Privacy Policy
Last updated: May 3, 2026
Introduction
At CVCircle ("we," "our," or "us"), we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our CV creation and management platform.
By using CVCircle, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our service.
Information We Collect
Personal Information
- Name, email address, and contact information
- Professional information (work experience, education, skills)
- CV content and cover letter data stored in MongoDB
- Job application tracking and career journey data
- Payment and billing information (for premium plans)
- Authentication data (NextAuth.js and Firebase)
- User preferences and settings
- Email verification status and tokens
Usage Information
- IP address and device information
- Browser type and version
- Pages visited and time spent on our platform
- Features used and interactions with our service
- Error logs and performance data
- AI usage patterns and optimization requests
- CV export and download activities
- Session data and authentication tokens
Cookies and Tracking
We use cookies and similar tracking technologies to enhance your experience and analyze usage patterns. For detailed information about our cookie usage, please see our Cookie Policy.
How We Use Your Information
Service Provision
- Create and manage your CV and cover letters
- Provide AI-powered CV optimization suggestions
- Track job applications and provide analytics
- Process payments and manage subscriptions
Improvement & Analytics
- Improve our platform and user experience
- Analyze usage patterns and trends
- Develop new features and services
- Provide customer support and assistance
Information Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
- Service Providers: We may share information with trusted third-party service providers who assist us in operating our platform, processing payments, or providing customer support.
- Legal Requirements: We may disclose information if required by law, court order, or government regulation.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the business transaction.
- Safety and Security: We may share information to protect the safety and security of our users, platform, or the public.
Data Security
We implement industry-standard security measures to protect your personal information:
- Encryption of data in transit and at rest using industry standards
- MongoDB database security with access controls
- NextAuth.js and Firebase authentication security
- JWT token-based session management
- CSRF protection and secure cookie settings
- Regular security audits and vulnerability assessments
- Secure data centers with physical and digital security
- Regular backups and disaster recovery procedures
- Email verification and account security measures
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
Your Rights and Choices
Access and Control
- Access and update your personal information
- Download your data in a portable format
- Delete your account and associated data
- Opt-out of marketing communications
Data Retention
- We retain your data as long as your account is active
- Data is deleted within 30 days of account deletion
- Some information may be retained for legal compliance
- You can request data deletion at any time
AI Services and Third-Party Integrations
OpenAI Integration
We use OpenAI's API to provide AI-powered CV optimization and content generation. When you use these features, your CV content may be processed by OpenAI to provide suggestions and improvements.
- CV content is sent to OpenAI for analysis and optimization
- OpenAI processes data according to their privacy policy
- We do not store your CV content on OpenAI's servers permanently
- You can opt-out of AI features if you prefer manual editing
Authentication Services
We use NextAuth.js and Firebase for user authentication and session management.
- Google OAuth for social login (handled by NextAuth.js)
- Firebase Authentication for additional security
- Session data is stored securely with JWT tokens
- Email verification through our secure email service
Email Services
We use Hostinger SMTP for sending verification emails and notifications.
- Email addresses are used for account verification
- Transactional emails for account management
- Marketing emails only with your consent
- Email data is processed securely through our SMTP service
International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure that such transfers comply with applicable data protection laws and implement appropriate safeguards to protect your information.
Children's Privacy
Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.
Your continued use of our service after any changes constitutes acceptance of the updated Privacy Policy.
Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
Email: privacy@cvcircle.io
Address: CVCircle, Privacy Team
Response Time: We aim to respond to all privacy-related inquiries within 48 hours.