Privacy Policy
Last updated: July 28, 2026
Short version: your CV is yours. We never sell it, we never share it with employers or recruiters, and we never use it to train AI models. Here is the full picture, in plain language.
1. What we collect
Account information (your name and email, handled by our authentication provider, Clerk); the content you upload (your CV and the job postings you add); basic product-usage analytics, via PostHog, so we can see which features work and which don't; and payment information for paid plans, which is handled entirely by our payment processor, Lemon Squeezy — we never see your full card details.
2. How we use it
Only to run the service for you: parsing your CV, scoring it against your jobs, and generating suggestions and tailored versions. Your CV content is processed by our AI providers solely to serve your requests — under API terms that do not use your data to train their models.
3. What we never do
We never sell your data. We never share your CV with employers, recruiters, or anyone else — only you decide where your CV goes. We never use your CV to train AI models. We show no ads and use no advertising trackers.
4. Storage and security
Your data is encrypted in transit and at rest, stored and hosted with established cloud providers: Neon (database), Vercel and Vercel Blob (hosting and file storage), and Inngest (background job processing). Access to production data is limited to what is needed to operate and support the service.
5. Retention and deletion
You can delete individual resumes or your entire account at any time from inside the app. Deletion is immediate and permanent: deleting your account removes your CVs, job postings, analyses, and generated versions from our database right away, with no recovery grace period — so download anything you want to keep first.
6. Cookies and analytics
We use essential cookies to keep you signed in, and product-usage analytics to understand how the product is used and improve it. We do not use advertising cookies or cross-site trackers.
7. Your rights
You can access, correct, export, or delete your data. Most of this you can do directly in the app; for anything else, email hello@cvbro.ai and we will help.
8. Children
CVBro is not directed at children and must not be used by anyone under 16.
9. Sensitive information in your CV
CVs can sometimes include details that count as sensitive personal data under some privacy laws — for example a photo, disability accommodations, military service, or memberships that reveal religion or union activity. We don't ask for this and don't use it to score or evaluate you differently; it's processed only as an incidental part of the document you choose to upload, for the same limited purpose as the rest of your CV. If you'd rather leave it out, you're always free to upload a version of your CV without it.
10. International data transfers
CVBro is based in Panama, and the cloud providers we use to run the service (database, hosting, file storage, and our AI providers) are located in other countries, including the United States. That means your data may be processed outside the country you're in. Wherever it's processed, it's protected under this Privacy Policy and handled by providers under contractual data-protection commitments.
11. Changes to this policy
If we make material changes, we will update this page and the date at the top, and notify you by email for significant changes.