Privacy Policy

1. Who we are

CVMaverick provides an AI-powered resume builder that lets you create a professional profile, enhance it with AI, match it against job descriptions, and generate tailored resumes and cover letters. If you have any questions about this policy or your data, contact us at privacy@cvmaverick.com.

2. The data we collect

We only collect the data we need to provide the Service:

• Account data: your name and email address, and authentication details, managed by our authentication provider (Clerk) when you sign up or sign in (including via Google).
• Profile and CV data: the information you enter or upload, such as your contact details, work experience, education, projects, skills, certifications, achievements, spoken languages, and any resume files you upload for parsing.
• Generated content: tailored resumes and cover letters produced from your data.
• Consent records: the fact and version of the Privacy Policy and Terms you accepted, and when.
• Technical data: basic technical information such as your browser, device, and interactions needed to operate and secure the Service.
• Browser extension data: if you install our browser extension, the job posting text you choose to send to your account and a pairing token that links the extension to your account. The extension only processes pages where you actively use it.

Please do not include sensitive personal data (such as health, religion, or political opinions) in your CV unless it is strictly necessary and you are comfortable doing so.

3. How and why we use your data

• To create and manage your account and authenticate you.
• To store your profile and let you build, edit, and download your CV.
• To provide AI features, parsing uploaded resumes, enhancing content, matching against job descriptions, and generating tailored resumes and cover letters.
• To operate, secure, maintain, and improve the Service.
• To comply with our legal obligations.

4. AI processing

To power our AI features, the relevant parts of your profile and CV content are sent to our AI provider (OpenAI, accessed via Replit's AI Integrations) to generate the requested output. This processing happens only when you trigger an AI action (for example, enhancing your CV or tailoring it to a job). We instruct the AI to stay faithful to your data and not to invent facts. Your content is not used to train third-party AI models through this integration.

AI accuracy

CVMaverick uses AI to generate and improve content. AI can make mistakes. Always review and verify important information, such as dates, names, numbers and claims, before you rely on it or share it.

5. Legal bases (GDPR)

Where GDPR applies, we rely on the following legal bases:

• Contract: to provide the Service you have signed up for.
• Consent: for optional processing; you can withdraw consent at any time.
• Legitimate interests: to secure, maintain, and improve the Service.
• Legal obligation: where we must retain or disclose data by law.

6. Who we share data with (sub-processors)

We do not sell your personal data. We share it only with trusted service providers who help us run the Service, under appropriate data protection terms:

• Clerk: authentication and account management.
• OpenAI: (via Replit AI Integrations), AI generation and parsing.
• Replit: application hosting and database infrastructure.
• Cloudflare: domain, DNS, and network security.
• Stripe: payment processing for paid subscriptions. Stripe handles your payment details; we never see or store your full card number.
• Resend: sending transactional emails, such as account and deletion notices.
• PostHog: privacy-friendly product analytics, only if you accept the cookie banner.
• Sentry: error and performance monitoring so we can find and fix problems.

7. International transfers

Some of our providers may process data outside your country, including outside the EU/EEA or UK. Where this happens, we rely on appropriate safeguards (such as Standard Contractual Clauses) to protect your data.

8. How long we keep your data

We keep your data for as long as your account is active. Accounts that remain inactive for 30 days are deleted automatically: we first send a warning email a few days beforehand, and never delete without that notice. You can also delete your account and all associated data at any time from your profile page, which erases your data immediately. To prevent abuse of free allowances, we keep a scrambled (hashed) fingerprint of your email address together with free-plan usage counts even after deletion; it cannot be turned back into your email address. Records related to serious misuse or account suspensions may also be retained to prevent repeat abuse.

9. Your rights

Depending on your location, you have the right to:

• access the personal data we hold about you;
• correct inaccurate or incomplete data;
• erase your data ("right to be forgotten");
• export your data (portability);
• restrict or object to certain processing;
• withdraw consent at any time;
• lodge a complaint with your local data protection authority.

You can exercise erasure directly via the "Delete my account" option on your profile page. For any other request, contact us at privacy@cvmaverick.com.

10. Cookies and local storage

We use strictly necessary cookies set by our authentication provider to keep you signed in. We also store your preferences (such as language, theme, and interface state) locally in your browser. With your consent, we use privacy-friendly analytics (PostHog) to understand how the Service is used; analytics only runs if you accept the cookie banner, and you can decline without losing any functionality. We do not use advertising cookies.

11. Security

We use reasonable technical and organizational measures to protect your data, including encrypted connections and access controls. No system is completely secure, but we work to protect your information and to notify you and the relevant authorities of a data breach where required by law.

12. Children

The Service is intended for adults aged 18 and over, and we do not knowingly collect data from anyone under 18. If you believe someone under 18 has provided us data, contact us and we will delete it.

13. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the date above and ask you to review and accept the updated version before you continue using the Service.

14. Contact

Questions or requests? Email us at privacy@cvmaverick.com. See also our Terms & Conditions.