Privacy Policy

1. Scope

This Privacy Policy explains how CVLift ("we", "us", "our") collects, uses, stores, and shares information when you use our website and services.

2. Information We Collect

• Account data, such as name, email address, and encrypted authentication credentials.
• Usage data, such as generation activity, credits, plan status, and feature interactions.
• Content you submit, including resume text, job descriptions, and cover letter inputs/outputs.
• Billing-related metadata handled through third-party payment providers (for example, Stripe).
• Technical data, such as approximate device/browser data, logs, and request metadata.

3. How We Use Information

• Provide, maintain, and improve the service.
• Generate resume analysis, rewrites, and cover letters.
• Process subscription and billing operations.
• Detect fraud, abuse, and security issues.
• Comply with legal obligations and enforce our Terms.

4. Legal Bases (where applicable)

We process data based on contract performance, legitimate interests, legal obligations, and consent where required by applicable law.

5. Data Sharing

We do not sell personal information. We may share data with service providers that help us operate the platform (such as hosting, analytics, authentication, and billing), and when required by law or to protect rights, safety, and security.

6. Data Retention

We retain information only as long as reasonably necessary for service delivery, legal compliance, dispute resolution, and abuse prevention. You may request account deletion through product settings; some records may be retained as required by law.

7. Security

We use commercially reasonable safeguards, but no method of transmission or storage is fully secure. You are responsible for maintaining account credential security.

8. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, or object to certain processing. You may also have a right to data portability and to withdraw consent where processing is based on consent.

9. Children

Our services are not directed to children under 13 (or higher age where required by local law). We do not knowingly collect data from children.

10. Changes

We may update this Privacy Policy periodically. Updates are effective when posted. Continued use after changes constitutes acceptance of the updated policy.