CVGenerate Studio ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered resume and cover letter generation service.
We use cookies and similar technologies to provide and improve our Service. You can control your cookie preferences through our cookie consent banner.
Required for authentication and core functionality. These cannot be disabled as they are necessary for the Service to work.
__Secure-next-auth.session-token (or next-auth.session-token in development) — Used for authentication. Expires when you sign out or after 30 days of inactivity.Help us understand how you use the Service to improve your experience. These are only set if you consent through our cookie banner. Not currently active.
Used to show you relevant content and ads. These are only set if you consent through our cookie banner. Not currently active.
Managing Your Cookie Preferences
You can change your cookie preferences at any time by clearing your browser's local storage or waiting for the cookie consent banner to reappear. Essential cookies cannot be disabled as they are required for authentication.
We use your information to:
With your explicit consent, we may send you promotional emails containing:
Your Control
You can manage your email preferences or unsubscribe from marketing emails at any time in your account settings, or by clicking the unsubscribe link at the bottom of any marketing email. Transactional emails (account security, verification, password resets) cannot be disabled as they are essential for account functionality.
Important Information About AI Processing
To generate your documents, we use artificial intelligence services from third-party providers including Anthropic (Claude) and OpenAI (GPT). Your resume content and job descriptions are sent to these providers for processing.
To provide our Services, we share your data with the following trusted third-party sub-processors. Each is bound by contractual obligations to protect your data:
| Sub-processor | Service | Data Shared | Location |
|---|---|---|---|
| Anthropic (Claude AI) | AI content generation | Resume content (PII-masked), job descriptions | United States |
| OpenAI (GPT) | AI generation (fallback) | Resume content (PII-masked), job descriptions | United States |
| Resend | Email delivery | Email addresses only | United States |
| Stripe | Payment processing | Payment card data, billing info (not stored by us) | United States |
| Google Cloud Platform | Cloud hosting | All service data (encrypted) | EU (Belgium) |
| MongoDB Atlas | Database hosting | All service data (encrypted) | EU (Ireland) |
🔒 International Data Transfers
For sub-processors located in the United States, we use Standard Contractual Clauses (SCCs) approved by the EU Commission to ensure adequate data protection. Additionally, we apply technical safeguards such as PII masking before transmission to AI providers.
Enterprise customers can request our formal Data Processing Agreement (DPA) which includes detailed sub-processor obligations, security commitments, and audit rights. Contact enterprise@cvgenerate.com for more information.
For detailed technical documentation of our data flows and security controls, see our technical compliance documentation.
For maximum privacy, use our Incognito Mode:
⚠️ Important: Human Review Required
AI-generated content may contain inaccuracies, outdated information, or "hallucinations" (fabricated details). You are solely responsible for reviewing and verifying all generated content before use.
While our AI models are powerful and sophisticated, they have inherent limitations:
For complete terms regarding AI-generated content and our liability limitations, please review our Terms of Service, particularly section 2.1 (AI Service Limitations).
We take the security of your data seriously and implement industry-standard security measures to protect your information.
You have the right to:
To exercise these rights, contact us at support@cvgenerate.com
We use cookies and similar technologies for:
You can control cookies through your browser settings, but disabling essential cookies may affect service functionality.
Our Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we discover that we have collected information from a child, we will delete it immediately.
Your data may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable laws.
We may update this Privacy Policy from time to time. We will notify you of material changes via email or through prominent notice on our Service. Your continued use after changes constitutes acceptance of the updated policy.
If you have questions or concerns about this Privacy Policy or our data practices, please contact us:
Email: support@cvgenerate.com
Support Portal: CVGenerate Studio Support
For EU Residents (GDPR): You have additional rights including data portability, restriction of processing, and the right to lodge a complaint with your supervisory authority.
For California Residents (CCPA): You have the right to know what personal information we collect, the right to delete, and the right to opt-out of sale (note: we do not sell your personal information).