Privacy Policy

Overview

This Privacy Policy explains how Cvoop collects, uses, stores, and protects information when you use our website and resume builder (the "Service").

You can use the basic resume builder without an account. An account is optional and lets you save resumes and access them from supported devices.

Information We Collect

Depending on how you use the Service, we may collect:

1. Account information: your email address, account creation and verification details, and authentication records. Passwords are stored only as cryptographic hashes, not in plain text.
2. Google Sign-In information: if you choose to sign in with Google, we receive the Google account identifier and email address needed to create or access your Cvoop account. We may also receive basic profile information made available by the authorization scopes you approve. We use this information only to authenticate you, associate your Cvoop account, and provide the Service. We do not request or access Gmail, Google Drive, Contacts, Calendar, or other Google content.
3. Resume content: resume text, templates, imported resume files, and images that you choose to save to an account or send for processing. Information entered into a resume may include names, contact details, employment history, education, and other information you provide.
4. Technical and security information: session identifiers, approximate request information, IP address, user agent, and security events used to operate and protect accounts.
5. Analytics information: pages visited, device and browser information, approximate country-level location, and general usage events.

Local and Account Storage

In guest mode, resume data is kept in your browser (for example, in IndexedDB or local storage) and is not uploaded to Cvoop merely because you edit it. Clearing browser data can permanently remove guest resumes.

If you create an account or choose an account feature, the resumes and images you submit are stored on our servers or our cloud storage providers so that we can save, synchronize, and display them to you. They are not public by default.

How We Use Information

1. Provide, maintain, and improve the Service
2. Create and secure accounts and authenticate sign-ins
3. Send email verification and password-reset messages
4. Store, synchronize, and export resumes at your request
5. Process imported resumes when you request that feature
6. Prevent abuse, fraud, unauthorized access, and security incidents
7. Understand aggregate usage through analytics

We do not sell personal information or use Google user data for advertising. Google user data is used only for the purposes described above and in accordance with Google API Services User Data Policy, including its Limited Use requirements.

Service Providers and Sharing

We share information only as needed to provide the Service, comply with the law, or protect the Service and its users. Our providers may include:

1. Google, for Google Sign-In and website analytics
2. Email service providers, for verification and password-reset messages
3. Cloud storage providers, for account resumes, files, and images
4. AI service providers, when you explicitly request resume parsing
5. Payment providers, if you choose to make a donation or payment

These providers process information under their own terms and privacy policies. We do not share Google user data with third parties except service providers acting on our instructions or when required by law.

Cookies and Analytics

We use essential cookies or similar storage for authentication and account sessions. These cookies are not used for advertising or cross-site tracking. Google Analytics 4 may use analytics cookies or similar technologies to measure website usage. You can control cookies through your browser settings.

Retention, Access, and Deletion

We keep account and account-resume data while your account is active, or for as long as needed for the purposes described in this Policy and our legal obligations. You can sign out at any time and request access, correction, or deletion by emailing us.

Signed-in users can delete their account from Account Settings. Account deletion removes the account and associated application records from our database, subject to limited retention required by law, security, backup, or fraud-prevention obligations. To request deletion of data received from Google, email support@cvoop.com or use the account deletion function. We do not retain Google user data after it is no longer needed for the disclosed purpose.

Security and International Transfers

We use reasonable technical and organizational measures, including password hashing, access controls, encrypted connections, and limited-access session records. No online service can guarantee absolute security. Our providers may process information in countries other than your own, subject to their applicable safeguards.

Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13.

Your Rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to processing of your personal information. Contact us to exercise these rights. You may also revoke Cvoop's access from your Google Account security settings; this may prevent Google Sign-In from working until you reconnect it.

Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and change the revision date.

Contact

Questions or privacy requests can be sent to: