1. Introduction

CoolaCV ("we", "us", or "our") is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, and your rights in relation to it. By using CoolaCV, you agree to the practices described in this policy.

2. Information We Collect

We collect the following categories of personal data:

• Account information: your name and email address, provided when you create an account or sign in with Google.
• CV and job description content: documents and text you upload or paste into the Service for analysis and generation.
• Usage data: information about how you use the Service, including features accessed, analysis history, and subscription activity.
• Payment information: billing details processed securely by Stripe. We do not store card numbers or CVV codes.
• Technical data: IP address, browser type, and device information collected automatically when you use the Service.

3. How We Use Your Information

We use your personal data to:

• Provide, maintain, and improve the Service
• Process your CV analyses and generate tailored CV and cover letter content
• Manage your account and subscription
• Send transactional emails (account confirmation, password reset, billing receipts)
• Respond to your support requests
• Detect and prevent fraud or abuse

We do not sell your personal data to third parties, and we do not use your CV content to train AI models.

4. Data Storage and Security

Your data is stored securely using Supabase (PostgreSQL database and file storage) hosted on AWS infrastructure. We implement industry-standard security measures including encryption in transit (TLS) and at rest. Access to your data is restricted to authorised personnel only.

5. Third-Party Services

We use the following third-party services to operate the platform:

• Supabase — authentication, database, and file storage
• Stripe — payment processing
• OpenAI / AI providers — powering CV analysis and generation features

Each provider has their own privacy policy and data processing terms. We only share the minimum data necessary for each service to function.

6. Data Retention

We retain your account data and CV history for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: request a copy of the data we hold about you
• Correction: request correction of inaccurate data
• Deletion: request deletion of your data ("right to be forgotten")
• Portability: receive your data in a structured, machine-readable format
• Objection: object to certain types of processing

To exercise any of these rights, contact us at [email protected].

8. Cookies

We use session cookies to keep you logged in. We do not use advertising or tracking cookies. You can disable cookies in your browser settings, but this may affect your ability to use the Service.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date above. Continued use of the Service after changes constitutes acceptance of the revised policy.

10. Contact

If you have any questions or concerns about this Privacy Policy, please contact us at [email protected].