Control and Objection

• Right to Restriction : Request limitation on how we process your information
• Right to Object : Object to processing based on legitimate interests
• Right to Withdraw Consent : Withdraw consent for marketing communications or optional data processing

10.4. Automated Decision-Making

• Our resume optimization involves automated processing, but you can request human review of results
• You have the right not to be subject to decisions based solely on automated processing when it produces legal or similarly significant effects

10.5. How to Exercise Your Rights

To exercise any of these rights, please:

• Use the privacy controls in your account settings
• Email us at [support@cvopt.app]

We will respond to verified requests within 30 days (or as required by applicable law).

11. Children's Privacy

Our Service is not intended for users under the age of 16 (or 18 in some jurisdictions). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately, and we will take steps to delete that information.

12. International Data Transfers

If you are accessing our Service from outside the Canada , please be aware that your information may be transferred to, stored in, and processed in the Canada or other countries where our service providers operate. We ensure adequate protection for international transfers through:

• Standard Contractual Clauses approved by the European Commission
• Data Processing Agreements with service providers
• Compliance with applicable data protection frameworks

13. Third Party Links and Services

Our Service may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies before providing them with information.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by:

• Posting the updated policy on our website with a new "Last Updated" date
• Sending an email notification to your registered email address
• Displaying a prominent notice in the Service

Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.