Privacy Policy

Information We Collect

We collect the following information when you use our service:

• Your email address
• CV/resume content you upload
• Job requirements you provide
• Specific feedback requests
• Payment information (processed by Stripe, not stored by us)

How We Use Your Information

We use your information solely to:

• Process your CV and generate feedback
• Send feedback results to your email
• Process payments for our service
• Provide customer support

Data Sharing and Third-Party Processors

We share your data only with the following service providers:

• AI Analysis Providers: Your CV content is sent to AI services for analysis and feedback generation. We exclusively use US-based AI providers to ensure your data remains within US jurisdiction and benefits from strong US privacy protections. These services process data according to their privacy policies and terms of service. Your data is not used to train AI models.
• Email Delivery Services: We use email service providers to send your feedback via email. These services process your email address and the feedback content for delivery purposes only.
• Payment Processors (currently Stripe): Payment information is processed by third-party payment services. We never store or access your payment card details - only transaction confirmations.
• Hosting Services (currently Vercel): Our application is hosted on cloud platforms, which may process technical data like IP addresses for service delivery and security purposes.
• Database Services: We use database providers to securely store your data during the 7-day retention period before automatic deletion.

Service Provider Changes: We may change service providers from time to time to improve our service quality, security, or cost-effectiveness. Any new providers will maintain the same high standards for data protection and privacy. We will notify users of material changes to our data processing practices.

Data Processing Agreements: All third-party processors operate under appropriate data processing agreements and security standards.

We do not sell, rent, or share your personal information with any other parties.

Data Retention and Deletion

Data Retention Period: Your CV content, feedback, and personal information are retained for up to 7 days to ensure service delivery and provide customer support.

PII Redaction: After 7 days, we automatically redact all personally identifiable information from our records. We may retain non-identifying data for critical business operations and security purposes, including:

• Transaction records for accounting and tax compliance
• Service usage metrics (anonymized)
• Security logs for fraud prevention

All redacted data is stored securely and cannot be linked back to individual users. You may request immediate deletion at any time by contacting hello@reviewmy.cv.

AI Model Training

We do not train AI models on your CV. Your CV content is used only to generate your specific feedback and is then deleted.

Data Security

We implement appropriate security measures to protect your data:

• HTTPS encryption for all data transmission
• Secure file upload and processing
• Regular security updates and monitoring
• Limited access to your data on a need-to-know basis

Your Rights and GDPR/CCPA Compliance

Legal Basis for Processing: We process your data based on your consent and our legitimate business interests in providing CV analysis services.

Your Rights Include:

• Access: Request a copy of your personal data we hold
• Deletion: Request immediate deletion of your data (automatically deleted after 7 days)
• Rectification: Request correction of inaccurate personal data
• Portability: Receive your data in a structured, machine-readable format
• Restriction: Request limitation of processing in certain circumstances
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time (may prevent service delivery)

For California Residents (CCPA): You have additional rights including the right to know what personal information is collected, the right to delete personal information, and the right to opt-out of the sale of personal information (note: we do not sell personal information).

For EU/UK Residents (GDPR): You have the right to lodge a complaint with your local data protection authority if you believe we have not handled your data appropriately.

To exercise any of these rights or request data removal, contact us at hello@reviewmy.cvwith your specific request. We will respond within 30 days (or as required by applicable law). For immediate data deletion, please include "DATA DELETION REQUEST" in your email subject line.

Cookies and Tracking

Our website may use essential technical cookies required for basic functionality:

• Technical cookies for form submission and file upload processes
• Payment processing cookies (set by Stripe during checkout)
• Hosting platform cookies (set by Vercel for service delivery, if any)

What we do NOT use:

• Tracking or analytics cookies
• Marketing or advertising cookies
• Social media cookies
• Non-essential third-party cookies

Any cookies used are essential for the website's functionality and your ability to use our service. We do not collect personal information through cookies.

Contact Us

For any privacy-related questions, data removal requests, or inquiries, contact us at:

Email: hello@reviewmy.cv

Response Time: We respond to all privacy inquiries within 30 days. For urgent data deletion requests, use "DATA DELETION REQUEST" in the subject line for priority handling.

Data Breach Notification

In the unlikely event of a data breach that may pose a risk to your personal information, we will:

• Notify affected users within 72 hours of discovering the breach
• Report to relevant authorities as required by law
• Provide details about what information was involved and steps we're taking
• Offer guidance on protective measures you can take

Notifications will be sent to your registered email address and posted prominently on our website.

Governing Law and Dispute Resolution

This privacy policy is governed by the laws of the State of California, United States. Any disputes arising from this policy or our data practices will be resolved through:

• Initial good faith negotiations between parties
• Binding arbitration if negotiations fail
• Courts of competent jurisdiction in California as a last resort

Limitation of Liability: To the fullest extent permitted by law, our liability for any data privacy issues is limited to the amount you paid for our service.

Changes to This Policy

We may update this privacy policy from time to time. We will notify users of significant changes via email or prominent notice on our website. Continued use of our service constitutes acceptance of any policy changes.