Privacy Policy

This is a draft privacy policy published ahead of commercial launch. It is pending formal legal review and sign-off before AssistedCV accepts live payments.

1. What we collect

To build your resumes, AssistedCV collects: account information (name, email, and authentication identifiers); the professional profile you enter directly (work history, education, skills, projects, certifications, and similar sections); documents you upload for extraction (existing resumes, certificates, transcripts); job descriptions you paste in for AI-assisted tailoring; and usage data needed to operate the product (login timestamps, feature usage counts, error logs).

We do not require you to provide more personal information than a resume ordinarily contains, and optional fields (phone, address, photo) stay optional.

2. How AI processes your data

Features such as resume generation, ATS analysis, and document extraction send the relevant portion of your profile or uploaded document to a third-party AI model provider (for example OpenAI, Anthropic, or Google, depending on the task) solely to produce the response you requested. Each AI call is logged internally (provider, model, token counts, cost, and a reference to what was sent) for billing, abuse prevention, and quality monitoring — never for resale.

We do not use your personal data to train AI models, ours or any provider's, by default. If AssistedCV ever offers an opt-in program to improve models using customer data, it will be explicit, separately consented to, and off by default — no such program exists today.

See the AI Disclaimer for the limitations of AI-generated content itself.

3. Third parties we share data with

We share data with the following categories of processors, only as needed to run the service:

• AI model providers — to generate content, analyze resumes, and extract text from uploads (see §2).
• Cloud infrastructure — MongoDB Atlas (database), AWS S3 (file storage), Vercel (hosting), for storing and serving your data.
• Payments — Razorpay processes subscription payments; we never see or store your full card or bank details.
• Email delivery — Resend sends transactional emails (verification, receipts, extraction-complete notices).
• Error monitoring and analytics — Sentry (crash/error diagnostics) and a privacy-respecting product analytics tool, configured to exclude personally identifying content from events.

We do not sell your personal data to third parties, and we never will. This is a permanent policy commitment, not a promotional one.

4. Your choices and rights

You can export your profile data, download your resumes as PDF, and request account deletion at any time from account settings. Deleting your account removes your profile, resumes, and uploaded documents, subject to a short retention window required for fraud prevention and legal recordkeeping.

If you are located in India, this policy is intended to align with the Digital Personal Data Protection Act, 2023, in general principle; a complete DPDP compliance mapping is tracked separately and will be incorporated as it's finalized.

5. Data residency and security

Data is stored in MongoDB Atlas with encryption at rest and in transit. We apply role-based access control internally, and all administrative access to user data is logged in an audit trail.

6. Changes to this policy

We will update the effective date above and, for material changes, notify active users by email before the change takes effect.

7. Contact

Questions about this policy can be sent to the support channel listed in your account settings.