Privacy Policy

1. What data we collect

When you use the service, the current implementation stores your run identifier, uploaded or pasted CV content, generated CV output, structured CV data, locale, amendment state, payment status, and related payment verification metadata in the application database.

We also collect anonymous product-usage events through PostHog, such as pageviews and clicks. Those events are intended to measure product usage and do not include your payment card details.

• Run and session identifiers, including the `runId` used to reconnect you to a saved result.
• CV content you upload or paste, plus generated standard and recruiter-enhanced CV output.
• Structured extraction data, locale, referral code if present, and amendment counters tied to a run.
• Payment verification fields such as paid status, session identifier, amount, and currency after checkout completes.

2. How we use your data

We use your submitted CV content to analyse, improve, and return an enhanced CV for your specific run. We also use run data to power amendments, gated downloads, payment verification, and support troubleshooting.

We do not sell your data to third parties. We use aggregated analytics to understand site usage and improve the product experience.

3. Third-party processors

AI Proof Resume relies on third-party services to operate the product.

• Google Gemini API processes CV content to extract, analyse, and generate enhanced resume output.
• Stripe processes payments through the hosted checkout flow. We do not store full card numbers, CVCs, or other raw card details on our servers.
• Vercel hosts and serves the application infrastructure.
• PostHog collects anonymous product analytics and pageview events.

4. Data retention

The current production implementation does not use Vercel KV for run storage and does not automatically clear server-side run records after 24 hours. Run data is stored in the application database until it is deleted manually or a future retention cleanup is introduced.

Access to a run may expire in the user interface earlier than the underlying server-side record is removed. If you want a run deleted, email us and include any relevant run identifier if available.

5. Your rights

You can contact us to request access to or deletion of your run data. If you are in the EU or UK, you may also request deletion under applicable data-protection laws.

Because CV content may contain personal information that you choose to upload, please review your document before using the service and avoid submitting information you do not want processed.

6. Contact

For privacy, access, deletion, or support requests, contact cvixa@nanocorp.app.