Privacy Policy

Last Updated: March 2024My CV Path Privacy

Privacy Policy

SECTION 01: INTRODUCTION

myCVpath ("we", "our", or "us") operates an AI-powered resume building and job application management platform. We are committed to protecting your privacy and handling your personal information with care and transparency.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services (collectively, the "Service"). Please read this policy carefully. If you do not agree with the terms of this privacy policy, please do not access the Service.

SECTION 02: DATA COLLECTION

2.1 Information You Provide Directly

When you create an account and use our Service, we collect:

  • Account Information: Full name, email address, and encrypted password
  • Resume/CV Content: All information you include in your CV including:
    • Personal details (name, contact information, location)
    • Professional summary and career objectives
    • Work experience (companies, positions, dates, descriptions)
    • Education history (institutions, degrees, dates)
    • Skills and proficiency levels
    • Languages and proficiency levels
    • Certifications and achievements
    • Projects and portfolio items
  • Job Application Data: Job titles, company names, job URLs, job descriptions, application status, interview schedules, and personal notes
  • Uploaded Files: PDF or text files of your existing resumes

2.2 Information Collected Automatically

When you access our Service, we automatically collect:

  • Device Information: Device type (desktop, mobile, tablet), operating system, browser type and version
  • Usage Data: Pages visited, time spent on pages, click patterns, features used, actions performed (CV uploads, job applications, PDF downloads)
  • Network Information: IP address, general geographic location (city/country level)
  • Session Data: Unique visitor fingerprint (hash of IP + device info), session duration, referral source

2.3 Cookies and Tracking Technologies

We use the following types of cookies and similar technologies:

  • Essential Cookies: Required for authentication, session management, and core functionality
  • Analytics Cookies: Track visitor behavior, page views, and user actions (only with your consent)
  • Preference Cookies: Remember your settings and preferences

SECTION 03: PROTOCOL USAGE

We use the collected information for the following purposes:

03.1 SERVICE PROVISION

  • Creating and managing your account
  • Storing and managing your CV data
  • Parsing existing resumes using AI to extract structured information
  • Generating tailored CVs optimized for specific job applications
  • Creating customized cover letters
  • Generating PDF versions of your CVs and cover letters
  • Tracking your job applications and interview schedules

03.2 AI INTEGRATION

Your CV content and job descriptions are processed by third-party AI language models (OpenAI GPT, Anthropic Claude, or Google Gemini) to:

  • Parse and structure your resume text
  • Analyze job requirements
  • Tailor your CV content to match specific job postings
  • Generate professional cover letters

Note: We use these AI services as data processors. Your data is sent to their APIs for processing but is not used to train their models. See Section 5 for more details.

03.3 SERVICE IMPROVEMENT

  • Analyzing usage patterns to improve user experience
  • Identifying and fixing technical issues
  • Developing new features based on user behavior
  • Optimizing performance and reliability

03.4 COMMUNICATION

  • Sending service-related notifications (account updates, security alerts)
  • Responding to your inquiries and support requests
  • Notifying you of important changes to our Service or policies

SECTION 04: DATA STORAGE AND SECURITY

4.1 Storage Location

Your data is stored on secure servers hosted by our infrastructure provider. We use PostgreSQL databases with encryption at rest for all sensitive information.

4.2 Security Measures

  • Encryption: All data transmitted between your browser and our servers uses TLS/SSL encryption (HTTPS)
  • Password Protection: Passwords are hashed using bcrypt before storage
  • Access Control: Strict access controls limit who can access your data
  • Session Security: HTTP-only cookies prevent XSS attacks
  • Regular Backups: Automated backups to prevent data loss
  • Security Monitoring: Continuous monitoring for suspicious activity

4.3 Data Retention

We retain your information for as long as:

  • Your account remains active
  • Needed to provide you with our Service
  • Required by law or for legitimate business purposes

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are legally required to retain it.

SECTION 05: DATA SHARING AND THIRD-PARTY SERVICES

We do not sell, rent, or trade your personal information. We share your information only in the following limited circumstances:

5.1 AI Service Providers

Your CV content and job descriptions are sent to third-party AI providers for processing:

  • OpenAI (GPT models)
  • Anthropic (Claude models)
  • Google (Gemini models)

These providers process your data as data processors under our instructions. According to their policies, data sent via API is not used to train their models.

5.2 Infrastructure Providers

  • Hosting Services: Our servers and databases are hosted by cloud infrastructure providers who have access to the underlying infrastructure but not to your data content

We may disclose your information if required to do so by law or in response to:

  • Valid legal processes (subpoenas, court orders)
  • Requests from law enforcement or government agencies
  • Protection of our rights, property, or safety
  • Prevention of fraud or illegal activities

SECTION 06: YOUR RIGHTS (GDPR & PRIVACY LAWS)

If you are in the European Economic Area (EEA), United Kingdom, or other jurisdictions with comprehensive privacy laws, you have the following rights:

6.1 Right to Access

You have the right to request copies of your personal data. You can view most of your data directly in your account dashboard.

6.2 Right to Rectification

You have the right to request correction of inaccurate or incomplete data. You can edit your CV and account information directly in the Service.

6.3 Right to Erasure ("Right to be Forgotten")

You have the right to request deletion of your personal data. You can delete your account at any time, which will trigger deletion of all your personal information within 30 days.

6.4 Right to Restriction of Processing

You have the right to request that we restrict processing of your personal data under certain circumstances.

6.5 Right to Data Portability

You have the right to request transfer of your data to another service provider in a structured, commonly used, machine-readable format.

6.6 Right to Object

You have the right to object to processing of your personal data for direct marketing or based on legitimate interests.

Where we rely on your consent to process your data, you have the right to withdraw that consent at any time. This includes analytics tracking consent.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

SECTION 07: CHILDREN'S PRIVACY

Our Service is not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will delete such information.

SECTION 08: INTERNATIONAL DATA TRANSFERS

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country.

When we transfer personal data from the EEA to other countries, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

SECTION 09: DO NOT TRACK SIGNALS

Some browsers have a "Do Not Track" feature that lets you tell websites you do not want to have your online activities tracked. We respect Do Not Track signals and will not track, plant cookies, or use advertising when a Do Not Track browser mechanism is in place.

SECTION 10: CALIFORNIA PRIVACY RIGHTS (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to know what personal information is collected, used, shared, or sold
  • Right to delete personal information held by businesses
  • Right to opt-out of sale of personal information (Note: We do not sell personal information)
  • Right to non-discrimination for exercising CCPA rights

To exercise these rights, contact us at [email protected].

SECTION 11: CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

  • Posting the new Privacy Policy on this page
  • Updating the "Effective Date" at the top of this policy
  • Sending you an email notification (for significant changes)

We encourage you to review this Privacy Policy periodically. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

SECTION 12: CONTACT US

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will respond to all requests within 30 days.