Legal Document

Privacy Policy

Last updated: December 12, 2025

1. Introduction

CVFitr ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered resume optimization service.

By using CVFitr, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Personal Information

When you create an account, we collect:

  • Name and email address (via Google authentication)
  • Google account profile information
  • Payment information (processed securely through Stripe)

2.2 Resume and Job Application Data

To provide our services, we collect and process:

  • Your resume content and work history
  • Job descriptions and application details you provide
  • Cover letters and other application materials
  • Interview preparation notes and questions

2.3 Usage Data

We automatically collect certain information when you use our Service:

  • Device information (browser type, operating system)
  • IP address and location data
  • Usage patterns and feature interactions
  • Error logs and performance data

3. How We Use Your Information

We use the collected information for the following purposes:

  • To provide and maintain our AI-powered resume optimization service
  • To process your payments and manage subscriptions
  • To personalize and improve your experience
  • To communicate with you about your account and service updates
  • To analyze usage patterns and improve our AI models
  • To detect and prevent fraud or abuse
  • To comply with legal obligations

4. AI and Data Processing

CVFitr uses artificial intelligence (OpenAI's GPT models) to analyze and optimize your resume content. When you use our service:

  • Your resume data is sent to OpenAI's API for processing
  • OpenAI processes this data according to their privacy policy and data usage terms
  • We do not use your personal data to train AI models
  • AI-generated content is stored securely in our systems

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information with:

5.1 Service Providers

  • AWS: Cloud hosting and data storage
  • Stripe: Payment processing
  • OpenAI: AI content generation and optimization
  • Google: Authentication services

5.2 Legal Requirements

We may disclose your information if required by law or in response to valid legal requests.

6. Data Security

We implement industry-standard security measures to protect your data:

  • Encryption in transit (HTTPS/TLS) and at rest
  • Secure authentication via AWS Cognito
  • Regular security audits and updates
  • Access controls and monitoring
  • Secure cloud infrastructure (AWS)

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. You may request deletion of your account and data at any time. After deletion:

  • Your personal data will be permanently deleted within 30 days
  • Some data may be retained for legal or regulatory compliance
  • Anonymized usage data may be retained for analytics

8. Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate or incomplete data
  • Request deletion of your data
  • Export your data in a portable format
  • Opt-out of marketing communications
  • Withdraw consent for data processing

To exercise these rights, please contact us at cvfitr@dmt.dev

9. Cookies and Tracking

We use cookies and similar tracking technologies to:

  • Maintain your session and authentication state
  • Remember your preferences
  • Analyze usage patterns and improve our service

You can control cookies through your browser settings.

10. Children's Privacy

CVFitr is not intended for users under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by email or through a notice on our Service. Your continued use after such changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

This policy is effective as of December 12, 2025